Privacy policy
Thank you for the trust you have placed in us. The protection of your personal data and compliance with applicable laws regarding the observance of your right to self-determination with regard to the collection, processing and use of your personal data is a top priority for us. The following information is intended to familiarise you with the data collected and processed in relation to your use of our website.
PRIVACY POLICY
This Privacy Policy determines the rules for processing and protecting the personal data provided by you with regard to your use of services available through our website. Our primary objective is to ensure that you, as a user of our website, are protected with a level of privacy that is at least equivalent to the standards set out in the existing legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) – GDPR (EU Journal of Laws 119), Act of 18 July 2002 on providing services by electronic means (Journal of Laws of 2002, no. 144, item 1204, as amended) and Act of 16 July 2004 – Telecommunications Law (Journal of Laws of 2004, no. 171, item 1800, as amended).
- 2. Data Controller, details and contact
The Data Controller of your personal data is „TERRAVITA” spółka z ograniczoną odpowiedzialnością (limited liability company) seated in Poznań at ul. Szarych Szeregów 48, 60-462 Poznań, entered into the National Court Register by the District Court Poznań – Nowe Miasto i Wilda in Poznań, 8th Economic Division of the National Court Register under KRS number 0000028540, NIP 781-00-09-491, REGON 630013822, BDO registry number: 000019181, with share capital in the amount of PLN 62,589,000.00 (hereinafter: Data Controller).
You can contact the Data Controller by:
- mail, at the address: ul. Szarych Szeregów 48, 60-462 Poznań;
- e-mail, at the address: office@terravita.pl.
- 3. Data Protection Officer, details and contact
- The Data Controller has appointed Data Protection Officer. You can address them in any matters concerning personal data:
You can contact the Data Protection Officer by:
- mail, at the address: ul. Szarych Szeregów 48, 60-462 Poznań;
- e-mail, at the address: iod@terravita.pl.
- Data Protection Officer is responsible for overseeing and supervising the compliance with data protection regulations. They are authorised to contact you in any matters concerning processing of your personal data by the Data Controller and exercising rights in this respect.
- 4. Scope of the collected data and information and their use
- We process your personal data received from you in connection with transactions with us or during contact with us. These are data which are made available to us in connection with agreements concluded with us or in connection with the request to us to take certain actions prior to their conclusion. You also share your data with us by taking up correspondence with us, agreeing to subscribe to a newsletter or to take part in a contest, lottery, placing an order in our on-line store, or a request for information.
- You may be asked to provide the following personal data: name and surname, address of residence, phone number, e-mail address. Personal data, the provision of which is mandatory to use particular features of the website, is always marked and distinguished from other data, the provision of which is at the User’s discretion.
- If you pay for products purchased in our on-line shop via e.g. a bank or a payment institution, we will also have information about the account number from which the payment was made. We will also process the details of your bank account, to which we will reimburse you.
- If you have applied for the competition organised on our website, the personal data collected in this way will be used for the purposes of the competition in which you have taken part. Detailed terms and conditions of a competition are specified in each case in the Rules and Regulations of the competition.
- Personal data provided in a contact form is used for the purposes of answering your inquiry.
- If you place an order for a service provided electronically, the subject of which is the free delivery of newsletters, or if you give consent to receive them in any other way, the obtained e-mail address (e-mail address) is added to the mailing list and is used to send you a newsletter.
- In the case of registration and placing an order in the on-line shop run by the Data Controller, the personal data collected in this way is used to set up a Customer Account and to handle and process orders.
- You can also visit our website without providing any personal data. When using our website for informational purposes only, each time a website is accessed, the web server automatically saves a so-called server log file, which, for example, contains the name of the requested file, the IP address, the date and time of the connection, the amount of data transferred and the requesting provider (access data) and it documents the connection.
