Privacy Policy

---

Effective Date:  01 October 2025

DERASTA Sp. z o.o. (“we”, “our”, “us”) respects your privacy and is committed to protecting the personal and business information you share with us.

This Privacy Policy explains how we collect, process, and protect your data when you:

• Open a B2B account with us
• Place an order via email
• Use our website or services
   

This policy complies with:

• Polish GDPR implementation law (RODO)
• UK Data Protection Act 2018

We only collect data necessary to provide our services and comply with legal obligations.

• Company name and trading name 
• Registration and VAT numbers
• Registered and delivery addresses 
• Contact person details (name, email, phone)
• Bank details for verification (if applicable) 
• Nature of business and intended use of products
   

• Order details (products, quantities, dates) 
• Correspondence (email communications, quotations, confirmations) 
• Payment information related to invoices

We process your information to:

• Verify and onboard B2B clients in accordance with our Terms of Business.
• Manage orders, deliveries, and payments.
• Comply with legal obligations including tax, customs, and regulatory requirements.
• Communicate with clients regarding orders, product updates, or compliance matters.
• Prevent misuse or diversion of controlled products.

We process data on the following legal grounds:

• Contractual necessity – to fulfil our obligations under the Terms of Business.
• Legal obligation – to comply with applicable EU, Polish, and UK law.
• Legitimate interests – to maintain security, prevent misuse, and protect our business.

We may share your data with:

• Shipping and logistics providers for delivery purposes
• Authorities and regulators if required by law
• Professional advisers (auditors, legal, or tax consultants) where necessary
   

We do not sell or trade your data for marketing purposes.

You have the right to:

• Request access to your personal or business data
• Correct inaccuracies in the data
• Request deletion or restriction of processing, where permitted by law 
• Object to processing on legitimate grounds
• Lodge a complaint with the Polish Data Protection Authority or the UK ICO
   

Requests should be submitted in writing via info@derasta.pl.

We implement appropriate technical and organisational measures to protect your data against:

• Unauthorised access or disclosure
• Accidental loss, destruction, or damage
   

All personnel handling your data are trained and bound by confidentiality obligations.

We may update this Privacy Policy to reflect legal, operational, or regulatory changes.
The effective date at the top will indicate the current version. 

For questions or requests regarding data privacy:

DERASTA Sp. z o.o.
ul. Solipska 3/5, 02-482 Warszawa, Poland
Email: info@derasta.pl
Phone: +48 665 930 686