Privacy Policy
Online Store
Seller
Aeroplan Sp. z o.o.
Tax ID (NIP): 8172195092
REGON: 384856491
Address: Wola Mielecka 577b, 39-300 Mielec, Poland
Email: online@aero-plan.pl
Phone: +48 17 770 73 36
- 1 General Provisions
- This document constitutes an annex to the Terms and Conditions. By using our services, you entrust us with your information. This Privacy Policy is intended to help you understand what information and data are collected, for what purpose, and how they are used. This data is very important to us; therefore, we kindly ask you to read this document carefully, as it defines the rules and methods of processing and protecting personal data. This document also defines the rules for the use of “Cookies.”
- We hereby declare that we comply with personal data protection principles and all legal regulations provided by the Personal Data Protection Act and Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
- Any person whose personal data is processed has the right to contact us to obtain comprehensive information about how we use their personal data. We always strive to clearly inform you about what data we collect, how we use it, for what purposes, to whom it is disclosed, what protection we provide when transferring it to other entities, and which institutions should be contacted in case of doubts.
- The Seller applies technical measures such as physical data protection safeguards, IT and telecommunications infrastructure safeguards, software and database protection measures, and organizational safeguards ensuring proper protection of processed personal data. In particular, we protect personal data against disclosure to unauthorized third parties, unauthorized access, use for unknown purposes, accidental or intentional modification, loss, damage, or destruction.
- Under the terms specified in the Terms and Conditions and this document, we have exclusive access to the data. Access to personal data may also be entrusted to other entities through which payments are made, which collect, process, and store personal data in accordance with their own regulations, as well as entities responsible for order fulfillment. Access is granted only to the extent necessary for service performance.
- 2 Privacy Principles
- We take privacy seriously. We respect privacy and ensure maximum comfort when using our services.
- We value the trust our Users place in us by entrusting us with their personal data for order fulfillment. We always use personal data fairly and only to the extent necessary to fulfill the order, including its processing.
- Users have the right to obtain clear and complete information about how we use their personal data and for what purposes. We clearly inform about collected data, how and to whom it is disclosed, and provide contact details for further inquiries.
- In case of doubts regarding the use of personal data, we will promptly clarify and comprehensively answer all related questions.
- We will take all reasonable measures to protect Users’ data from improper and uncontrolled use.
- The data controller is Aeroplan Sp. z o.o., Wola Mielecka 577b, 39-300 Mielec, Poland, biuro@aero-plan.pl.
- The legal basis for processing personal data is Article 6(1)(b) GDPR. Providing data is voluntary but necessary for concluding and performing the contract. Data may also be processed under Article 6(1)(f) GDPR (legitimate interest – proper contract performance). Data may be transferred within the European Economic Area (EEA) and outside it in compliance with applicable law, using standard contractual clauses where required.
- Personal data related to contract performance will be processed during its execution and no longer than required by law, including civil and accounting regulations (no longer than 10 years from the end of the calendar year in which the last contract was completed).
- Data processed for future contracts will be processed until an objection is raised.
- You have the right to access, rectify, erase (right to be forgotten – Art. 17 GDPR), restrict processing (Art. 18 GDPR), object (Art. 21 GDPR), and data portability.
- If you believe your data is processed unlawfully, you may lodge a complaint with the supervisory authority (President of the Personal Data Protection Office, ul. Stawki 2, Warsaw, Poland).
12–17. We apply strict internal procedures, restrict access to authorized personnel only, ensure confidentiality, and allow Users to:
- opt out of communications,
- request a copy of their data,
- update or delete their data,
- report violations.
- 3 Scope and Purpose of Data Collection
We process personal data necessary for:
- placing and fulfilling orders,
- concluding contracts, complaints, withdrawals,
- issuing VAT invoices or receipts,
- website traffic monitoring,
- anonymous statistics,
- newsletter management,
- marketing activities,
- e-commerce personalization systems,
- email and phone communication tools,
- social media integration,
- online payments.
We may collect:
- full name,
- delivery address,
- Tax ID number (NIP),
- email address,
- phone number,
- browser information,
- other voluntarily provided data.
Data is retained only as long as necessary for legal, accounting, marketing, anti-fraud, statistical, or claims-related purposes.
- 4 Cookies Policy
- We automatically collect information contained in cookies. A cookie is a small text file sent to the User’s browser and returned on subsequent visits.
We use:
- session cookies (stored until logout/browser closure),
- persistent cookies (stored for a defined period or until deleted).
- Cookies optimize and personalize the website, maintain sessions, and ensure security.
- We process cookies to:
- optimize website use,
- identify logged-in users,
- personalize content,
- remember form data,
- analyze statistics (including Google Analytics),
- create remarketing lists (Google Ads, Facebook Ads),
- build demographic segments.
4–7. Users may block or delete cookies at any time via browser settings. Blocking cookies may limit website functionality. Detailed instructions are available in browser help sections (Internet Explorer, Chrome, Firefox, Opera, Safari, Android, iOS, etc.).
- 5 Rights and Obligations
- We may disclose personal data to public authorities when required by law.
- Users have the right to access, update, correct, or request deletion of their data at any time.
3–4. Data processing of customers and potential customers is based on:
- legitimate interest,
- consent (e.g., email marketing),
- contract performance,
- legal obligations.
- Profiling:
We may process encrypted (SSL) data such as email, IP, or cookies to analyze preferences and tailor content and marketing offers. - Information on out-of-court dispute resolution: the authorized entity is the Financial Ombudsman (www.rf.gov.pl).
- 6 Basic Security Principles
Users should:
- use updated antivirus software,
- keep systems and browsers updated,
- protect login credentials,
- avoid suspicious email attachments,
- use anti-phishing filters,
- download software only from trusted sources,
- secure Wi-Fi with strong passwords and encryption (e.g., WPA2).
- 7 Use of Social Media Plugins
Our website may contain plugins from social networks such as Facebook and Twitter.
These services are provided respectively by:
- Facebook Inc.
- Twitter Inc.
Plugins transmit information about visited pages and, if logged in, may link browsing activity with your social media account.
For more information, see:
- Facebook Privacy Policy
- Twitter Privacy Policy
To prevent data association, log out of your social media account before browsing our website.
If you would like, I can now:
- prepare a legally polished version for an international (UK/US) audience,
- format this into a ready-to-publish website HTML structure,
- or shorten it into a GDPR-compliant concise Privacy Policy version.