- The data collected automatically by the server when using the website for informational purposes only is analysed solely for the purposes of ensuring seamless functioning of the website and improving our services. Pursuant to the first sentence of Article 6(1)(f) of GDPR, this serves to safeguard our legitimate interests in the correct presentation of our offer, which prevails in terms of balancing interests. This data does not allow us to draw any conclusions with regard to you.
- We can also collect data concerning your behaviour. This is the data concerning your transactions, complaints, history of correspondence and contacts with us, your activity on our website and in the on-line shop, on our social networks profiles (e.g. Facebook), such as: viewed products, IP address or device ID, data from cookies and locations, correspondence, contacts, as well as your opinions on us and our products and services. We can combine this data with your other data which we have and process them, especially for the purpose of creating summaries, analyses and statistics for the Data Controller’s internal needs, customer service support and marketing purposes.
- 5. Rules of personal data processing
- The provision of personal data by you is voluntary, it is not a statutory obligation and may only be a contractual requirement.
- The provision of your personal data may be necessary to:
- conclude and execute an agreement with us, e.g. when making a purchase in our on-line shop or creating an on-line account;
- issuing a VAT invoice and settling taxes;
- receiving a newsletter;
- considering cases referred to the Customer Service Department;
- handling withdrawal from an agreement and performing our obligations in this respect.
In the abovementioned cases, failure to provide personal data may cause, among others, that:
- it will not be possible for you to make a purchase in our on-line shop or to create an on-line account;
- it will not be possible to deliver a newsletter to you;
- it will not be possible for us to issue an invoice and make tax settlements;
- it will not be possible to consider and reply to your complaint or withdrawal from the agreement;
- Each time the scope of data required for the conclusion of an agreement or other actions with us is included in the forms used on our website or in our other documents or their templates, e.g. complaints, withdrawal from the agreement templates.
- We may also ask you for optional data that we need, for example, so that we can call you at the given number and agree on the details of delivery of the products, e.g. a specific date and time of delivery of the ordered goods.
- 6. Purpose, basis and duration of the processing of personal data
- We need and process your personal data in order to:
- take actions, on your request, prior to concluding an agreement (e.g. in order to price the service or to inform you about the availability of the product) - Article 6(1)(b) of GDPR:
- for the time necessary to perform these activities;
- conclude and execute an agreement - Article 6(1)(b) of GDPR:
- for the time necessary to execute the agreement and make settlements in this respect;
- perform our legal obligations - Article 6(1)(c) of GDPR, which include
- warranty obligations for defects
- for duration of warranty liability;
- obligations in connection with withdrawal or termination of the agreement:
- for a period until the statute of limitations for claims arising therefrom is reached;
- obligations related to issuing and storing invoices and documents required by tax law and accounting regulations:
- until an invoice or other documents are issued, and then for the period of their storage specified in tax and accounting regulations;
- storing data in order to prove compliance with the accountability obligation and other obligations imposed by the provisions on personal data protection:
- for the duration of the liability in this respect;
- pursuit our so-called legitimate interests - Article 6(1)(f) of the GDPR - occurring in the case of:
- establishing, defending and asserting claims:
- until the statute of limitations for claims arising from the agreement or our actions relating to the agreement or requests prior to the conclusion of the agreement;
- creating summaries, analyses and statistics for our internal needs, including, in particular, reporting, researches and planning development of our products and services and improving their quality, developmental works in our IT systems: - for the duration of the agreement and in the case an agreement is not concluded, until finishing activities taken on your request, and then until statute of limitations for claims arising from the agreement or our actions relating to the agreement or requests prior to the conclusion of the agreement;
- ensuring security of the network and information:
- for the entire data retention period, i.e. until the statute of limitations for claims arising from the agreement or our actions relating to the agreement or requests prior to the conclusion of the agreement and the cessation of our accountability obligation and other obligations imposed by data protection legislation;
- customer service support:
- for the duration of the agreement or until finishing activities taken on your request in case an agreement was not concluded;
- for marketing purposes, including profiling, i.e. in order to provide information on our promotions, products, events, initiatives, including special offers:
- for the duration of the agreement;
- protection against attempts of fraud:
- for the duration of the proceedings in that regard;
- ensuring the safety of persons (primarily employees and customers) and property:
- for the duration of the proceedings in that regard.
