Privacy Policy and the Use of Cookies on the Website Service

www.maczfit.pl

Background information

This document sets out the Privacy Policy of the website: www.maczfit.pl (hereinafter referred to as the "Internet Service"). The administrator of the Internet Service is Maczfit Foods Sp. z o. o., ul. Iwonicka 37, 02-924 Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw, in Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000752666, Tax. Reg. no. NIP: 9512471196, Statistical Reg. no. REGON: 381565356.

Words used in capital letters have the meaning given to them in the terms and conditions of the Inter-net Service www.maczfit.pl.

Personal data collected by the Administrator of the Internet Service is processed in accordance with the provisions of regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of individuals with regard to the processing of personal data and on the free move-ment of such data and the repeal of Directive 95/46/EC (General Data Protection Regulation) (Legal Journal EU L 119, p. 1), hereinafter referred to as GDPR.

The Administrator of the website makes special efforts to protect the privacy and information provided to him/her, concerning the users of the Internet Service. The Administrator will carefully select and apply appropriate technical measures, including those of a programmatic and organisational nature, to ensure the protection of the data processed, in particular to protect the data from unauthorised ac-cess, disclosure, loss and destruction, unauthorised modification, as well as from processing in breach of the applicable legislation

Recipients of the Services available on the website are not intended for minors under the age of 16. The Personal Data Controller does not foresee the deliberate collection of data on minors under 16 years of age.

Personal information
Personal Data Controller

The Controller of your personal data is:

Maczfit Foods Sp. z o. o., ul. Iwonicka 37, 02-924 Warsaw, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the capital city of Warsaw, in Warsaw, XIII Commercial Division of the National Court Register under KRS number 0000752666, Tax. Reg. no. NIP: 9512471196, Statistical Reg. no. REGON: 381565356.

In matters concerning your personal data, you may contact the Personal Data Controller via:

Data Protection Officer (DPO)

The Data Protection Officer (DPO) is Rafał Surowy, whom you may contact about the protection of your personal data through:

  • electronic mail to: [email protected],
  • traditional post: ul. Iwonicka 37, 02-924 Warszawa.
Objectives and legal basis for the processing of personal data

The Personal Data Controller processes your personal data for the following purposes and scope:

  • to take pre-contractual action at your request, such as, setting up an account, namely the da-ta, provided in the registration form in the online store, viz., the e-mail address and the estab-lished password and gender; if you register for the purchase of goods, we collect your name and the data provided, such as the shipping address, in order to complete your order and provide services requiring the establishment of an account, such as maintaining a history of your orders and information about the completion of your orders; we process the data given in your account when purchasing goods;
  • in order to provide services that do not require the establishment of an account or the pur-chase of goods, such as browsing the websites of the Online Store and searching for goods, we process personal data concerning your activity in the online store, thus, we process the data on the content and goods you browse, the session data on your device, the operating system, the browser, the location and the unique ID, IP address;
  • to perform the contract of sale of goods, such as to deliver ordered goods, we process the personal data, provided by you when purchasing goods, such as your name, e-mail address, address details, payment details and, additionally, if you make a purchase through your ac-count, your established password;
  • in order to compile statistics on the use of individual functionalities available in the Online Store, to facilitate the use of the Online Store and to ensure the IT security of the Online Store, we process personal data concerning your activity in the Online Store and the amount of time spent on each of the subpages in the Online Store, your search history, location, IP address, device ID, the data concerning your web browser and the operating system;
  • in order to establish, pursue and enforce claims and defend against claims in legal proceed-ings and other enforcement bodies, we may process the personal data you provided when you purchase goods or set up an account and other data necessary, to prove the existence of a claim, should this result from a legal requirement, a court order or other legal procedure;
  • in order to handle complaints, applications and reply to questions, we process the personal data provided by you, in the contact form, regarding complaints, applications and requests, as also to answer questions in any other form. We also process certain personal data provided by you in your account, as well as data relating to the order and/or other services provided by us which are the cause of the complaint, applications or request and data contained in docu-ments accompanying complaints, applications and requests;
  • for the purpose of marketing our goods and services, as well as the services of our partners, including remarketing, we process the personal data provided by you when you create an ac-count and update it. We also process the data on your activity in the Online Store including orders that are registered and stored through cookies, in particular, the order history, the search history, clicks in the Online Store, login and registration dates, history and your activity related to our communication with you. In the case of remarketing, we use your activity data to reach you with our marketing messages outside the Online Store and use third-party provid-ers to do so. These services consist of displaying our messages on websites other than the Online Store. See information on the "cookies" files for details;
  • in order to organise competitions and loyalty programmes, i.e. to notify you regarding points collected, awards granted and to advertise our offer, we use your personal data, as submitted to us in your Account and when registering in the contest or loyalty programme. Detailed in-formation on this subject is given each time in the Terms and Conditions of the contest or loy-alty programme concerned;
  • for market research and as feedback submitted to us or to our partners, i.e. order information, your details, as given in your account or during the purchase of goods, e-mail address. Data collected from market research and opinion surveys is not used by us for advertising purpos-es. More exact details are given in the information about the survey and where you enter your data.
Categories of relevant personal data

