Privacy Policy
This Privacy Policy explains how PAVED™ ("we", "us", "our") processes your personal data when you use our website www.paved.eu, place an order, subscribe to our newsletter, or interact with us in any other way.
Data Controller:
PAVED™
ul. Cyfrowa 6
71-441 Szczecin, Poland
Email: support@paved.eu
We comply with the General Data Protection Regulation (GDPR) and other applicable EU and Polish data protection laws.
We collect and process the following types of data, depending on your interaction with our site:
- Order & Delivery Data: name, delivery and billing address, phone number, email, products purchased, payment reference, order number.
- Payment Data: transaction identifiers, payment method (Stripe, PayPal, Apple Pay, Google Pay), and related metadata. We never store full card details.
- Contact & Support Data: messages, emails, or enquiries you send us.
- Review Data: nickname and order number (used only to verify purchase).
- Newsletter & Marketing Data: name, email, and preferences when you sign up for our newsletter or promotional updates.
- Technical & Cookie Data: IP address, device information, browser type, language, referral URL, and activity on our site collected via cookies, Google Analytics, and Meta Pixel.
We process your data for the following purposes, on these legal bases, and retain it as described:
- Order processing and delivery — contract performance; retained as required by tax/accounting law (typically 5 years).
- Returns, complaints, customer support — legitimate interest / contract; retained until resolution plus the statutory period.
- Order confirmations and transactional emails — contract performance.
- Newsletters, promotions, product updates — consent; retained until you withdraw consent.
- Site, services and marketing improvement — legitimate interest; until you object or withdraw consent.
- Fraud prevention and website security — legitimate interest.
- Legal compliance — legal obligation; retained as required by law.
All payments are handled securely by third-party processors:
- Stripe Payments Europe, Ltd. (includes Apple Pay and Google Pay)
- PayPal (Europe) S.à r.l. et Cie, S.C.A.
We share only the delivery data necessary to fulfil your order with trusted logistics partners, including Poczta Polska, InPost, and other carriers as needed.
We use Google Analytics and Google Tag Manager to collect anonymised usage information (pages visited, session duration, referrers). These services may process limited personal data such as IP address and device identifiers under Google’s Privacy Policy. Analytics relies on your consent for analytics cookies.
We use Meta Pixel for performance measurement and advertising, including retargeting, conversion tracking, and audience creation. When you consent to marketing cookies, Meta may associate your visit with your account. Meta Platforms Ireland Ltd. acts as joint controller under the Meta Controller Addendum.
We may use advertising and analytics services from Microsoft Advertising (Bing Ads), Pinterest, and TikTok, which may set cookies or tracking pixels to show personalised ads based on your browsing activity.
On your first visit you see a banner to accept or manage cookie preferences. You can change your settings anytime via cookie settings or your browser controls. Essential cookies for cart and checkout remain always active.
We share data only with:
- Payment processors (Stripe, PayPal)
- Logistics partners (Poczta Polska, InPost)
- Marketing and analytics partners (Google, Meta)
- IT and hosting providers
Some providers process data outside the EEA, protected by Standard Contractual Clauses or adequacy decisions. We never sell your personal data.
We retain data only as long as necessary for the purposes described or as required by law, after which it is securely deleted or anonymised.
We apply technical and organisational measures including:
- Secure SSL/TLS encryption on all website traffic
- Restricted access and authentication controls
- Regular updates, backups, and monitoring
- Staff confidentiality agreements and training
- Incident response procedures
Data breaches affecting your rights or freedoms are notified to you and to UODO as required.
You may exercise the following rights:
- Access — obtain a copy of your data
- Rectification — correct inaccurate or incomplete data
- Erasure — request deletion when legally possible
- Restriction — limit processing in certain cases
- Portability — transfer your data to another controller
- Objection — oppose processing based on legitimate interest, including marketing
- Withdraw Consent — withdraw marketing or analytics consent anytime
Contact support@paved.eu to exercise your rights. You may also lodge a complaint with the Polish President of the Personal Data Protection Office (UODO).
Our products and website are not directed toward individuals under 16. We do not knowingly collect data from minors and will delete it promptly upon notification.
We may update this policy periodically, with a new "Last Updated" date published on the website. Major changes are announced via a website banner or email. Continued use of the site indicates acceptance of revisions.