1. Controller
The controller responsible for processing personal data on this website is:
Sebastian Żmijewski (Viperys brand)
Wiktorowo 32
86-330 Mełno
Poland
Phone: +48 574 468 089
Email: info@viperys.com
This privacy policy explains, in accordance with the General Data Protection Regulation (GDPR), which personal data we collect, for what purposes and on what legal basis.
2. Hosting and server log files
Our shop is hosted by a provider in the European Union. When you visit the website, technical data is processed automatically (IP address, date and time, page visited, referrer, browser and operating system). We need this data to provide the website securely and reliably (Art. 6(1)(f) GDPR). Log files are deleted after 30 days at the latest unless they are needed to investigate a security incident.
3. Orders and customer account
When you place an order or create a customer account, we process the data you provide (e.g. name, address, email address, phone number, order details) to perform the contract, ship your order and communicate with you (Art. 6(1)(b) GDPR). We keep order and invoice data for the periods required by commercial and tax law (Art. 6(1)(c) GDPR). You can ask us to delete your customer account at any time.
4. Shipping
To deliver your order, we pass your name, delivery address and – where needed for delivery notifications – email address and phone number to the shipping company (GLS, FedEx). Legal basis: Art. 6(1)(b) GDPR.
5. Payment providers
Depending on the payment method you choose, we pass the data required for payment to:
- PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg),
- Stripe for cards, Przelewy24 and BLIK (Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Dublin, Ireland).
The payment providers process your data to handle the payment and to prevent fraud, partly as independent controllers (Art. 6(1)(b) and (f) GDPR).
6. Contact and live chat
If you contact us by email, through the contact form or the live chat, we process your details to answer your enquiry (Art. 6(1)(b) or (f) GDPR). For the live chat we use Tidio (Tidio LLC, USA). Chat messages and technical data may be transferred to Tidio; transfers to the USA are based on EU Standard Contractual Clauses.
7. Newsletter
If you subscribe to our newsletter, we use your email address to send you information about our products and offers (Art. 6(1)(a) GDPR). You can unsubscribe at any time using the link in every email or by writing to info@viperys.com.
8. Cookies and consent
We use technically necessary cookies so that the shop works (e.g. cart, language, login). All other cookies and similar technologies for statistics and marketing are only used with your consent (Art. 6(1)(a) GDPR), which we manage with a cookie banner. You can change or withdraw your choice at any time in the cookie settings.
9. Analytics and marketing (only with consent)
- Google Tag Manager, Google Analytics 4 and Google Ads (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland): website analytics, conversion tracking and remarketing. We use Google Consent Mode – without consent no analytics or advertising cookies are set.
- Pinterest Tag (Pinterest Europe Ltd., Dublin, Ireland): measuring orders from Pinterest ads.
- TikTok Pixel (TikTok Technology Limited, Dublin, Ireland): measuring orders from TikTok ads.
Data may also be transferred to the USA; such transfers are based on the EU-US Data Privacy Framework or EU Standard Contractual Clauses.
10. Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You can withdraw any consent at any time with effect for the future. Just write to info@viperys.com.
You also have the right to lodge a complaint with a data protection authority, e.g. the Polish authority (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw) or the authority in your country of residence.
11. Storage period
We keep personal data only as long as necessary for the purposes above or as required by law. After that, the data is deleted.
Last updated: October 2026