Privacy Policy
This Privacy Policy applies to the online store operated at picabec.com. The controller of your personal data is Peyote Sp. z o.o. with its registered office in Janki, ul. Mszczonowska 48, 05-090 Raszyn, Poland, entered in the register of entrepreneurs of the National Court Register under number 0001010721, NIP 5342658923 — the owner of the Pic à Bec brand.
The Controller has not appointed a Data Protection Officer. In matters relating to personal data, you may contact us by email at: customerservice.eu@picabec.com or by post at: Peyote Sp. z o.o., ul. Mszczonowska 48, 05-090 Raszyn, Poland.
Purposes and legal basis for processing personal data
1. Purchases and online services
We process your data primarily in order to conclude and perform a sales agreement, including handling orders, payments, deliveries, returns, complaints and contacting you regarding your order. We may also process data to ensure the security and proper functioning of the Service, handle enquiries, establish, pursue or defend claims, conduct basic analytics and — with your consent or where permitted by law — send marketing communications relating to Pic à Bec products, collections and events.
Providing the data necessary to place and fulfil an order is a condition for concluding and performing the sales agreement. Failure to provide such data will prevent us from fulfilling the order. Providing data for marketing purposes, newsletter purposes or product availability notifications is voluntary.
Where an agreement is concluded and performed, and where services you wish to use are provided, your personal data is processed on the basis of the sales agreement, i.e. Article 6(1)(b) GDPR. In other cases, the legal basis for processing may be the Controller's legitimate interest, in particular ensuring the security of the Service, handling correspondence, establishing, pursuing or defending claims, conducting basic analytics and direct marketing of our own products, where permitted by law.
2. Presentation of the offer, advertising, market research, data analysis, product and technology development
We may analyse the way you use the Service, your purchase history and your responses to our content in order to develop the Pic à Bec offering, improve the functioning of the Service, measure the effectiveness of communications and — with your consent or where permitted by law — present content tailored to your interests. For this purpose, we may use statistical, aggregated, anonymised or pseudonymised data.
For this purpose, we may use data relating to your use of the Service, device data, data stored in cookies or similar technologies and data received from our partners — to the extent that you have given the appropriate consent or where permitted by law.
The legal basis for processing data for marketing purposes may be the Controller's legitimate interest consisting in the direct marketing of its own products — Article 6(1)(f) GDPR — or your consent — Article 6(1)(a) GDPR. Consent is the legal basis for processing in particular where required by regulations on electronic communications, cookies, advertising pixels or similar technologies.
3. Service optimisation
We may also process data to ensure the security of the Service, prevent abuse, handle enquiries, comply with legal obligations — in particular tax and accounting obligations — and establish, pursue or defend claims.
The legal basis for processing data is the Controller's legitimate interest consisting in ensuring security, optimising the operation of the Service, handling enquiries and establishing, pursuing or defending claims — Article 6(1)(f) GDPR. To the extent that processing is necessary to comply with legal obligations, in particular tax or accounting obligations, the legal basis for processing is Article 6(1)(c) GDPR.
Legal bases for data processing
Depending on the purpose of processing, the legal basis for processing your data may be:
a) performance of a contract or taking steps prior to entering into a contract — Article 6(1)(b) GDPR;
b) compliance with legal obligations imposed on the Controller, in particular tax and accounting obligations — Article 6(1)(c) GDPR;
c) the Controller's legitimate interest, in particular ensuring the security of the Service, handling enquiries, establishing, pursuing or defending claims, basic analytics and direct marketing of its own products — Article 6(1)(f) GDPR;
d) your consent — Article 6(1)(a) GDPR — in particular in the case of the newsletter, marketing communications through selected channels, analytical or marketing cookies and similar technologies.
What data we process
Depending on how you use the Service, we may process the following categories of data: first and last name, email address, telephone number, delivery address or billing address, tax identification number in the case of an invoice, data relating to orders and payments, bank account number in the case of refunds, the content of correspondence with us, and technical data such as IP address, cookie identifiers, information about your device, browser and activity in the Service.
Rights of persons whose data is processed
You have the right to access your data, obtain a copy of your data, rectify your data, erase your data, restrict processing, data portability, object to processing and withdraw consent at any time, where processing is based on consent. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office: ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland. If you live or stay in another EU or EEA country, you may also contact the competent local data protection supervisory authority.
Submitting requests and exercising your rights will not affect actions already carried out by us. We will respond to your request no later than within one month of receiving it, unless the law provides for the possibility of extending this period.
Where data is processed for direct marketing purposes, you may object at any time.
Contact regarding personal data
You may submit any notices or requests relating to personal data in the following ways:
- By email to: customerservice.eu@picabec.com.
- By post to: Peyote Sp. z o.o., ul. Mszczonowska 48, 05-090 Raszyn, Poland.
Personal data retention period
We store personal data for the period necessary to achieve the purpose for which it was collected. In particular:
a) account data — for the duration of the account;
b) transaction data — for the period required by tax and accounting regulations;
c) customer service data — generally for 2 years from the contact;
d) marketing data — until consent is withdrawn or an effective objection is raised;
e) data related to product availability notifications — for no longer than 6 months;
f) data necessary to establish, pursue or defend claims — until the limitation period for such claims expires.
