Privacy policy
Last updated: 22.10.2026
On this page we explain what data we collect in the www.aabcooling.de shop, for what purpose and on what basis we process it, how long we store it, to whom we pass it on and what rights you have.
1. Data controller
The controller of personal data (hereinafter the “Controller”) is AAB Armanowski sp.j., with its registered office in Wieluń, ul. Polskiej Organizacji Wojskowej 14, 98-300 Wieluń, entered in the register of entrepreneurs of the National Court Register under KRS number 0000724719, VAT ID (DE) DE320413303, which runs the online shop www.aabcooling.de.
In matters concerning personal data, please contact us via the contact form or by e-mail: helpdesk@aabcooling.com. You can also call +48 43 843 33 03 (Mon–Fri 9:00–15:00) or write to the address of our registered office.
We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation, “GDPR”) and the Act of 10 May 2018 on the protection of personal data.
2. What data we collect
The data needed for logging in, processing the order and shipping the goods are:
- e-mail address,
- first name,
- surname,
- residential address/delivery address for the goods (street name and number, postcode, town, country),
- telephone number.
In addition, those who wish to receive a VAT invoice are asked to provide:
- company name,
- company address (street name and number, postcode, town, country),
- company VAT number (VAT ID).
When you add a review or a question about a product, we collect your first name, e-mail address and the content of the entry. Technical data is also collected when you use the website, e.g. IP address, information about the browser and device, and cookies (section 9).
3. Purposes, legal bases and retention period
| Purpose | Legal basis | How long we store the data |
|---|---|---|
| Registration and maintenance of the Customer account | Article 6(1)(b) GDPR (contract for maintaining the account) | until the account is deleted |
| Conclusion and performance of the sales contract: order, payment, delivery, returns and complaints | Article 6(1)(b) GDPR (contract) | for the duration of the performance of the contract and then until the limitation period for claims expires |
| Invoices, accounting records and other obligations arising from legislation (tax, accounting, consumer) | Article 6(1)(c) GDPR (legal obligation) | for the period required by law – accounting documents, as a rule, 5 years from the end of the calendar year in which the tax payment deadline expired |
| Answering questions sent via the contact form, by e-mail or by telephone | Article 6(1)(f) GDPR (our legitimate interest – providing an answer); where the question concerns an order – Article 6(1)(b) GDPR | until the matter has been dealt with and then until the limitation period for any claims expires |
| Establishment, pursuit and defence of claims | Article 6(1)(f) GDPR (legitimate interest) | until the limitation period for claims expires |
| Newsletter and commercial information | Article 6(1)(a) GDPR (consent) | until consent is withdrawn |
| Publication of reviews and questions about products | Article 6(1)(f) GDPR (legitimate interest – informing other Customers) | for as long as the review or question is published |
| Visit statistics (Google Analytics 4) | Article 6(1)(a) GDPR (consent given in the cookie consent window) | until consent is withdrawn; we store data in Google Analytics for no longer than 14 months |
| Security of the Shop and protection of forms against spam (Google reCAPTCHA, necessary cookies) | Article 6(1)(f) GDPR (legitimate interest – security) | for the time necessary to ensure security, in accordance with the Cookie Policy |
4. Who we pass data on to
Personal data is passed on:
a)to service providers used by the data controller in running the Online Shop, depending on the Customer's choice, namely to the following entities for the purpose of delivering the ordered goods:
- in Poland: InPost (parcel lockers and InPost courier), ORLEN Paczka, DPD, UPS,
- outside Poland: to the carrier selected by the Customer in the basket, in accordance with the Shipping page,
b)if the Customer chooses online payment (BLIK, fast transfer, payment card, Apple Pay, Google Pay), their personal data is passed on to the payment operator IdoPay to the extent necessary to process the payment.