- We can process your personal data on the grounds of:
- a consent given to us for purposes stipulated therein:
- until withdrawal of the consent,
- after withdrawal of the consent:
until the statute of limitations for claims arising from our actions taken on the basis of this consent and the cessation of our accountability obligation and other obligations imposed by data protection regulations in order to establish, defend or assert these claims, to compile summaries, analyses and statistics for our internal purposes, to ensure network and information security (i.e. to fulfil our so-called legitimate interests - Article 6(1)(f) of the GDPR) and to demonstrate compliance with the accountability obligation and other obligations imposed by personal data protection regulations (i.e. to fulfil legal obligations - Article 6(1)(c) of the GDPR).
- As part of the processing of your personal data, in particular the following activities may be taken: collecting, recording, organising, arranging, storing, modifying, viewing, using, transferring, disseminating or otherwise making available, matching or combining, limiting, deleting, destroying. These operations may be performed automatically, e.g. in IT systems, or non-automatically, e.g. in folders, in a paper form.
- 7. Transfer of personal data
We can transfer the personal data provided by you to:
- our employees and co-workers, who require access to these data in order to perform our obligations or to perform activities for you;
- entities who process your data on our behalf and participate in performance of our activities, i.e.:
- our subcontractors who support us in executing agreements, orders and customer service, e.g. in handling correspondence or customer service process;
- advertisement agencies or other entities which organise, carry out, cooperate or mediate in organization, or carry out our marketing initiatives;
- entities operating our information and communication systems or providing us with information and communication tools, including IT platforms, or places on servers or websites;
- entities providing us with advisory, consulting, audit or legal assistance services;
- research agencies acting on our request;
- other data controllers who are:
- advertisement agencies or other entities which organise, carry out, cooperate or mediate in organization, or carry out our marketing initiatives;
- entities conducting postal or courier activities - in order to deliver mail or shipments;
- entities carrying out carriage of freight consignments or forwarding services - in order to deliver freight consignments;
- entities carrying out payment activities (banks, payment institutions) - in order to make reimbursements or to ensure the operation of the direct debit service;
- in the event of a legal obligation or a legitimate interest of the Controller, we reserve the right to disclose information about your personal data to relevant entities on the basis of relevant legal regulations;
- in the event when it is necessary, your personal data may be transferred to countries outside of the European Union and European Economic Area, i.e. “third countries”. In such cases, we guarantee data security by concluding adequate agreements with entities from these countries, which shall include a clause on guarantee of personal data security.
- In connection with the Data Controller’s processing of your personal data, you have the right to:
- access the content of data, pursuant to Article 15 of the GDPR;
- rectify data, pursuant to Article 16 of the GDPR;
- limit data processing, pursuant to Article 18 of the GDPR;
- erase data, pursuant to Article 17 of the GDPR;
- transfer data, pursuant to Article 20 of the GDPR.
- object to data processing, pursuant to Article 21 of the GDPR.
If you wish to exercise any of these rights, please contact us at the e-mail address: iod@terravita.pl.
- If the processing by the Data Controller is found to breach the provisions of the GDPR, you have the right to lodge a complaint with the President of the Office for Personal Data Protection.
- You have the right to withdraw your consent to the processing of personal data processed on the basis of your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of the consent prior to its withdrawal.
- You can change the e-mail address to which the newsletter is sent or resign from the service of the free delivery of newsletter at any time by sending an e-mail tosklep@terravita.pl with the following wording: I resign from the newsletter. Condition for successfully unsubscribing is to send the e-mail from the e-mail address which is in the newsletter database.
