PRIVACY AND COOKIES POLICY
Good morning! If you have arrived here, it is a reliable sign that you value your privacy. We understand this perfectly, so we have prepared this document for you, in which you will find the rules for processing personal data and the use of cookies in connection with the use of the https://haybcoffee.pl website.
Formal information to begin with – the administrator of the website and the administrator of your personal data is COFFEE REPUBLIC Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw (02-486), 200 Jerozolimskie Avenue, entered in the Register of Entrepreneurs of the National Court Register under number 0000389998, whose registration files are kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register, NIP: 9512342808, REGON: 14299394000000, share capital: PLN 200,000.00. If you have any doubts about our privacy policy, the processing of your personal data, or a request for information on what your data we process, you can contact us at any time by sending a message to biuro@haybcoffee.pl.
By placing an order through the online store, creating a user account in the online store, filing a complaint regarding purchased products, withdrawing from a contract concluded through the store, signing up for a newsletter or simply contacting us, you provide us with your personal information and we guarantee that your information will remain confidential, secure and will not be shared with any third party without your express consent.
We use Google Analytics analytical tools that collect information about your visits to the site, such as the sub-pages you viewed, the time you spent on the site or transitions between sub-pages. Google LLC’s Google Analytics cookies are used for this purpose. As part of Google Analytics, we collect demographic and interest data. As part of your cookie settings, you can decide whether or not you consent to the collection of such data about you.
The RODO grants you the following potential rights related to the processing of your personal data:
- the right to access your personal data,
- the right to rectify your personal data,
- the right to erasure of personal data,
- the right to restrict the processing of your personal data,
- the right to object to the processing of your personal data,
- the right to data portability,
- the right to lodge a complaint with a supervisory authority,
- the right to revoke consent to the processing of personal data, if you have given such consent.
The rules related to the exercise of the indicated rights are described in detail in Articles 16 – 21 of the RODO. We encourage you to familiarize yourself with these provisions. For our part, we consider it necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to them in relation to all processing operations of your personal data. For your convenience, we have made an effort to indicate the rights you are entitled to in the context of the description of individual personal data processing operations. We emphasize that one of the rights indicated above is always available to you – if you consider that we have violated data protection regulations in the processing of your personal data, you have the opportunity to file a complaint with the supervisory authority (President of the Office for Personal Data Protection).
We guarantee you the confidentiality of any personal data you provide to us. We ensure that we take all security and data protection measures required by data protection regulations. Personal data is collected with due diligence and properly protected from access by unauthorized persons. Recipients of data. Your data may be processed by our subcontractors, i.e. entities whose services we use to process your data and provide you with services or fulfill orders on the online store.
The list of Recipients below:
| Nazwa | Adres |
|---|---|
| Nazwa.pl sp. z o. o. | Kraków |
| DPD Strefa Paczki Sp. z o.o. | Warszawa |
| PayU S.A. | Poznań |
| InPost sp. z o. o. | Kraków |
| Pickpack S.A. | Warszawa |
The purposes, legal basis and period of processing of personal data are indicated separately for each purpose of data processing below.
