Privacy Policy of as-pigments.com

Last updated: 19 August 2026

AS COMPANY EUROPA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (“Company”, “we”, “us” or “our”) respects the privacy of users of the as-pigments.com website (“Website”, “you”, “User”) and is committed to protecting personal data in accordance with applicable data protection laws.

This Privacy Policy explains what personal data we collect, how we use it, how we protect it, with whom it may be shared, and what rights you have in relation to your personal data.

The Company processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable laws of the Republic of Poland.

1. Data Controller

For any questions concerning the processing of your personal data or the exercise of your data protection rights, you may contact us using the above contact details.

2. Purposes of Personal Data Processing

We may process personal data for the following purposes:

• providing and administering the Website;
• processing and fulfilling orders;
• processing payments and issuing invoices;
• arranging delivery of products;
• communicating with Users regarding their orders, enquiries and requests;
• responding to messages submitted through contact forms, email, telephone or other communication channels;
• providing information requested by the User;
• managing customer accounts, where applicable;
• improving the quality, functionality and security of our Website and services;
• handling complaints and customer service requests;
• complying with applicable legal and accounting obligations;
• protecting the Company's rights and legitimate business interests;
• sending informational and marketing communications, where permitted by applicable law and where the required legal basis exists.

3. Legal Basis for Processing Personal Data

The Company does not process personal data solely on the basis of consent. Depending on the specific purpose, personal data may be processed on one or more of the following legal grounds permitted under the GDPR:

• the User's consent;
• the performance of a contract or taking steps at the User's request prior to entering into a contract;
• compliance with a legal obligation to which the Company is subject;
• the legitimate interests pursued by the Company or a third party, provided that such interests are not overridden by the interests or fundamental rights and freedoms of the User;
• other legal grounds permitted under applicable data protection legislation.

Where processing is based on consent, the User may withdraw such consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4. Personal Data We May Collect

Depending on how you use the Website and our services, we may collect and process the following categories of personal data:

• name and surname;
• company name and business details, where applicable;
• email address;
• telephone number;
• billing and delivery address;
• date of birth, where necessary and legally permitted;
• information relating to orders and purchases;
• payment and transaction information;
• information provided when contacting us;
• information contained in correspondence with the Company;
• social media account information, where you voluntarily provide it or interact with us through social media;
• photographs or other materials voluntarily provided by the User;
• technical information relating to the use of the Website;
• IP address and information collected through cookies and similar technologies.

We do not intend to collect sensitive personal data unless such collection is necessary and permitted by applicable law.

Payment card details may be processed by third-party payment service providers. Where payment information is handled directly by such providers, the Company may not have access to the full payment card details.

5. Data Storage and Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including the fulfilment of contractual, legal, accounting and legitimate business requirements.

The retention period depends on the type of personal data and the purpose of processing.

For example, information relating to purchases and accounting documents may be retained for the period required by applicable tax and accounting legislation. Personal data processed on the basis of consent for marketing purposes may be retained until the User withdraws consent or otherwise objects to such processing, subject to applicable legal requirements.

After the applicable retention period has expired, personal data will be securely deleted or anonymised, unless further retention is required or permitted by law.

6. User Rights

Subject to the conditions provided by the GDPR and applicable law, the User has the right to:

• request access to their personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of personal data;
• request restriction of processing;
• object to certain types of processing;
• request data portability where applicable;
• withdraw consent where processing is based on consent;
• lodge a complaint with the competent data protection supervisory authority.

To exercise any of these rights, please contact us at info@as-pigments.com.

We may request additional information necessary to verify the identity of the person making the request.

7. Marketing Communications and Notifications

The Company may send Users informational and marketing communications concerning new products, services, special offers, promotions, events and other information related to the Company and its activities.

Marketing communications may be sent by email, SMS, telephone, push notifications and instant messaging applications, including WhatsApp, where applicable and where the Company has an appropriate legal basis to do so.

Where consent is required by applicable law, marketing communications will only be sent after obtaining the required consent.

The User may withdraw their consent to receive marketing communications or object to receiving such communications at any time.

The User may unsubscribe by:

• clicking the “Unsubscribe” link included in a marketing email;
• sending an email to info@as-pigments.com with the subject line “UNSUBSCRIBE”;
• contacting the Company using the contact details provided in this Privacy Policy.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

The Company will process unsubscribe requests without undue delay and in accordance with applicable law.

Please note that withdrawing consent from marketing communications does not prevent the Company from sending necessary transactional or service-related communications. Such communications may include information concerning orders, payments, deliveries, invoices, account security or other services requested by the User.

The Company may use third-party service providers to deliver marketing and transactional communications. Such providers process personal data in accordance with applicable data protection laws and, where required, under appropriate data processing agreements with the Company.