- We use cookies on our websites (terravita.pl, www.terravitapro.pl, www.sklep.terravita.pl, www.chocosticks.pl, www.chocola.pl).
- Cookies are small text files sent by a web server and stored by your computer browser software. When the browser reconnects to a page, the website recognizes the type of device from which the user connects. Parameters allow to read the information contained therein and thus facilitate the use of previously visited websites.
- We use the information from cookies to design and display the website in an optimal way and in accordance with your preferences. Only a cookie is identified on your device. Outside this scope, personal data will only be stored with your explicit consent, or if this is absolutely necessary in order to be able to use the service offered and available to you.
- The information collected in the form of cookies includes, but is not limited to, IP address, Internet service provider, browser type, language, operating system type, date, time and location information.
- The data from cookies is used to monitor how you use our websites in order to improve your browsing experience and ensure a more efficient and seamless navigation.
- Cookies identify the user, which allows adjusting the website content that is used by the user to their needs and preferences. This also makes it possible to match the ads addressed to the user.
- We use cookies to guarantee the highest standard of convenience for users of our websites and to be able to optimize them according to their needs.
- In order to monitor information about you, we use Google tools, such as Google Analytics, which record user’s behaviours on websites.
- We also use tools provided by Facebook (Facebook Custom Audiences - "Facebook pixel") and Google (Google AdWords, Google Remarketing) to direct on-line advertising and remarketing. As an advertiser, we are interested in displaying advertisements that are of interest to you, in order to make our website more attractive to you and to make advertising messages more effective. These tools also enable us to reconnect with a user who has visited our website by displaying our ads on other websites or by displaying ads that match their interests (on Facebook and Instagram, if you are a user). These operations are based solely on cookies.
- For more information on the purpose and scope of data collection and processing by Google or Facebook, please refer to the privacy policies of these companies, which are available at the links below:
- We use the following cookies on our website:
- required cookies – files enabling the use of our websites in accordance with their intended purpose. These are so-called first-page files, i.e. files from which all information will be returned to our websites;
- Functional and performance cookies – they enable us to store information already provided (such as language, region, font size etc.) on our websites. With these files, some of the settings you once choose are "stored", making it easy to offer improved and more personalised solutions;
- cookies based on explicit consent – these will be used only with the user’s explicit consent. Marketing cookies are an example. We also reserve the right to use, for the purpose of displaying specific advertisements on our websites, information that we have obtained by means of cookies from an anonymous analysis of the behaviour of visitors to our website. We believe that users benefit from this by viewing advertisements or content that is tailored to their interests, based on their browsing history. This way the user will see less random advertising or content that may be less interesting to them. Marketing cookies come from external advertising companies (third-party cookies) and are used to collect information about visited websites in order to create targeted advertisements.
- A user can always disable or restore the cookies collection option at any time by changing the settings in the web browser.
- On our website you will find links to social media channels, such as Facebook, Instagram (owned by Facebook) or Youtube (owned by Google). Please be advised that our cooperation with these entities does not mean that we have any influence on the functioning or content of these services. These portals operate independently of us and apply their own data protection methods and rules. Therefore, when using their services, it is necessary to familiarize oneself with their respective Privacy Policies, which are available at the links given in § 3 point 8.
- We are particular about the protection of your data, so we make every effort to ensure that all physical, technical and organisational measures are in place to protect your personal data against accidental or deliberate destruction, accidental loss, alteration, unauthorized disclosure, use or access, in accordance with all applicable laws.
- Access to the processing of your personal data is given to a limited number of Data Controller’s employees who have been authorised by Terravita as the Controller
- 11. Changes to the Privacy Policy
- The Data Controller reserves the right to introduce changes hereto from time to time due to technical changes of web services, new features or modifications.
- Changes to this Privacy Policy may not deprive you of any acquired rights and will only have effect for the future, from the date of the change.
- Any changes to this Privacy Policy will be made available on this website.