Effective Date: May 24, 2025

Data Controller:
PEKER Spółka z ograniczoną odpowiedzialnością
ul. Świętokrzyska 30/63, 00-116 Warsaw, Poland
Email: info@pekergroup.pl
Phone: +48 731 736 411

Legal Basis:

• GDPR (EU Regulation 2016/679)
• Polish Personal Data Protection Act (May 10, 2018)
• Consumer Rights Act (May 30, 2014)

1. Data Collected

• Name, surname, email, phone
• Billing and delivery addresses
• Payment data (processed via PayU, no card data stored)

2. Purpose and Legal Basis

• Order fulfillment: GDPR Art. 6(1)(b)
• Legal compliance: invoicing, accounting
• Customer support: GDPR Art. 6(1)(f)
• Marketing: GDPR Art. 6(1)(a)

3. Data Sharing

• PayU (payments), GlobKurier (shipping), public authorities (legal compliance)

4. Data Retention

• Orders: 5 years (tax law)
• Marketing consents: until withdrawn

5. User Rights

• Access, rectification, erasure, restriction, portability, objection
• Contact: info@pekergroup.pl

6. Security

• SSL encryption
• Firewalls, access controls