The Personal Data Controller processes the following categories of relevant personal data:

  • data on the order;
  • contact data;
  • data on the activity in the Internet Service;
  • data on the orders in the Internet Service;
  • data on complaints, requests and applications;
  • data on marketing services.
Voluntary provision of personal data

The provision by you of the personal data requested is voluntary; however, the provision of services by the Personal Data Controller via the Internet Service, is conditional upon you, providing your per-sonal data.

Data processing time

Personal data will be processed for the period necessary for the execution of orders, services, market-ing activities and other services performed for you. Personal data will be deleted in the following cases:

  • where the subject of the data requests that it be deleted or withdraws the consent given; 
  • where the subject of the data has been inactive for more than 10 years (inactive contact, counted from 1 January following the date of the last contact);
  • where information is to hand that the stored data is outdated or inaccurate.
Certain data such as: e-mail address, name and surname may be stored for a further 3 years for the purposes of evidence, handling complaints, requests and claims related to the services provided by the website; this data will not be used for marketing purposes.
Data on paid service orders, contests and loyalty schemes will be stored for a period of 5 years from the end of the calendar year in which the event or order was placed.
Data on non-logged users is stored for the time corresponding to the life cycle of the cookies stored on the devices or until they are deleted from the device by the user.
Personal information regarding your preferences, behaviour and choice of marketing content can be used as a basis for making automated decisions to determine your online sales opportunities.
Recipients of personal data

We transfer your personal data to the following categories of recipients:

  • the state authorities, e.g. prosecutors, the police, President of Personal Data Protection Office, President of OCCP (Competition and Consumer Protection Office), if they ask us to do so, 
  • to service providers, whom we use when running the Internet Service, for such as the com-pletion of orders or payment processing. Depending on contractual arrangements and cir-cumstances, these entities act on our behalf and determine their own purposes and methods of processing.
Rights of the subject of the data

Under GDPR you are entitled to:

  • request access to your personal data;
  • request correction of your personal data;
  • request the deletion of your personal data;
  • request that the processing of personal data be restricted;
  • oppose the processing of personal data;
  • request the transfer of your personal data
The Personal Data Controller shall, without undue delay – and in any case within one month of receiv-ing your request – provide you with information about the actions taken in relation to the request submitted by you. If necessary, the monthly period may be extended by a further two months, where this is due to the complicated nature of the request or to the volume of requests.
In either case, the Personal Data Controller will inform you of any such extension within one month of receiving the request and will state the reasons for the delay.
Right of access to personal data (Art. 15 GDPR)

You have the right to obtain information from the Controller as to whether or not your personal data is processed.

If the Controller processes your personal data you are entitled to:

  • access your personal data;
  • obtain information about the purposes of processing, the categories of personal data pro-cessed, the recipients or categories of recipients of that data, the planned storage period for your data or the criteria for determining that period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of that data, the automated deci-sion-making, including profiling and the safeguards applied in relation to the transfer of that data outside the European Union;
  • obtain a copy of your personal data.
If you wish to access your personal data, submit your request to: [email protected]
Right to rectify personal data (Art. 16 GDPR)

If your personal data is incorrect, you have the right to request the Controller to amend your personal data without delay.

You also have the right to request the Controller to supplement your personal data.

If you wish to request rectification or replacement of your personal data, please send your request to: [email protected]

If you have registered on the website, you can correct your personal data yourself after logging in, onto the website. 

