Privacy Policy
This Privacy Policy explains how GLOBAL SUPPLY GROUP SP Z O O processes your personal data in connection with the pepvanta.com store, in accordance with Regulation (EU) 2016/679 (GDPR/RODO) and the Polish Act on the Protection of Personal Data.
1. Data controller
The controller of your personal data is GLOBAL SUPPLY GROUP SP Z O O with its registered office in Poland at [registered address], NIP [NIP]. In matters concerning the protection of personal data, please contact: info@pepvanta.com.
2. Categories of data
We process: name, email address, telephone number, delivery address, order history, and technical data such as IP address (for security and abuse prevention).
3. Purposes and legal bases
We process personal data in order to: perform the sales contract (art. 6(1)(b) GDPR); comply with legal obligations, including accounting and tax obligations (art. 6(1)(c) GDPR); pursue our legitimate interests, such as preventing fraud and abuse and establishing or defending legal claims (art. 6(1)(f) GDPR); and, where you have given consent, send marketing communications (art. 6(1)(a) GDPR).
4. Recipients and processors
We disclose data to processors acting on our behalf: Supabase (database), Revolut (payments), Resend (transactional email) and Vercel (hosting). Each processor is bound by a data-processing agreement.
5. Transfers outside the EEA
Some processors may process data outside the European Economic Area, for example in the USA. In such cases the transfer takes place on the basis of appropriate safeguards, in particular the European Commission's Standard Contractual Clauses or an adequacy decision.
6. Retention period
Data relating to orders and invoices is retained for 5 years, counted from the end of the calendar year in which the tax obligation arose, in accordance with Polish tax and accounting law. Other data is deleted once it is no longer necessary for the purpose for which it was collected.
7. Your rights
You have the right to access your data and obtain a copy, to rectification, erasure or restriction of processing, to data portability, and to object to processing, as well as the right to withdraw consent at any time without affecting the lawfulness of processing carried out beforehand. To exercise these rights, contact info@pepvanta.com.
8. Right to lodge a complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, if you consider that the processing of your data infringes the GDPR.
9. Cookies
Information about local storage and cookies is set out in our separate Cookie Policy.
10. Changes
We may update this Privacy Policy. The current version is always available on this page.