Privacy and Cookie Policy

privacy policy

Thank you for your interest in our online store. The protection of your privacy is very important to us. In this privacy policy you will find detailed information on the handling of your data.

General Provisions

The administrator of your data is: Nutrifarm sp. z o. o., Pustynia 84G, 39-200, Dębica.
Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/ EC (hereinafter referred to as GDPR).

The personal data administrator exercises special and due diligence to protect your rights, and in particular ensures that your data is:

a) processed lawfully, fairly and in a transparent manner ("lawfulness, fairness and transparency");

b) collected for specific, explicit and legitimate purposes and not further processed in a manner incompatible with these purposes;

c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimization");

d) correct and updated as necessary; all reasonable steps are taken to ensure that personal data that is inaccurate in light of the purposes of their processing are promptly deleted or rectified;

e) kept in a form that allows identification of the data subject for no longer than is necessary for the purposes for which the data are processed;

f) processed in a manner that ensures adequate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction or damage, using appropriate technical or organizational measures.

Scope of data collection and data recipients.

The administrator may process the following categories of your personal data:

a) name;

b) surname;

c) delivery address;

d) telephone number;

e) e-mail address;

f) company name;

g) numbers: NIP, REGON, KRS

h) delivery address;

i) device IP;

j) Information collected by Cookies: Language, region, product preferences in order to present advertising content

The basis for data processing

Each time, the purpose and scope of data processed by the Administrator results from the actions taken by you on the Website and is based on the provisions of law.

Providing your personal data is voluntary, but in many circumstances necessary to perform the contract, contact or other request. The administrator processes the obtained data on the basis indicated below:

a) 6 sec. 1 lit. b GDPR - in order to establish and implement a sales contract and a contract for the provision of electronic services (registration and account maintenance in the online store);

b) 6 sec. 1 lit. c GDPR - processing is necessary to fulfill legal obligations resulting from legal provisions, e.g. the Accounting Act or the Tax Ordinance;

c) 6 sec. 1 lit. f GDPR - processing is necessary for the purposes of the legitimate interests pursued by the administrator, which is direct marketing of own products and services; as well as pursuing and defending claims and improving the presentation of products, services and the efficiency of the website.

Data sources

We collect personal data only when you voluntarily provide it to us by placing your order, contacting us (e.g. via the contact form or e-mail) or setting up a customer account in the online store, as well as through Cookies (rules of use of cookies are described below).

Data storage period

Data retention periods depend on the processes in which personal data are processed.

a) in the case of setting up an account in the online store - until the Customer terminates the contract for the provision of electronic services (deletion of the account).

b) in the case of purchases - for a period resulting from accounting and tax obligations - resulting from legal provisions, e.g. the Accounting Act or the Tax Ordinance; as well as for the period of limitation of claims resulting from the Civil Code.

c) in the case of direct marketing - until you raise an objection.

Data transfer

The personal data administrator reserves that, in accordance with the provisions of the GDPR and the Act on the Protection of Personal Data, it may disclose your personal data to other entities providing services in the field of hosting, administration, sending a newsletter, maintaining and managing websites, order fulfillment in online stores, investigation and determination claims and explanation of the circumstances of unauthorized or unlawful use of services provided electronically, the implementation of sports and other events promoting a healthy lifestyle, as well as companies from the Administrator's capital group, including Nutrifarm sp. z o. o.

As part of entrusting data processing [https://gsuite.google.com/terms/dpa_terms.html] - on our behalf, an external service provider performs services for us in the field of hosting and presentation of websites. All data that - as described in this privacy policy - has been collected as part of the use of our website or in the forms provided for this purpose in the online store, is stored on the servers of this service provider. Processing on other servers takes place only to the extent specified in this privacy policy.

In order to perform the contract, we transfer your data to the courier company dealing with the delivery, if it is necessary for the delivery of the ordered goods. Depending on which payment service provider you choose in the ordering process, in order to process the payment, we transfer the payment data collected for this purpose to the credit or payment institution processing the payment and, if applicable, to the payment service provider selected by us or by you. Some payment service providers collect data themselves if you set up an account with them. In such cases, as part of the order, you must log in with the payment service provider by providing your access data. In this case, the privacy policy of the respective payment service provider also applies.

If you subscribe to our newsletter, we will use the data necessary for this purpose or provided to us separately by you in order to send you our newsletter electronically on a regular basis.

You can unsubscribe from the newsletter at any time by sending us a message with relevant information or by using the appropriate link in the newsletter. After deregistration, we will delete your e-mail address, unless you expressly consent to further use of your data for other purposes or we reserve the right to further use your data in cases permitted by law, which - in such a situation - we inform you in this statement.

The newsletter is sent as part of entrusting data processing on our behalf by the service provider to whom we provide your e-mail address for this purpose.