Right to delete personal data, viz., "The right to be forgotten"- so-called (Art. 17 GDPR)

You have the right to request the Personal Data Controller to delete your personal data when:

  • your personal data is no longer necessary for the purposes for which it was collected or oth-erwise processed;
  • you withdrew specific consent to the extent that your personal data was processed based on your consent;
  • your personal data was unlawfully processed;
  • you have objected to the processing of your personal data for direct marketing purposes, in-cluding profiling, to the extent that the processing of your personal data is related to direct marketing;
  • you have objected to the processing of your personal data in connection with the processing necessary for the performance of a task carried out in the public interest, or processing nec-essary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party.
Despite the request to delete personal data, the Personal Data Controller may process your data fur-ther, in order to determine, investigate or defend claims; you will be informed of this.
If you wish to request the deletion of your personal data, please submit your request to: [email protected]
Right to request that the processing of personal data be restricted (Art. 18 GDPR)

You have the right to request that the processing of your personal data be restricted when:

  • you question the accuracy of your personal data; the Personal Data Controller will then sus-pend the processing of your personal data, for a time, in order to allow you to check the accu-racy of this data;
  • the processing of your data is illegal but where, instead of having your personal data deleted, you request that the processing of your personal data be restricted;
  • your personal data is no longer needed for processing purposes, but is needed to establish, investigate or defend your claims;
  • you have objected to the processing of your personal data and then, only until it is determined whether the legitimate interests of the Personal Data Controller are superior to the grounds in-dicated in your objection.
If you wish to request that the processing of your personal data be restricted, submit your request to: [email protected]

 

Right to object to the processing of personal data (Art. 21 GDPR)

You have the right at any time to object to the processing of your personal data, including profiling, in connection with:

  • the processing necessary for the performance of a task carried out in the public interest or the processing necessary for purposes arising from legitimate interests, pursued by the Per-sonal Data Controller or a third party;
  • processing for direct marketing;
If you would like to object to the processing of your personal data, please send your request to: [email protected]
Right to request the transfer of personal data (Art. 20 GDPR)

You have the right to receive your personal data from the Personal Data Controller, in a structured, commonly used, machine-readable format and to send it to another personal data controller.

You can also request that the Personal Data Controller send your personal data directly to another controller, if technically possible.

If you wish to request the transfer of your personal data, submit your request to: [email protected]

Right to revoke consent

You can withdraw your consent to the processing of your personal data, at any time.

Withdrawal of consent to the processing of personal data will not affect the lawfulness of processing carried out on the basis of your consent before withdrawal.

If you wish to withdraw your consent to the processing of your personal data, submit your request to: [email protected]

Complaint to the Supervisory Authority

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the Supervisory Authority, in particular in the member state of your habitual resi-dence, place of work or in the place of the alleged infringement.

In Poland, the supervisory body within the meaning of GDPR, is the President of the Personal Data Protection Office (PDPO).


“Cookie policy"

This Policy applies to cookies and websites operated by Maczfit Foods Sp. z o.o. with its headquarters in Warsaw (02-924) at Iwonicka 37 (hereinafter referred to as the Operator).


What are “cookies”?

Cookies should be understood as information data, in particular text files stored on users' end devices which are intended for use on websites. These files allow the user's device to be recognised and the web page to be displayed, according to the individual preferences of the user.

"Cookies" usually contain the name of the website from which they came, the time they were stored on the final device and a unique number.

What do we use “cookies” for?

We use cookies to:

customise the content of the site's web pages according to the user's preferences and also to optimise the use of websites; in particular, these files allow the device of the site’s user to be recognised and the web page to be displayed, according to the individual needs of the user.

create statistics that will help in understanding how site users use websites, thus allowing structure and content to be improved.

maintain a site user session, once logged in, so that the user does not need to re-enter the username and password on each page of the site.


What “cookies” do we use?

There are two main types of cookies used on websites: session cookies and persistent cookies. Session cookies are temporary files that are stored on the user's end device until log out from the system, or the website has been left, or the software / web browser has been disabled.

"Persistent" cookies are stored on the user's end device for the time specified in the cookie settings, or until the user deletes them.

