Privacy and cookies policy

The data controller in connection with the provision of electronic services and the conclusion of a sales contract within the Alasta online store is: Alasta spółka z ograniczoną odpowiedzialnością with its registered office at Niałek Wielki 106, 64-200 Wolsztyn, Republic of Poland, Wielkopolskie Voivodeship, entered in the National Court Register by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 9th Commercial Division of the National Court Register under KRS number: 0000771908, REGON: 382569333, NIP: 9231732328, with a fully paid-up share capital of 18,000.00 PLN (hereinafter also referred to as the “Administrator”). For the purposes of this privacy policy, the following definitions apply: a. Online store: the website available at https://alasta.co.uk, through which the Administrator provides services electronically and enables the conclusion of a sales contract. b. User: an entity that has accepted the Terms and Conditions for using the online store, provision of electronic services, and conclusion of sales contracts.
This privacy policy explains the principles and scope of personal data processing, as well as the rights granted to Users and the obligations of the Administrator as the data controller.
The Administrator has appointed a Data Protection Officer: Kamil Krawczyk. For all matters related to personal data protection, including the exercise of rights related to data processing, contact can be made via email at: privacy@alasta.pl.
The User’s personal data may be processed by the Administrator for the following purposes: a. conclusion, proper execution, or other actions necessary for the implementation of the electronic service contract and sales contract with the User; the legal basis for processing is Article 6(1)(b) of the GDPR[1], b. issuing an invoice/receipt related to the execution of the sales contract and fulfilling other obligations imposed on the Administrator by law or regulation (Article 6(1)(c) of the GDPR), c. legitimate interests related to claims enforcement and protection of the Administrator’s violated rights (Article 6(1)(f) of the GDPR), d. in case of the User’s consent, for marketing purposes (Article 6(1)(a) of the GDPR).
The Administrator processes the following personal data obtained from the User: a. first and last name (in the case of individuals conducting sole proprietorships or authorized representatives of enterprises), b. business name, c. residential or business address, d. email addresses, e. IP address, f. bank account number, g. business tax identification number (NIP).
The Administrator provides electronic services and fulfills contractual obligations based on the actual situation and data provided by the User. In some cases, it is necessary to obtain personal data belonging to a special category to perform the service (Article 9(1) of the GDPR).
Giving consent to the processing of personal data is entirely voluntary; however, lack of consent prevents the creation of a user account in the online store.
The Administrator may transfer personal data to entities processing such data on behalf of the Administrator, in particular: IT service providers, accounting offices, hosting companies, payment operators, postal operators, and transport service providers. These entities process personal data only on behalf and instruction of the Administrator while maintaining all requirements and standards of personal data protection. Personal data may also be processed upon request by authorized state authorities under separate statutory provisions.
The User’s personal data will not be transferred to third countries outside the European Economic Area.
The User’s personal data will be stored for the following periods: a. personal data provided based on consent will be stored until the consent is withdrawn, b. for the purpose of handling potential complaints and claims, personal data will be processed until the statute of limitations of potential claims arising from the electronic service contract accepted by the User.
The User has the right to: a. access their personal data and receive a copy of it, b. rectify (correct) their personal data, c. delete personal data, d. restrict the processing of personal data, e. data portability, f. withdraw consent for processing special categories of personal data, g. lodge a complaint with a supervisory authority – if the User believes that the Administrator processes their data unlawfully, they may submit a complaint to the President of the Personal Data Protection Office or another competent supervisory authority.
If consent is given for data processing for marketing purposes, the User has the right to withdraw consent at any time, which will not affect the provision of services or the execution of the sales contract.
The online store uses “cookies.” Cookies are files that enable devices used to browse the Internet (e.g., computers, smartphones, etc.) to store specific information about the used device. The information recorded in cookies is used, among other things, for advertising and statistical purposes, as well as for adapting the online store to the individual needs of the User. Cookie settings can be changed in the web browser. If these settings remain unchanged, cookies will be stored in the device’s memory.
The entity placing cookies on the User’s device and accessing them is the Administrator. The Administrator also uses tools that utilize cookies provided by external entities such as Google Analytics, Google AdWords, Google Tag Manager (provided by Google Ireland Ltd., Ireland), and Trust Mate (provided by Trust Mate S.A. ul. Bartoszowicka 3, 51-641 Wrocław, Republic of Poland).
Cookies are used to: a. properly adjust the content of the online store and ensure safe use, b. optimize the online store to improve functionality, c. continuously maintain a session related to adding goods to the cart, d. ensure proper execution of the concluded sales contract.
The cookies used in the online store are divided into two categories: a. “Session” cookies – used until the online store is left or the web browser is closed through which access was obtained. b. “Persistent” cookies – used and stored until their use as specified in the file parameters or their deletion in the web browser.
The User may block cookies at any time in the web browser; however, full use of all online store functions will not be possible.
The User may block the collection of data gathered by cookies about the use of the website (including IP address) and their transmission to Google, as well as the processing of this data by Google Ireland Ltd. by downloading and installing the plug-in available at: https://tools.google.com/dlpage/gaoptout?hl=en.
Cookies placed in the User’s device by the online store may also be used by advertisers and partners cooperating with the Administrator.

[1] Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Official statement regarding reviews of our company
The only authorised and official source of reviews about our company is the Trustmate platform. Reviews available on Trustmate come exclusively from verified customers who have actually used our services or made a purchase. We are not responsible for reviews appearing on other websites, as they may be random, unverified, or unrelated to the actual quality of our services.

About false and unauthorised sources of reviews
Please note that only reviews published on Trustmate are recognised by us as reliable and trustworthy. Trustmate verifies whether the person leaving a review was indeed our customer. Any reviews posted on other platforms may be unverified, so we kindly ask you to rely solely on the ratings available on Trustmate.