1. Data controller

The controller responsible for data processing under the General Data Protection
Regulation (GDPR) is:
AEON INTERNATIONAL (EUROPE) SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Powstańców Wielkopolskich 97, 64-500 Szamotuły, Poland
Phone: +48 667 400 816
Email: poland@aeon-online.com

2. Your rights as a data subject

You have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR)
• Right to rectification or erasure (Art. 16, 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to object to processing (Art. 21 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent at any time (Art. 7 (3) GDPR)

You also have the right to lodge a complaint with a data protection supervisory
authority regarding our processing of your personal data.

3. Collection of general information when visiting our website

When you access our website, the browser used on your device automatically sends
information to our server (including IP address, date and time of the request, browser
type, operating system used, and the previously visited page). This data is
temporarily stored in a log file. Processing is based on Art. 6 (1)(f) GDPR (legitimate
interest in the technically error-free presentation and optimisation of our website as
well as ensuring IT security).

4. Cookies and web storage

Our website uses cookies and comparable storage technologies. Cookies are small
text files stored on your device. We use the following categories of cookies:

• Strictly necessary cookies – e.g. to manage your shopping cart
  (WooCommerce session), to store your language preference (Polylang), and to
  maintain shop functionality during your visit. Legal basis: Art. 6 (1)(f) GDPR.
• Cache-related storage – used to deliver page content efficiently
  (e.g. via W3 Total Cache); no personal profiles are created in this process.

You can prevent the storage of cookies through the corresponding settings in your
browser software; please note that in this case you may not be able to use all the
functions of this website to their full extent (e.g. the shopping cart).

5. Contacting us via the contact form

If you send us enquiries via the contact form (Contact Form 7), the details you
provide, including the contact data you give there, are stored by us for the purpose of
processing your enquiry and in case of follow-up questions. We do not pass on this
data without your consent. Processing is based on Art. 6 (1)(b) GDPR (pre-contractual
measures) and/or Art. 6 (1)(f) GDPR (legitimate interest in responding to your
enquiry).

6. Google reCAPTCHA

To protect our contact forms from abusive use (spam), we use the “reCAPTCHA”
service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4,
Ireland (“Google”). This involves the transmission of an IP address and other data
required by reCAPTCHA to Google. Processing is based on our legitimate interest in
protecting our website from abusive automated access (Art. 6 (1)(f) GDPR). For more
information, please see Google’s privacy policy:
https://policies.google.com/privacy.

7. Order processing and customer account

To process orders placed in our online shop (WooCommerce), we collect and process
the data necessary to fulfil the contract (name, billing and shipping address, email
address, phone number, company name, order details). Processing is based on Art. 6
(1)(b) GDPR (performance of the purchase contract) and Art. 6 (1)(c) GDPR (statutory
retention obligations under commercial and tax law). If you create a customer
account, we process the data required for this also on the basis of Art. 6 (1)(b) GDPR.

8. Payment processing

We use WooCommerce Payments, which is based on Stripe’s payment infrastructure,
to process payments in our shop. As part of payment processing, the payment and
transaction data required for this purpose is transmitted to the payment service
provider. This transmission is based on Art. 6 (1)(b) GDPR (performance of the
contract). This may involve a transfer of data to third countries (e.g. the USA); the
respective payment service provider ensures appropriate safeguards (e.g. EU
Standard Contractual Clauses).

9. Product enquiries

Using the “Ask about price and availability” function on our product pages, you can
send us non-binding enquiries about individual products. We process the data
provided (in particular name and email address) exclusively to answer your enquiry,
on the basis of Art. 6 (1)(b) and/or (f) GDPR.

10. Newsletter

If you subscribe to our newsletter, we use the “Mailchimp” service provided by Intuit
Inc., 2700 Coast Avenue, Mountain View, CA 94043, USA, for this purpose. Your email
address is processed on the basis of your consent (Art. 6 (1)(a) GDPR) for the
purpose of sending the newsletter and is transmitted to Mailchimp. This involves a
transfer of data to the USA; Mailchimp/Intuit has committed to appropriate safeguards
(including EU Standard Contractual Clauses). You can withdraw your consent at any
time with future effect via the unsubscribe link contained in every newsletter email.

11. Retention period

We only store personal data for as long as necessary to fulfil the respective purposes
or as required by statutory retention obligations (in particular commercial and tax law
obligations of generally 6 to 10 years for order and invoice data).

12. Changes to this privacy policy

We reserve the right to amend this privacy policy to ensure it always complies with
current legal requirements or to reflect changes to our services. The new privacy
policy will then apply to your next visit.

Last updated: June 2026