The following types of “cookies” are used on websites:

"indispensable" cookies that allow the services available on websites, to be used such as authentication cookies used for services that require authentication on websites

security” cookies used for that purpose and to detect authentication abuses on websites

"productive" cookies that allow information to be collected about how websites are used

"functional" cookies that allow the user's chosen settings to be ‘remembered’ and the user interface to be personalised, for example, in relation to the selected language or region from which the user came, the font size, the appearance of the website and so on.

"advertising" cookies that allow users to provide advertising content that is more suited to their interests

web analytics” cookies which allow how users interact with the content of web pages to be better un-derstood in order to better organise the layout of our site. They collect information about how visitors use our site, the type of page from which users were redirected and the number of visits and times users visited this site. This information does not register the specific personal data of the user, but is used to compile statistics on the use of the site to an aggregate extent. To do this, we use the Google Analytics solution.


“Cookies” of independent companies placed on the operator's websites:

Google Analytics, HotJar - web analytics cookies collect information about how visitors use our site, the type of page from which users were redirected, as well as the number of user visits and the time spent on this site. This information does not register the specific personal data of the user, but is used to compile statistics on the use of the site, to an aggregate extent.

Additional information and a browser add-in, that blocks Google Analytics: tools. google.com, are avail-able on the https://hotjar.com site.

Refericon – the website uses an application that serves Maczfit products and the users; thanks to cookies, we can quickly verify your identity, which makes using our services much easier and more accessible.

"Cookies" are used by Refericon solely for the purpose of personalising a particular user; for more detailed information visit the https://www.refericon.pl site.

RTB House, Criteo – these cookies use information collected about you, to personalise the ads dis-played according to your preferences. Cookies are only used by providers to personalise a specific user.

For more information, visit: https://www.criteo.com and https://www.rtbhouse.com/pl/

OTHER “COOKIES”

Used on webpages -cookies _cfduid

Thulium - this site uses an application that facilitates the user's contact with the support service, as well as improve contact with users by phone; thanks to cookies, we have the opportunity to respond to a request sent by a user, requesting contact with us by phone. "Cookies" are used by Thulium, solely in order to properly view the applet of the order, in order to call; they do not store any personal data.

For more information, visit: https://thulium.pl/

Facebook tracker-cookies _fr

Facebook - Facebook's website uses cookies that store the browser ID and an encrypted version of the identity of the user, logged in, to Facebook. These cookies allow us to analyse the number of user visits redirected to the maczfit.pl page from links published on Facebook and to adjust communication and offers in order to meet the visitors’ needs.

For more information, visit: https://www.facebook.com/policies/cookies/

The legal basis for processing

We collect the above data on the basis of your consent (Par 6-point 1 letter a GDPR), in order to fulfil a contract or to take measures before concluding a contract (Par 6-point 1 letter b GDPR). We can also process data based on the justified purpose of the Data Controller (para. 6, point 1 letter f GDPR).

Do “Cookies” contain personal data?

Personal data collected through cookies can only be collected to perform certain functions for the user. Such data is encrypted so that no unauthorised persons are allowed to access it.

How long do we handle "cookies"?

If you have consented to the storage of cookies, then every 365 days from the date of your consent to their storage, we will ask you to agree to their storage again, during your next visit to our sites.

Deleting "cookies"

Deleting "cookies" The standard software used for viewing web pages allows you to place cookies on the destination de-vice by default. These settings can be changed in such a way as to block the automatic processing of cookies in the web browser settings or to inform you each time they are downloaded to the user's de-vice. Detailed information about the possibilities and methods of working with cookies is available in the software settings (web browser).

Internet Explorer (https://support.microsoft.com/pl-pl/help/17441/windows-internet-explorer-change-reset-settings)

FireFox (https://support.mozilla.org/pl/kb/firefox-opcje-preferencje-i-ustawienia)

Opera (https://help.opera.com/pl/touch/settings/ )

Chrome (https://support.google.com/accounts/answer/3118621?hl=pl )

Restricting the use of cookies may affect some of the functionality available on the website.

What security measures do we use on our sites?

The operator's websites are equipped with security measures designed to protect data under our control, from loss, misuse or alteration. We are committed to protecting any information disclosed to us by customers, in accordance with standards for the protection of security and privacy.

The website operator offers users the option to opt out of receiving advertising materials and ordered newsletters.

The operator provides users with the ability to delete information about themselves from databases and allows them to suspend the receipt of information sent via e-mails.