The processing of personal data for the purpose of sending the newsletter is based on the legal basis, which is the legitimate interest of the administrator - marketing of own products and services. The consent that you indicate by subscribing to the newsletter results from the Act on the provision of electronic services and the Telecommunications Law and concerns the willingness to receive commercial materials and consent to the use of end devices such as telephone or email. This consent is necessary to receive our newsletter, but you can withdraw it at any time.

Advertising sent by traditional mail and your right to object

In addition, we reserve the right to process your data: name and surname and postal address for our own advertising purposes in the field of our products, e.g. sending the latest offers and information about our products by post. The above serves to secure our legitimate interest in contacting customers for advertising purposes.

Advertising messages are delivered as part of entrusting data processing on our behalf by the service provider to whom we provide your data for this purpose. You can object to the storage and use of your data at any time by sending a message to our contact address: [please enter address].

Rights of data subjects in connection with the processing of personal data

You have the right to obtain confirmation from the administrator as to whether personal data concerning you are being processed, and if this is the case, to obtain access to such data.

You have the right to request the administrator to immediately rectify inaccurate personal data. Taking into account the purposes of processing, you have the right to request supplementation of incomplete personal data, including by submitting an additional statement.

You have the right to request the administrator to immediately delete your personal data, and the administrator is obliged to delete personal data without undue delay, if the circumstances indicated in art. 17 sec. 1 GDPR.

You have the right to request the administrator to limit the processing of personal data.

You have the right to receive in a structured, commonly used, machine-readable format your personal data that you have provided to the administrator, and you have the right to send this personal data to another administrator without hindrance.

You have the right to object to the processing of personal data. If personal data is processed for the purposes of direct marketing, you have the right to object at any time to the processing of your personal data for the purposes of such marketing, including profiling to the extent that the processing is related to such direct marketing.

After you have exercised your right to object, we will not continue to process your personal data, unless we demonstrate compelling legitimate grounds for processing and they override your interests and rights, or when data processing is for the purpose of pursuing, exercising or defending claims.

This does not apply when data processing takes place for direct marketing purposes. In this case, we will not continue to process your personal data for the above purpose.

In order to exercise the rights referred to above, you can contact the Administrator's Data Protection Officer by sending an appropriate message in writing or by e-mail. The exercise of your rights is also possible by logging into your user account and changing your data.

Please contact the Administrator's Data Protection Officer at: E-mail address: iodo@nutrifarm.com.pl ; Correspondence address: Pustynia 84G, 39-200 Dębica Contact telephone number: 14 684 17 78, in case of any questions, comments and requests regarding your rights.

The right to lodge a complaint with the competent data protection authority.

You have the right to lodge a complaint with the competent supervisory authority if you are of the opinion that any personal data concerning you is processed in a way that violates the GDPR. The competent authority for the protection of personal data in Poland is the President of the Office for Personal Data Protection.

Cookies and internet tools.

In order to make our website more attractive and to enable the use of certain functions in order to display suitable products or for market research purposes, we use so-called cookies on our websites. cookies. The above - as part of the analysis and assessment of interests - serves to protect our legitimate interest, consisting in the optimal presentation of our offer. Cookies are small text files that are automatically saved on your end device.

Cookies are used to collect information related to the use of the Website by the User. Cookies enable in particular:

maintaining the Website User's session (after logging in), thanks to which the User does not have to re-enter the login and password on each subpage of the Website;
adapting the content of the Website pages to the User's preferences and optimizing the use of websites; in particular, these files allow to recognize the Website User's device and properly display the website, tailored to his individual needs;
creating statistics that help to understand how Website Users use websites, which allows improving their structure and content.

The Website uses two basic types of cookies: "session" (session cookies) and "permanent" (persistent cookies). Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off the software (web browser). "Permanent" cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User.

The following types of cookies are used on the Website:

"necessary" cookies, enabling the use of services available on the Website, e.g. authentication cookies used for services requiring authentication on the Website;
"performance" cookies, enabling the collection of information on how to use the Website's pages;
"functional" cookies, enabling "remembering" the settings selected by the User and personalizing the User's interface.

The storage time is given in the Cookie settings of your web browser. The browser can be configured in such a way as to receive information about the use of Cookies and be able to decide on their acceptance or rejection in specific cases or completely. Browsers manage cookie settings in different ways. In the auxiliary menu of the web browser you will find explanations on changing the Cookie settings. They are available at the following links:

Internet Explorer™: https://support.microsoft.com/pl-pl/help/17442/windows-internet-explorer-delete-manage-Cookies

Safari™: http://safari.helpmax.net/pl/ochrona-i-prywatnosc/usuwanie-plikow-cookie/

Chrome™: https://support.google.com/chrome/answer/95647?hl=pl&hlrm=en

Firefox™: https://support.mozilla.org/pl/kb/usuwanie-ciasteczek

Opera™: http://help.opera.com/Windows/12.10/pl/Cookies.html

If you do not agree to the use of cookies, the functionality of our website may be limited.

