Legal Notice

1.Data Administrator

The data controller responsible for data processing is the company PETTIVE, located in Poznań.


Here are our contact details:


PETTIVE ul. Stanisława Przybyszewskiego 66/7 60-357 Poznań Poland

NIP (Tax Identification Number): 7842355428

Email: info@pettive.com


Contact details of our data protection officer can be found at the end of this Privacy Policy.

 2.Terms and Definitions

The term "personal data" refers to information about an identified or identifiable natural person, hereinafter referred to as the "data subject." An identifiable person is one who can be identified directly or indirectly using identifiers such as name, surname, identification number, location data, internet identifier, or other factors determining physical, physiological, genetic, mental, economic, cultural, or social identity.
Examples of personal data include computer IP address, name and surname, postal address, phone number, and date of birth. Throughout the document, the term "personal data" is also used as „data.”

3. Categories of Processed Data

We provide information about the data processed when visiting our websites, placing orders in the PETTIVE online store, and using other features of websites and mobile applications.
3.1 Access Data Related to Visiting Websites:

When visiting websites, we store access data, such as visit date and time, referring website, browser type and language settings, visited pages, and the amount of data transmitted, including the requesting entity's name.
3.2 Data Provided by You:

We process data that you provide when placing orders, creating a customer account, subscribing to the newsletter, or getting in touch. This includes contact details, order data, and payment-related information.
3.3 Data from External Entities:

Within the limits allowed by data protection regulations, we collect data about you from external entities, especially regarding credit assessment when choosing the "Invoice" payment method.
3.4 Cookies:

We use cookies to enhance the appeal of websites, enable orders in the PETTIVE online store, and customize websites to users' needs by collecting statistical information about user behavior.

4.Legal Basis for Data Processing 

  • We process your data in accordance with applicable legal regulations and only to the extent permitted by these regulations. The legal bases for processing personal data include:
  • Consent (Art. 6(1)(a), Art. 7 RODO): We process data when we receive your explicit and voluntary consent, which can be withdrawn at any time.
  • Contract Performance or Pre-contractual Measures (Art. 6(1)(b) RODO): We process data when necessary to perform a contract or take pre-contractual actions at your request.
  • Compliance with Legal Obligations (Art. 6(1)(c) RODO): We process certain data to fulfill our legal obligations, such as tax requirements
  • Vital Interests (Art. 6(1)(d) RODO): We process data when necessary to protect your or other individuals' vital interests.
  • Legitimate Interests (Art. 6(1)(f) RODO): We process data to protect our or third parties' legitimate interests, except where your interests require personal data protection.

5.Purposes of Data Processing

We process your personal data for the following purposes:
5.1 Providing Our Websites: We process access data to ensure the smooth operation of websites, improve offerings, especially the PETTIVE online store. The legal basis is Art. 6(1)(b) and Art. 6(1)(f) RODO for optimization and securing IT systems.
5.2 Contact: We process contact data provided by you to respond to your inquiries in accordance with Art. 6(1)(b) RODO.
5.3 Processing Data in Connection with the Contract: Customer Account: We process customer data based on Art. 6(1)(b) RODO to create and manage accounts and fulfill the contract.

  • Guest Order: Guest order data is processed based on Art. 6(1)(b) RODO for order fulfillment.
  • Newsletter: We process data for newsletter delivery based on consent provided during subscription (Art. 6(1)(a), Art. 7 RODO).

5.4 Customer Support and Service: We process contact data to resolve order-related doubts, according to Art. 6(1)(b) or Art. 6(1)(d) RODO.
5.5 Direct Marketing After Purchase: We send information about similar products after purchase based on our legitimate interest (Art. 6(1)(f) RODO) or consent (Art. 6(1)(a), Art. 7 RODO).
5.6 Abandoned Carts, Wishlist Products: We send information about abandoned carts or wishlist products to remind you, based on our legitimate interest (Art. 6(1)(f) RODO) or consent (Art. 6(1)(a), Art. 7 RODO).
5.7 Personalized Advertising: We process data for personalized advertising based on your consent (Art. 6(1)(a), Art. 7 RODO) or legitimate interest (Art. 6(1)(f) RODO).

6.Google reCAPTCHA V2 Service
On our website, we use the reCAPTCHA V2 service provided by Google Inc., located at 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. In Europe, Google Ireland Ltd. (service provider) at Gordon House, Barrow Street, Dublin 4, Ireland, is responsible for all Google services.
By employing Google reCAPTCHA technology, when a user enters data on our website (e.g., in a contact form), we can determine whether they are human or a robot or other spamming software. User behavior is analyzed in the background and added to the result of the captcha verification test.
The purpose of using this tool is to ensure the accessibility of our website by preventing communication with us by machines or malicious software.
During website visits, Google reCAPTCHA V2 technology collects the following personal data through cookies: Previously installed Google cookies, previous interactions with the browser, number of mouse movements and keyboard strokes, duration of the visit, IP address, visit date, redirecting page URL, browser plugins, browser settings or language, device location, full screenshot of the browser window, operating system, if a user is logged into their Google account while using the Google reCAPTCHA plugin, their personal data will be merged. To prevent this, users should log out of their Google account before visiting our website.

7.Google Ads
Our website uses Google Ads as an internet marketing tool. The service provider for Google Ads is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Ireland Limited (Gordon House, Barrow Street Dublin 4, Ireland) is responsible for all Google services in Europe.
If a user reaches our website through an advertisement placed by Google, Google Ads will place a tracking cookie on their computer. The conversion tracking cookie is set when a user clicks on an ad placed by Google.
For more information on data processing and withdrawing consent by Google, refer to Google's privacy policy: Google Privacy Policy. Users can also change privacy settings in the privacy center section.