When you create a user account, you must provide the data necessary to create an account, such as e-mail address, name, address data, telephone number. Providing the data is voluntary, but necessary to create an account. As part of editing your account data, you can provide your further data. The data provided to us in connection with the creation of an account, is processed for the purpose of creating and maintaining an account on the basis of the contract for the provision of electronic services concluded by registering an account (Article 6(1)(b) RODO). The account data will be processed for the duration of the account’s operation. When you decide to delete your account, we will also delete the data contained in it. Please note, however, that deletion of your account does not lead to the deletion of information about orders placed by you using your account. At any time you have the opportunity to correct the data contained in your account. You can also decide to delete your account at any time. You also have the right to data portability as provided in Article 20 of the RODO. Orders. When placing an order, you must provide the data necessary to process the order, such as your name, billing address, email address, phone number. Providing data is voluntary, but necessary to place an order. The data you provide to us in connection with your order, is processed for the purpose of processing your order (Article 6(1)(b) RODO), issuing an invoice (Article 6(1)(c) RODO), including the invoice in our accounting records (Article 6(1)(c) RODO), and for archival and statistical purposes (Article 6(1)(f) RODO). Order data will be processed for the time necessary to process the order, and then until the expiration of the statute of limitations for claims under the concluded contract. In addition, after the expiration of this period, the data may still be processed by us for statistical purposes. Remember also that we are obliged to keep invoices with your personal data for a period of 5 years from the end of the fiscal year in which the tax liability arose. In the case of order data, you do not have the opportunity to rectify this data once the order has been processed. You also cannot object to the processing of your data and request the deletion of your data until the expiration of the statute of limitations for contractual claims. Similarly, you cannot object to the processing of data and demand the deletion of data contained in invoices. After the expiration of the statute of limitations for claims under the concluded contract, you may object unanimously to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database. In relation to your order data, you also have the right to data portability as mentioned in Article 20 of the RODO. Complaints and withdrawal from the contract. If you make a complaint or withdraw from the contract, you will provide us with the personal data contained in the content of the complaint or statement of withdrawal from the contract, which includes name, address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to make a complaint or withdraw from the contract. The data provided to us in connection with filing a complaint or withdrawing from the contract are used for the purpose of the complaint procedure or withdrawal procedure (Article 6(1)(c) RODO).
The data will be processed for the time necessary for the complaint procedure or withdrawal procedure. Complaints and withdrawal statements may also be archived for statistical purposes. In the case of data contained in complaints and withdrawal declarations, you do not have the opportunity to correct this data. You also cannot object to the processing of the data and demand deletion of the data until the expiration of the statute of limitations for contractual claims. However, after the expiration of the limitation period for claims under the concluded contract, you may object to our processing of your data for statistical purposes, as well as demand the deletion of your data from our database. Newsletter. If you wish to subscribe to the newsletter, you must provide us with your e-mail address via the newsletter subscription form. Providing data is voluntary, but necessary to subscribe to the newsletter. The data you provide to us when signing up for the newsletter is used for the purpose of sending you the newsletter, and the legal basis for its processing is your consent (Art. 6(1)(a) RODO) given when signing up for the newsletter. The data will be processed for the duration of the newsletter, unless you unsubscribe earlier, which will result in the deletion of your data from the database. You can correct your data stored in the newsletter database at any time, as well as request its deletion by opting out of receiving the newsletter. You also have the right to data portability, as mentioned in Article 20 of the RODO. When you contact us by e-mail, including by submitting an inquiry via the contact form or sending a message via online chat, you naturally provide us with your e-mail address as the sender address of the message. In addition, you may also include other personal data in the body of the message. Providing your data is voluntary, but necessary to make contact. Your data is processed in this case for the purpose of contacting you, and the basis for processing is Article 6(1)(a) of the RODO, i.e. your consent resulting from initiating contact with us. The legal basis for post-contact processing is the legitimate purpose of archiving correspondence for internal purposes (Article 6(1)(c) of the DPA). The content of correspondence may be subject to archiving and we are not able to clearly determine when it will be deleted. You have the right to request the history of the correspondence you have had with us (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified by our overriding interests, such as defense against potential claims on your part.
