Privacy Policy

1. Data controller

The controller of personal data is AESON AUTOPART PROSTA SPÓŁKA AKCYJNA, registered office at ul. Dąbrówki 10B/23, 39-300 Mielec, Poland, entered in the National Court Register under KRS: 0001219320, NIP: 8172224310, REGON: 543809362.

Correspondence address: ul. Kwiatkowskiego 2a, 39-300 Mielec. Data protection contact: kontakt@aesonautopart.com.

2. What data we process

We process data you provide voluntarily, in particular: your email address (newsletter/preorder list), and for contact forms also your name, phone number, company name, tax ID (NIP), position and message content.

Technical data (IP address, browser type, date and time of visit) is also collected automatically in server logs and cookies.

3. Purposes and legal bases

Handling form enquiries (contact, partner, fleet), to respond and take steps prior to entering a contract, based on Art. 6(1)(b) and the controller’s legitimate interest (Art. 6(1)(f) GDPR).

Newsletter / preorder list, based on your consent (Art. 6(1)(a) GDPR), collected using a double opt-in model.

Legal obligations (e.g. tax, accounting), Art. 6(1)(c) GDPR.

Establishing or defending claims, based on the controller’s legitimate interest (Art. 6(1)(f) GDPR).

4. Newsletter and preorder

Joining the preorder list uses a double opt-in model: after you submit your email we send a confirmation link, and your data is added to the list only after you click it.

Email delivery is handled by our email-marketing provider Brevo (Sendinblue SAS), based in France (EU), acting as a processor.

You may withdraw consent at any time via the “unsubscribe” link in the footer of each message or by contacting us. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

5. Cookies and similar technologies

We use two categories of cookies: necessary (required for the site to work and for security — including storing your consent choice and protecting forms via Cloudflare Turnstile) and analytics, which we enable only after you give consent.

After consent we use analytics tools: Google Analytics 4 (Google Ireland Ltd.) and Microsoft Clarity (Microsoft Corporation) for anonymous statistics about traffic and how the site is used. We use Google Consent Mode v2: until you consent, these tools store no cookies or identifiers.

The site also loads resources: Google Fonts and Google Maps (Google Ireland Ltd.) and Cloudflare Turnstile (Cloudflare, Inc.).

You can change or withdraw your consent at any time via “Cookie settings” in the site footer, and manage cookies in your browser settings.

6. Server logs

The site is hosted on Cloudflare infrastructure. Logs record data such as IP address, browser information and request time, for diagnostic, statistical and security purposes.

7. Data recipients

Data may be shared with trusted processors only to the extent necessary to achieve the stated purposes, under data processing agreements: email-marketing provider (Brevo/Sendinblue SAS, France), hosting and security provider (Cloudflare, Inc.), analytics providers with your consent (Google Ireland Ltd. — Google Analytics; Microsoft Corporation — Clarity) and font/map providers (Google).

8. Transfers outside the EEA

Some providers (Cloudflare, Google, Microsoft) are linked to countries outside the European Economic Area. Any transfer takes place only with appropriate safeguards, in particular the Standard Contractual Clauses approved by the European Commission and the Data Privacy Framework.

9. Data retention

Data processed on the basis of consent is kept until consent is withdrawn. Form data is kept for as long as needed to handle the matter and until the limitation periods for potential claims expire. Data resulting from legal obligations is kept for the period required by law.

10. Your rights

You have the right to: access your data, rectification, erasure (the “right to be forgotten”), restriction of processing, objection, data portability, and to withdraw consent at any time.

To exercise your rights, contact us at kontakt@aesonautopart.com.

11. Complaint to a supervisory authority

If you believe that the processing of your data infringes the law, you have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

12. Voluntariness of providing data

Providing data is voluntary, but in some cases (e.g. answering an enquiry, newsletter signup) it is necessary to provide the relevant service.

13. Changes to this policy

This Policy may be updated from time to time. The current version is always available on this page together with the date of the last update.