PRIVACY POLICY OF THE ANASTOM.AT ONLINE STORE
1. GENERAL PROVISIONS
This Privacy Policy sets out the principles of processing and protecting the personal data of users of the website available at https://anastom.at (hereinafter: “Website”).
The data controller is:
UNIBUY GMBH SP. Z O.O.
ul. Chmielna 2/31, 00-020 Warsaw
KRS: 0000521647
NIP: 5252597081
REGON: 147469361
Correspondence address: ul. Chmielna 2/31, 00-020 Warsaw
E-mail: kup@anastomat.pl
Personal data is processed in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR),
- The Act on the Protection of Personal Data of 10 May 2018 (Journal of Laws 2019, item 1781),
- The Act on the Provision of Services by Electronic Means of 18 July 2002.
For matters concerning personal data, you may contact us at: kup@anastomat.pl.
2. WHAT DATA WE COLLECT AND FOR WHAT PURPOSE
Providing data is voluntary, but necessary to use selected features of the Website. We process data in the following situations:
a) Contact form / quotation request / consultation request
Scope: first and last name, facility name (optional), e-mail address, telephone number, message content, convenient contact time.
Purpose: to respond to the inquiry and handle correspondence.
b) Placing an order in the store
Scope: first and last name, company/facility details, shipping and billing address, e-mail address, telephone number, and data necessary to process payment.
Purpose: to conclude and perform the sales contract, process and ship the order, handle payment, issue accounting documents, and handle complaints.
The Website is intended exclusively for medical professionals and healthcare entities. To confirm professional status, the user submits an appropriate declaration; this declaration is not linked to additional identifying data.
We do not use profiling or automated decision-making and do not obtain data from additional sources.
3. LEGAL BASIS FOR PROCESSING
- Article 6(1)(a) GDPR — consent (e.g., contact via form),
- Article 6(1)(b) GDPR — necessity for the conclusion or performance of a contract (order fulfillment),
- Article 6(1)(c) GDPR — compliance with legal obligations (including tax and accounting obligations),
- Article 6(1)(f) GDPR — legitimate interest of the controller (handling complaints, pursuing claims, analyzing Website performance).
4. DATA RECIPIENTS
Data may be transferred to entities supporting us in operating the Website and fulfilling orders, only to the necessary extent and on the basis of data processing agreements:
- hosting provider (dhosting.pl),
- payment service providers (payment gateway operators handling payments on the Website)
- courier and postal companies handling shipments,
- e-mail service provider,
- accounting office and entities providing accounting services,
- if necessary — legal advisors.
Data is not sold.
5. DATA TRANSFER OUTSIDE THE EEA
As a rule, data is processed within the European Economic Area (EEA). To the extent that we use providers from outside the EEA (e.g., payment operators or analytical tools from the USA), data transfer takes place on the basis of appropriate safeguards — including the European Commission’s adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses (SCC).
6. DATA RETENTION AND DELETION
We minimize the data retention period.
- Correspondence (form/consultation): for the duration of correspondence; then deleted if no cooperation occurred, or saved in the customer database if cooperation occurred. In case of no response — deleted after 1 month from the last message.
- Orders: for the period necessary to perform the contract and for the time required by law (including accounting documents as a rule for 5 years) and until the expiry of the limitation period for claims.
7. YOUR RIGHTS
You have the right to:
- access your data and obtain a copy thereof,
- rectify your data,
- erase your data (“right to be forgotten”),
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal),
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
To exercise your rights, write to: kup@anastomat.pl.
8. COOKIES
The Website uses cookies. Leaving browser settings unchanged constitutes consent to their use.
We use:
- necessary cookies — essential for the operation of the Website, including handling the shopping cart, shopping session, login, and remembering language and currency selection,
- session cookies — deleted after logging out or closing the browser.
You can manage and delete cookies in your browser settings. Restricting cookies may affect the functionality of the Website.
9. FINAL PROVISIONS
We reserve the right to amend this Privacy Policy — for example, in connection with the development of the Website or changes in legislation. The current version is always available on the Website. In matters not regulated herein, the provisions of the GDPR and Polish law shall apply.