Our website, like almost all other websites, uses cookies. Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by our ICT system (our own cookies) or by the ICT system of third parties (third-party cookies). Some of the cookies we use are deleted when your browser session ends, i.e. when you close it (so-called session cookies). Other cookies are retained on your terminal device and allow us to recognize your browser the next time you visit the site (persistent cookies). See below for more details. Consent to cookies. When you visit the site for the first time, you are shown information about the use of cookies. Thanks to a special tool, you have the ability to manage cookies from the site. In addition, you can always change the cookie settings from your browser or delete cookies altogether. Browsers manage cookie settings in different ways. See your browser’s help menu for explanations on how to change your cookie settings. Please note that disabling or restricting cookies may cause difficulties in using our site, as well as many other websites that use cookies. Proprietary cookies. We use our own cookies in order to ensure the proper operation of the site, in particular the operation of your account, the order process and for the use of the abandoned cart recovery mechanism. Third-party cookies. Our site, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of such cookies is described below. Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. We carry out activities in this regard based on our legitimate interest in creating statistics and analyzing them in order to optimize our websites. Google Analytics automatically collects information about your use of our website. The information collected in this way is mostly transmitted to a Google server in the United States and stored there. Due to the IP address anonymization activated by us, your IP address is truncated before being passed on. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and only shortened there. The anonymized IP address transmitted by your browser within the framework of Google Analytics is generally not combined with other Google data. Since Google LLC is based in the USA and uses a technical infrastructure located in the USA, it guarantees the level of data protection required by European legislation. You can prevent the data collected by the cookies regarding your use of our website from being recorded by Google, as well as the processing of this data by Google, by installing a browser plug-in located at the following address: https://tools.google.com/dlpage/gaoptout. As part of Google Analytics, we also collect demographic and interest data. As part of your cookie settings directly from our website, you can decide whether or not you consent to the collection of such data about you. If you are interested in details related to data processing within Google Analytics, we encourage you to read the explanation prepared by Google: https://support.google.com/analytics/answer/6004245 Facebook Pixel. We use marketing tools available within Facebook and provided by Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. As part of these tools, we target you with Facebook advertisements. We perform activities in this regard based on our legitimate interest in marketing our own products or services. In order to target you with ads personalized to your behavior on our site, we have implemented Facebook Pixel within our pages, which automatically collects information about your use of our site in terms of the pages you view. The information collected in this way is mostly transmitted to a Facebook server in the United States and stored there. The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken within our site. However, we inform you that Facebook may combine this information with other information about you collected as part of your use of Facebook and use it for its own purposes, including marketing. Such activities of Facebook are no longer up to us, and you can look for information about them directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation. From your Facebook account, you can also manage your privacy settings. Because Facebook Inc. is headquartered in the US and uses technical infrastructure located in the US provides an adequate level of personal data protection as required by European regulations. Within the cookie settings accessible from our website, you can decide whether or not you consent to our use of Facebook Pixel in your case. Social media tools. Our websites use plug-ins and other social tools provided by social networks such as Facebook, Twitter, Instagram, Google, LinkedIN. When displaying our website containing such a plug-in, your browser will establish a direct connection to the servers of the social network administrators (service providers). The content of the plug-in is transmitted by the respective service provider directly to your browser and integrated into the site. Thanks to this integration, service providers receive information that your browser has displayed our site, even if you do not have a profile with the given service provider or are not currently logged in with them. This information (along with your IP address) is sent by your browser directly to the service provider’s server (some servers are located in the USA) and stored there. If you have logged in to one of the social networks, this service provider will be able to directly attribute your visit to our site to your profile on the given social network. If you use a particular plug-in, such as by hitting the “Like” or “Share” button, the corresponding information will also be sent directly to the server of the respective service provider and stored there. In addition, the information will be published in the respective social network and will appear to the people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contacting you and your rights in this regard and the possibility to make settings to ensure the protection of your privacy are described in the privacy policies of individual service providers.
Facebook – https://www.facebook.com/legal/FB_Work_Privacy,
Instagram – https://help.instagram.com/519522125107875?helpref=page_content,
Twitter – https://twitter.com/en/privacy,
Google – https://policies.google.com/privacy?hl=pl,
LinkedIN – https://www.linkedin.com/legal/privacy-policy.
If you do not want social networks to attribute the data collected during your visit to our website directly to your profile on a particular site, then you must log out of that site before visiting our site. You can also completely prevent plug-ins from loading on the site by using appropriate extensions for your browser, such as script blocking. Server logs Using the site involves sending requests to the server where the site is stored. Each query directed to the server is recorded in the server logs. The logs include, among other things, your IP address, the date and time of the server, information about your web browser and the operating system you are using. The logs are saved and stored on the server. The data stored in the server logs are not associated with specific individuals using the site and are not used by us to identify you. The server logs are only auxiliary material used to administer the site, and their contents are not disclosed to anyone except those authorized to administer the site.
