Privacy policy
What personal data this site processes, on what legal basis, for how long, and who else sees it.
Last updated: 14 August 2026
This shop is not trading. The company behind it is not registered, so the entity legally responsible for the processing described below cannot be named yet. Until it is, write to kontakt@peptorium.eu with any question about your data and it will be answered.
What this site collects, and when
Nothing about you is collected until you allow it. The site loads no analytics and sets no measurement cookie until you answer the banner. If you close the banner without agreeing, or refuse, no analytics runs at all - the default state sent to Google before any tag loads is denied for advertising, advertising personalisation, user data and analytics storage alike.
Analytics, if you agree to it
If you agree, Google Analytics 4 (property G-05KDNHCD5K) records which pages you view, which of a small number of actions you take - opening a certificate, using the calculator, adding to a cart - your approximate location from your IP address, and your browser and device type. It is used to understand which pages are read and which are not.
Legal basis: your consent, Article 6(1)(a) GDPR. You may withdraw it at any time from the cookie settings link in the footer, with effect for the future.
Your consent decision itself
Your answer to the banner is stored in your own browser, together with the date and the version of the wording you agreed to. It stays there until you change it or clear your browser storage. It is not sent to us and it is not used to recognise you. It exists so that you are not asked again, and so that what you agreed to can be identified if the wording later changes.
Your basket
Items you put in the basket are kept in your own browser and are not transmitted anywhere. This shop cannot yet take an order; when it can, the contents will be sent at the moment you place one, and this policy will say so before that happens.
If you write to us
Mail to kontakt@peptorium.eu is forwarded by ImprovMX (ImprovMX SAS, France) to a Google mailbox, where it is read and kept for as long as needed to deal with what you wrote about, and then deleted. We do not add you to a mailing list.
Legal basis: our legitimate interest in answering enquiries, Article 6(1)(f), or the steps before a contract at your request, Article 6(1)(b).
Hosting and server logs
The site is served by Firebase Hosting (Google Ireland Limited). Google records requests, including IP addresses, for delivery, security and abuse prevention. Legal basis: legitimate interest in operating the site securely, Article 6(1)(f).
Who else sees your data
Google (hosting, analytics and mail delivery) and ImprovMX (mail forwarding). Nobody else. Your data is not sold, and it is not shared for anyone else's advertising.
Both may process data outside the European Economic Area, in the United States. Those transfers rely on the European Commission's Standard Contractual Clauses and, for Google, the EU-US Data Privacy Framework.
How long it is kept
Analytics data: up to 14 months. Your consent record: in your browser until you change or clear it. Correspondence: as long as the matter needs, then deleted. Server logs: as Google retains them for the hosting service.
Your rights
You have the right of access, rectification, erasure, restriction, portability, and to object to processing based on legitimate interest. Where processing rests on consent, you may withdraw it at any time without affecting what was lawful beforehand.
To exercise any of these, write to kontakt@peptorium.eu. You also have the right to complain to a data protection supervisory authority - in Poland the Urzad Ochrony Danych Osobowych, in Germany your Land authority, or the authority where you live or work.
Changes to this policy
The date at the top changes whenever the wording does. Where a change affects something you consented to, you will be asked again rather than presumed to agree.