c)recipients of personal data will also include persons authorised by the data controller to process personal data and entities processing personal data on behalf of the data controller under a contract concluded, including the accounting office Jędrysiak Grażyna Biuro Księgowo-Podatkowe, tax ID (NIP): 8320010145, as well as IAI S.A., with its registered office in Szczecin, Aleja Piastów 30, 71-064 Szczecin (provider of the IdoSell shop software).
d)to Google Ireland Limited – the provider of the Google Analytics 4 tools (only after consent has been given in the cookie consent window), Google reCAPTCHA (protection of forms against spam) and Google Maps (map of pickup points when choosing the delivery method).
e)upon request, the Controller discloses personal data to authorised state authorities, in particular to organisational units of the public prosecutor's office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection or the President of the Office of Electronic Communications.
The Controller takes particular care to respect the privacy of Customers visiting the Online Shop. It also undertakes to keep Customer data confidential, not to disclose such data to unauthorised persons and to properly secure this information against access by any unauthorised persons.
5. Transfer of data outside the European Economic Area
In connection with the use of Google tools (Google Analytics 4, Google reCAPTCHA, Google Maps), data such as the IP address, device identifiers and information about the pages visited may be transferred to Google LLC in the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, in respect of which the European Commission has found an adequate level of protection of personal data (decision of 10 July 2023). More information: Google Privacy and Terms.
6. Your rights
Every data subject has the right to:
a)access their personal data and obtain a copy of it,
b)rectification (correction) of data,
c)erasure of data,
d)restriction of the processing of data,
e)portability of data processed on the basis of a contract or consent,
f)object to the processing of data on the basis of the legitimate interest of the Controller,
g)withdraw consent at any time – without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal,
h)lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, www.uodo.gov.pl) if they consider that the processing of data infringes the provisions of the GDPR.
To exercise these rights, please contact us via the contact form or by e-mail. After logging in, every customer can view their data and change (edit) it using the “My account” tab.
7. Voluntary provision of data
Providing personal data is voluntary, with the proviso, however, that failure to provide the data marked in the forms as mandatory makes it impossible to create a Customer account and, when placing an order, to place and fulfil the order.
8. Automated decision-making
We do not take decisions concerning Customers based solely on automated processing of data, including profiling, which would produce legal effects concerning them or similarly significantly affect them. Prices in the Shop are not personalised on the basis of automated decision-making.
9. Cookies
The Shop software stores information in cookies relating to the following areas:
- session information,
- recently viewed products,
- casting a vote in a poll.
We use cookies necessary for the operation of the Shop (e.g. session, basket, remembering the selected consent settings, protection of forms) without consent. We store analytical cookies (e.g. Google Analytics 4) only if you give your consent to this in the consent window; you can change or withdraw your consent at any time.
Details: Cookie Policy. You can change your cookie settings at any time: Manage cookies.
10. Data from the Amazon Selling Partner API
AAB Armanowski Spółka Jawna retrieves data from the Amazon Selling Partner API solely for the company's internal business purposes. The data retrieved includes: VAT invoices, order data, estimated FBA fees, VAT calculation reports, payout statements and messages from buyers.
All data is stored in an encrypted PostgreSQL database on a private server (Hetzner, Germany). The data is not shared with third parties. Personal data contained in invoices (buyer's name, address, NIP/VAT ID) is stored for 5 years in accordance with the Accounting Act (ustawa o rachunkowości) (Art. 74) and EU VAT regulations. Buyer message data is stored for a maximum of 30 days. After the retention period has expired, the data is permanently deleted.
Access to the data is restricted to authorised internal systems and the owner of the company. All access is logged and monitored.
11. Changes to the privacy policy
If the privacy policy is changed, AAB will inform Customers of the change by publishing the new privacy policy on this page, together with the date of the update.
Contact regarding personal data
FastestContact form
E-mailhelpdesk@aabcooling.com
Phone+48 43 843 33 03
AddressAAB Armanowski sp.j., ul. Polskiej Organizacji Wojskowej 14, 98-300 Wieluń