Skip to content

ships in 24–48 h · free from €250

Cart

Privacy Policy

Privacy Policy

As of September 2026

Data controller

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland NIP: 7812104791 | VAT ID: PL7812104791 | KRS: 0001221796 | REGON: 543896303 Email: info@peptidkauf.de

§1 General information

This privacy policy relates to the website www.peptidkauf.de. The controller is ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ based in Poznań, Poland.

Personal data is processed in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the Polish Data Protection Act (Ustawa o ochronie danych osobowych z dnia 10 maja 2018 r.).

We are committed to protecting your privacy. Please direct any questions regarding data protection to info@peptidkauf.de.

  • Order processing (name, address, e-mail, phone if provided, payment information) – legal basis: performance of a contract (Art. 6(1)(b) GDPR). Retention: until the contract is fulfilled plus statutory retention periods.
  • Confirmation of research use and age at checkout (text version, time, shortened hash of the IP address, browser identifier) – legal basis: legitimate interest in evidencing the order conditions (Art. 6(1)(f) GDPR). Stored with the order.
  • Customer account – legal basis: performance of a contract (Art. 6(1)(b) GDPR). Stored until the account is deleted.
  • Back-in-stock notification (e-mail address, product) – legal basis: consent confirmed by e-mail (Art. 6(1)(a) GDPR). Deleted after the notification is sent or on withdrawal.
  • Handling complaints – legal basis: performance of a contract and legal obligation (Art. 6(1)(b) and (c) GDPR).
  • Accounting and taxes – legal basis: legal obligation (Art. 6(1)(c) GDPR). Retention: 5 years after the end of the tax year.
  • Cookieless audience measurement (Plausible, see §7) – legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Error monitoring and security (technical error reports without form contents, server logs) – legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Asserting, exercising and defending legal claims – legal basis: legitimate interest (Art. 6(1)(f) GDPR).
  • Handling enquiries via contact form or e-mail – legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: up to 12 months.

§3 Recipients of personal data

We only pass on your data to the following categories of recipients, who are bound by the GDPR as processors (Art. 28 GDPR) or act as independent controllers as shipping and payment providers:

  • Hosting and database: Hetzner Online GmbH (Germany)
  • Website delivery (content delivery network): BunnyWay d.o.o. (Slovenia), EU data centres only
  • E-mail delivery: our e-mail service provider (order confirmations, payment and shipping notices)
  • Error monitoring: Functional Software, Inc. (Sentry), data stored in the EU region (Frankfurt)
  • Shipping providers: DHL and FedEx (depending on the destination)
  • Banks for SEPA transfers; Revolut Bank UAB (Lithuania) for payments by Revolut
  • Accounting: wFirma sp. z o.o. (Poland)
  • Spam protection for the contact form: Friendly Captcha GmbH (Germany)
  • IT service providers for maintenance and support

§4 Data transfer to third countries

We process your data in the EU. For deliveries outside the EU (e.g. Switzerland, United Kingdom, Norway) we transfer the data required for delivery to the shipping provider and the customs authorities of the destination country (Art. 49(1)(b) GDPR). Sentry processes error reports in the EU; where its US parent company may have access, this is based on the EU-US Data Privacy Framework and standard contractual clauses.

§5 Rights of the data subjects

You have the following rights under the GDPR:

  • Information About Your Processed Data (Art. 15 of the GDPR)
  • Rectification of Inaccurate Data (Art. 16 of the GDPR)
  • Deletion of Your Data (“Right to Be Forgotten,” Art. 17 of the GDPR)
  • Restriction of Processing (Art. 18 GDPR)
  • Data portability in a machine-readable format (Art. 20 of the GDPR)
  • Objection to Processing Based on Legitimate Interests (Art. 21 GDPR)
  • Withdrawal of consent at any time with future effect (Art. 7(3) of the GDPR)

Please send inquiries to info@peptidkauf.de. We will reply within 30 days.

Complaints to the regulatory authority:

Urząd Ochrony Danych Osobowych (UODO) ul. Stawki 2, 00-193 Warszawa, Poland Website: uodo.gov.pl

You can also contact the supervisory authority in your country of residence.

§6 Data security

We use technical and organizational measures in accordance with Art. 32 GDPR to protect your data:

  • SSL/TLS encryption of the entire website
  • Regular updates of software and plugins
  • Access to data according to the principle of minimal rights assignment
  • Regular security backups
  • Encrypted data transmission for payment processing

§7 Audience measurement

We use Plausible Analytics in a self-hosted installation on our servers in Germany. Plausible sets no cookies and stores no IP addresses; visits are counted using a daily changing, irreversible hash. No data is passed to third parties. We do not use advertising, remarketing or tracking pixels (e.g. Google Ads, Meta).

§8 Cookies

We only use technically necessary cookies (Section 25(2) no. 2 TDDDG), so no consent is required:

  • pk_cart – identifier of your cart (30 days)
  • pk_cart_count – number of items for the display in the header (30 days)
  • pk_customer – sign-in to the customer account (until sign-out, at most 7 days)
  • pk_ab_pay – consistent order of payment methods at checkout, only while an order test is running (90 days)

You can delete or block cookies in your browser; the cart and customer account will then not work.

§9 Hosting and server logs

The website and shop are operated by Hetzner Online GmbH in Germany and delivered via the content delivery network of BunnyWay d.o.o. (Slovenia) from data centres in the EU. When you visit the website, server logs record: requested address, date and time, status code, referrer, browser and operating system information and the shortened IP address. Logs are deleted after 7 days.

Processing ensures the functionality and security of the website on the basis of Art. 6(1)(f) GDPR.

§10 Shipping and payment processing

For shipping we transfer your name, delivery address, e-mail and phone number if provided to DHL or FedEx (Art. 6(1)(b) GDPR).

For SEPA transfers and Revolut we match incoming payments to your order by amount, reference and payer name. For payment by Bitcoin we check the transaction ID you submit via a public block explorer; no personal data is transferred in the process. Bitcoin transactions are public and permanently stored in the blockchain. The legal basis in each case is Art. 6(1)(b) GDPR.

§11 Information collected via forms

When using the order or contact form, you provide personal data voluntarily. Mandatory fields are marked as such. The contact form is protected against spam by Friendly Captcha, which solves a cryptographic puzzle in the browser without cookies and without profiling.

If you enter a VAT ID at checkout, we verify it via the European Commission's VIES system.

§12 Automated decision-making and profiling

We do not use profiling or automated decisions within the meaning of Art. 22 GDPR.

§13 Newsletter

If you subscribe to our newsletter, we will process your email address and, if applicable, your first name based on your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time by clicking the unsubscribe link in any email or by sending a message to info@peptidkauf.de.

§14 Multilingual website

The website is available in German and English. The language follows from the address you open (/en/ for English); no cookies are set for this.

§15 Changes to the privacy policy

We reserve the right to adapt this privacy policy to current legal provisions or changes in processing practices. Significant changes will be communicated on the website. We recommend that you check this declaration regularly.

ISAD E-COMMERCE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ ul. Juliusza Słowackiego 55/1, 60-521 Poznań, Poland NIP: 7812104791 VAT ID: PL7812104791 KRS: 0001221796 REGON: 543896303 Email: info@peptidkauf.de