If the laws applicable to a given market require a longer or shorter retention period for certain data, we apply the period required by those laws.
Entrusting processing or sharing data
We may share your data with entities that support us in operating the Service and fulfilling orders, in particular providers of payment, courier, warehousing, hosting, IT, analytics, marketing, accounting, legal and customer service services. Depending on the nature of the cooperation, these entities act either as our processors or as separate data controllers.
We ensure the secure processing of your personal data by applying effective and appropriately tailored technical and organisational measures.
Transfers of data outside the EEA
Some of our providers may process data outside the European Economic Area, in particular in the United States. Where data is transferred outside the EEA, we apply mechanisms provided for under the GDPR, including European Commission adequacy decisions, standard contractual clauses, the EU-US Data Privacy Framework — where the recipient in the United States is covered by it — or other appropriate safeguards required by law. You may contact us to obtain more information about the safeguards applied to data transfers.
Newsletter and marketing communications
You may subscribe to the newsletter or other marketing communications by providing your email address or telephone number — depending on the selected communication channel — and by giving the appropriate consent, where required by applicable law. Consent may cover the selected communication channel, such as email, SMS or other electronic means of communication. Consent is voluntary and may be withdrawn at any time.
If you have given the appropriate consent or where permitted by law, we may also send you information about products left in your cart or an unfinished order. You may unsubscribe by clicking the link in the message or by contacting us at customerservice.eu@picabec.com.
Product availability notification
If you wish, we may send you electronic information about the availability of products indicated by you. When the product becomes available, you will receive a notification at the email address provided. Providing data is voluntary, but necessary to receive the notification.
Technical data and cookies
When you use the Service, we automatically process certain technical data, such as IP address, cookie identifiers, information about your device, browser, operating system and activity in the Service. We use this data to ensure the proper functioning of the Service, security, statistics and — with your consent — to tailor content and advertisements to your interests.
Cookies
Detailed information about cookies, their categories, retention periods and the possibility of managing consents can be found in our Cookie Policy.
Depending on the country from which you use the Service, the scope of required consents and available cookie settings may differ in accordance with local laws.
Automated decisions and profiling
We do not make decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you. However, we may carry out basic user segmentation and personalise marketing content if you have given the appropriate consent or where permitted by law.
Logging in through social media accounts
In the Service, you may use the option to log in through selected external accounts, such as Google or Apple, if such functionality is available. In such a case, we receive the data necessary to create or operate the account, in accordance with the settings of the selected provider.
Meta Custom Audiences, Meta Pixel and other similar technologies
If you have given the appropriate consent or where permitted by law, we may use Meta advertising tools, such as Meta Pixel or Meta Custom Audiences. These tools help us measure the effectiveness of advertisements and present content relating to Pic à Bec products to people who may be interested in them. Data used in these tools may include cookie identifiers, information about activity in the Service or hashed contact data, such as an email address or telephone number.
Information regarding the Pic à Bec brand profile on social media platforms
We maintain Pic à Bec profiles on social media platforms such as Facebook, Instagram, YouTube, Pinterest and TikTok. If you visit our profiles or contact us through them, we may process data visible in your profile, the content of messages, comments and reactions, as well as aggregated statistics provided by the administrators of those platforms.
The administrators of social media platforms also process data for their own purposes, in accordance with their own privacy policies. Detailed information can be found in the privacy policies of the relevant platforms.
Google Analytics data protection statement
In the Service, we may use Google tools such as Google Analytics 4, Google Tag Manager or Google Ads — if they are implemented. These tools help us analyse how the Service is used, measure the effectiveness of marketing activities, improve website functionality and present content relating to Pic à Bec products. The use of analytical and marketing cookies is based on your consent, where required by law.
Opting out of marketing tools
You can manage your cookie consents through the cookie settings available in the Service and through your browser settings. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Users from other countries
This Privacy Policy has been prepared on the basis of the GDPR and Polish law. If you use the Service from a country outside the EU/EEA, local privacy laws may grant you additional rights, in particular the right to obtain information about data processing, access data, correct data, delete data, restrict processing, transfer data, object to processing or opt out of marketing communications. These rights remain unaffected. To exercise privacy rights, you may contact us at: customerservice.eu@picabec.com.
If you use the Service from the United Kingdom, your data may also be protected by the UK GDPR and the Data Protection Act 2018. In such case, you have the rights provided for under those laws, in particular the right of access to data, rectification, erasure, restriction of processing, data portability, objection and lodging a complaint with the Information Commissioner's Office — ICO.
If the laws applicable to your place of residence grant you additional privacy rights, you may contact us at customerservice.eu@picabec.com. We will consider your request in accordance with the laws applicable to the given case.
This Privacy Policy may be made available in different language versions. In the event of discrepancies between language versions, the Polish version shall prevail, unless mandatory provisions of law provide otherwise.
Other
The Service is not directed to children. We do not knowingly collect personal data of children below the age required under applicable law to independently consent to the processing of personal data. If we become aware that we process such data without the required consent, we will take steps to delete it.
Changes to the Privacy Policy
The services and functions within the Service may change, and therefore we may update the Privacy Policy. New versions of the document will be published in the Service. This Privacy Policy was updated on 20th August 2026.