The Company processes marketing communications in accordance with applicable data protection and electronic communications laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Polish legislation.

8. Processing of Technical Data

When you visit the Website, certain technical information may be automatically collected, including:

• IP address;
• date and time of access;
• browser type and version;
• operating system;
• device information;
• referring website;
• information concerning the use and operation of the Website.

This information may be processed for purposes such as ensuring the security and proper functioning of the Website, diagnosing technical problems, improving the Website and analysing its use.

Depending on the circumstances, an IP address or other technical information may constitute personal data under applicable law. Such data will therefore be processed in accordance with the GDPR and applicable legislation.

9. Cookies

The Website uses cookies and similar technologies.

Cookies are small text files stored on your device that allow the Website to recognise your device and remember certain information, such as language preferences and information concerning your use of the Website.

We may use cookies for purposes including:

• ensuring the proper operation of the Website;
• maintaining user preferences;
• improving Website functionality;
• analysing Website traffic and usage;
• improving our services;
• supporting marketing and advertising activities, where applicable and where legally permitted.

Where required by law, non-essential cookies will only be placed or used after obtaining the User's consent.

You may manage or disable cookies through your browser settings or through the cookie consent mechanism provided on the Website. Disabling certain cookies may affect the functionality of the Website.

10. Third-Party Services

The Website may use third-party services and technologies that may collect or process information relating to Website users.

These services may include, where applicable:

• Google Analytics;
• Meta/Facebook technologies;
• payment service providers;
• delivery and logistics providers;
• email and communication service providers;
• hosting and IT service providers;
• customer support and other business service providers.

Third-party providers may process personal data on behalf of the Company or, where applicable, act as independent controllers.

The Company takes appropriate steps to ensure that personal data is processed by third-party service providers in accordance with applicable data protection laws.

Where required, appropriate data processing agreements and other safeguards are implemented.

Third-party services may process data in accordance with their own privacy policies. Users are encouraged to review the privacy policies of relevant third-party providers where appropriate.

11. Payment Processing

Payments made through the Website may be processed by external payment service providers.

Depending on the payment method selected by the User, the relevant payment provider may process payment information necessary to complete the transaction.

The Company does not intentionally collect or store complete payment card information where such information is processed directly by an external payment provider.

Payment providers process personal data in accordance with their own privacy policies and applicable legal requirements.

12. Sharing of Personal Data

The Company may share personal data with third parties where necessary for the purposes described in this Privacy Policy or where permitted or required by law.

Recipients may include:

• payment service providers;
• delivery and courier companies;
• accounting and tax service providers;
• hosting and IT service providers;
• email and communication service providers;
• customer service providers;
• legal and professional advisers;
• government authorities and other public bodies where disclosure is required by law.

The Company does not sell Users' personal data.

Where personal data is transferred to a third party acting as a processor on behalf of the Company, the Company will take appropriate measures to ensure that the processing complies with applicable data protection requirements.

13. International Data Transfers

Some third-party service providers used by the Company may process personal data outside the European Economic Area (EEA).

Where personal data is transferred outside the EEA, the Company will take appropriate measures to ensure that such transfers are carried out in accordance with the GDPR and applicable data protection legislation, including where necessary the use of an adequacy decision, Standard Contractual Clauses or other legally recognised safeguards.

14. Children's Personal Data

The Website is not specifically directed at children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If a parent or legal guardian believes that a child has provided personal data to the Company without the required consent, they may contact us at info@as-pigments.com.

If we become aware that we have collected personal data from a child in circumstances where such collection is not permitted, we will take appropriate steps to delete the information.

15. Links to Other Websites

The Website may contain links to third-party websites that are not operated or controlled by the Company.

The Company is not responsible for the privacy practices, content or security of such third-party websites.

Users are encouraged to review the privacy policies of any third-party websites they visit.

16. Data Security

The Company takes reasonable technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

However, no method of transmission or storage of information over the Internet can be guaranteed to be completely secure.

17. Changes to This Privacy Policy

The Company may update this Privacy Policy from time to time to reflect changes in the Website, our services, applicable legislation or our data processing practices.

Any updated version will be published on this page with an updated “Last updated” date.

Where required by applicable law, Users will be notified of material changes through appropriate means.

18. Contact and Complaints

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your personal data, you can contact the Company at:

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe that your personal data is being processed in violation of applicable data protection law.

19. Final Provisions

By using the Website, Users acknowledge that they have had the opportunity to read this Privacy Policy.

Where processing of personal data requires the User's consent, the Company will obtain such consent in accordance with applicable law.

The inability or refusal to provide personal data that is necessary for the performance of a contract or provision of a requested service may prevent the Company from providing such service or fulfilling an order.

This Privacy Policy is governed by applicable European Union and Polish data protection legislation.