8.Facebook Social Plugins (Shariff Solution)
Social plugins from the Facebook service, operated by Meta Platforms Inc. or, in Europe, by Meta Platforms Ireland Limited at 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are used on our website. These plugins are marked with the Facebook logo and allow content sharing (Share, Follow, or Like buttons) with social groups to increase the reach of our products.
When a user visits our site with a Facebook plugin, the browser establishes a direct connection with Facebook servers. Data contained in the plugin is transmitted by Facebook directly to the user's browser, which then integrates it with the website. Facebook receives information that the user has visited a particular page, including IP address, browser type and version, transferred by the user's browser to Facebook servers in the USA.
If a user is logged into their Facebook account, Facebook can associate their visit with their account. To prevent this, users should log out of their Facebook account before visiting our website. We have implemented the Shariff solution on our website, so the connection to the Facebook server is only established when the user actually uses the plugins.
For more information on the purpose and scope of data collection and processing by Facebook, please refer to the privacy policy of the provider. Users can also find additional information about their rights and privacy settings: Facebook Privacy Policy.
Please refrain from using this service if you do not wish your data to be processed in the United States. Consent withdrawal: Previously given consent can be withdrawn at any time for future effect. If users want to withdraw consent or prevent tracking of their activity on our website, they need to withdraw consent for the relevant category of cookies or all technically unnecessary cookies and data transfers [here](link to the cookie consent tool). However, this may prevent or limit the functionality of our website. It is also possible to prevent the loading of Facebook plugins using special extensions for individual browsers:

9.Data Transfer to External Entities
Your data will be transferred only to carefully selected service providers and businesses cooperating with us, who are obligated by contract to comply with the requirements of data protection regulations. In other situations, your data will only be transferred if there is a legal obligation to do so. Further information about the companies to which we transfer data is provided later in this document.

9.1 Transfer within Associated Units: We may transfer your data to our associated units for purposes related to central database storage and for purposes related to aggregate settlements and internal accounting within the group in connection with the conclusion of a contract and its performance. The legal basis for data processing is Art. 6(1)(b) or Art. 6(1)(f) RODO.

9.2 Transfer to Service Providers: We collaborate with several service providers (referred to as "service providers") who work on our behalf to manage our websites and optimize them, fulfill contracts, and process payment transactions. This includes, for example, hosting our websites, placing advertisements, delivering ordered goods, assessing the risk of default, processing payment transactions, sending newsletters, and providing customer service and technical support. We provide these service providers with data to the extent necessary for the provision of our websites or contract performance or in cases where it serves the purpose of protecting our legitimate interests. The legal basis for data processing is usually Art. 6(1)(b) or Art. 6(1)(f) RODO. These service providers mainly work for us as "data processors" and may use the data only in accordance with our instructions. We are legally responsible for the service providers processing data on our behalf, ensuring the appropriate data processing policies are followed, and we have established appropriate data protection and security systems with them.

9.3 Transfer to Other External Entities: In other cases, we only transfer your data to third parties or authorities if we have a legal obligation to do so in accordance with current data protection laws, such as official or court orders or if we are entitled to do so, for example, to enforce claims under criminal law or to fulfill or assert our rights or claims. The legal basis for such data processing is Art. 6(1)(c) and Art. 6(1)(f) RODO.

10.Data Storage Period, Data Deletion

We store your data only for as long as necessary for the purposes for which it was collected or as required by legal retention periods. We retain data after these circumstances occur if and as long as

  • the retention of such data is necessary due to legal obligations,
  • the data is still necessary to establish the existence or assertion of legal claims or defense against legal claims, e.g., in connection with technological and investigative requirements to defend against potential attacks on our servers and their prosecution,
  • deletion would be inconsistent with the legitimate interests of the persons to whom the data relates, or
  • an exception applies as specified in Art. 17(3) RODO.

11. Your Data Protection Rights

As visitors to our websites or customers of our PETTIVE online store, you have various rights under the RODO. To exercise your rights with us, please use the contact information provided in the Contact section so that we can identify you clearly.

Here are the key rights you have as an individual whose data is processed:

11.1 Right to Confirmation and Access: You have the right to obtain confirmation from the controller as to whether personal data concerning you is being processed, and, if so, you have the right to access your personal data and obtain further information as provided by law.

  • Right to Rectification of Data: You have the right to demand that the controller correct any inaccurate personal data concerning you without undue delay. Taking into account the purposes of processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
  • Right to Erasure (Right to be Forgotten): You have the right to demand that the controller erase personal data concerning you without undue delay, and the controller must erase this data if one of the grounds specified in the law applies and if processing is not necessary.

11.2 Right to Restriction of Processing: You have the right to demand that the controller restrict the processing of your personal data if one of the grounds specified in the law applies.

11.3 Right to Object: You have the right, on grounds relating to your particular situation, to object to the processing of your personal data at any time. We will then no longer process the personal data unless there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, or unless processing serves the purpose of establishing, exercising, or defending legal claims.

11.4 Right to Data Portability: You have the right to receive your personal data in a structured, commonly used, and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data has been provided.

12. Automated Processing of Personal Data

Processing your personal data solely by automated means is only carried out if it is necessary for entering into or performing a contract, and if it does not have any legal or similar effects on you.

13.Complaints to the Supervisory Authority

If you have complaints regarding the processing of your personal data, you have the right to lodge a complaint with the competent data protection authority responsible for your place of residence or country.