As part of Google Analytics (see below), this website also uses so-called cookies. DoubleClick cookies that allow your browser to be recognized when you visit other websites. The information automatically generated by cookies about your use of this website is transferred to a Google server in the USA and stored there. Due to the IP anonymization activated on this website, your IP address is shortened before being forwarded within the Member States of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

Google will use this information to compile a report on website activity and to provide other services related to website use. The above - as part of the analysis and assessment of interests - serves to protect our legitimate interest, consisting in the optimal and effective operation of our website on the market. Google will transfer the above information to third parties if required by law or if third parties process the above data on behalf of Google.

Google Double Click is an offer of Google LLC. (www.google.com).

Google LLC is headquartered in the USA and certified by the EU-US-Privacy Shield. The current certificate is available at this link. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified by the Privacy Shield.

You can deactivate DoubleClick cookies by clicking on the link . In addition, you can find out about the use of cookies and the relevant settings on the Digital Advertising Alliance website . You can also configure your browser in such a way as to receive information about the use of Cookies and be able to decide on their acceptance or rejection in certain cases or completely. If you do not accept the use of cookies, the functionality of our website may be limited.

Use of Google (Universal) Analytics for web analytics

Our website uses Google (Universal) Analytics, a web analytics tool from Google Inc. (www.google.com). The above - as part of the analysis and assessment of interests - serves to protect our legitimate interest, consisting in the optimal presentation of our offer. Google (Universal) Analytics uses methods that enable an analysis of your use of the website - for example, cookies. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and stored there. Due to the IP anonymization activated on this website, Your IP address is shortened before being forwarded within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data.

You can prevent the recording of the data collected by the cookie about your use of our website (including your IP address) by Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https: //tools.google.com/dlpage/gaoptout?hl=en

Alternatively, instead of installing the browser plug-in, you can also click on this link to disable the collection of data by Google Analytics on our website. An opt-out cookie will then be stored on your end device. If you delete your cookies, you must click on the link above again.

Advertising with e-marketing tools

Google AdWords Remarketing

With the help of Google Adwords, we promote our website in search results and on third-party websites. For this purpose, when visiting our website, the so-called cookies are automatically left on the device of each visitor. Remarketing cookie file by Google, which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, allows you to display interest-based advertisements. The above - as part of the analysis and assessment of interests - serves to protect our legitimate interest, consisting in the optimal operation of our website on the market.

Further data processing takes place only if you have consented to Google linking your browsing history and application use with your account and using information from your Google account to personalize advertisements that are displayed on websites. In this case, if you are logged in while visiting our website on Google, Google will use your data together with Google Analytics data to create and define lists of target groups for cross-device remarketing. For this purpose, Google temporarily combines your personal data with Google Analytics data to create target groups.

The Google AdWords Remarketing service is an offer of Google LLC (www.google.pl). Google LLC is headquartered in the USA and certified by the EU-US-Privacy Shield. The current certificate is available at the link provided. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies certified by the Privacy Shield.

You can deactivate cookies used for remarketing by clicking on this link. In addition, you can find out about the use of cookies and the relevant settings on the Digital Advertising Alliance website.

AdRoll Retargeting

With the help of our advertising partner AdRoll Advertising Limited, Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland, we promote our website in search results and on third party websites. For this purpose, a cookie file of such service providers or their partners is automatically left on the visitor's device when visiting our website, which, with the help of a pseudonymous identifier (ID) and on the basis of the pages you visit, enables the display of interest-based advertisements. The above - as part of the analysis and assessment of interests - serves to protect our legitimate interest, consisting in the optimal operation of our website on the market.

You can deactivate cookies used for retargeting by clicking on one of the following links: https://app.adroll.com/optout/safari

Alternatively, you can disable the use of cookies by third-party providers by visiting the appropriate deactivation website (Network Advertising Initiative) .

Social plugins

Use of social plugins

On our website, so-called cookies are used. social plugins ("plugins") of social networking sites.

By displaying our website containing such a plug-in, your browser will establish a direct connection to the Facebook, Google, Twitter or Instagram servers. The content of the plug-in is transferred by the given service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has displayed our website, even if you do not have a profile with a given service provider or are not currently logged in to it. Such information (including your IP address) is sent by your browser directly to the server of a given service provider (some servers are located in the USA) and stored there. If you have logged into one of the social networking sites, this service provider will be able to directly assign a visit to our website to your profile on a given social networking site. If you use a given plugin, e.g. click the "Like" button or the "Share" button, the relevant information will also be sent directly to the server of the given service provider and stored there. This information will also be published on the relevant social network and will be shown to people added as your contacts.

The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy are described in the service providers' privacy policy.

http://www.facebook.com/policy.php

https://twitter.com/privacy

https://help.instagram.com/155833707900388

If you do not want social networking sites to assign data collected during visits to our website directly to your profile on a given website, you must log out of this website before visiting our website. You can also completely prevent the loading of plug-ins on the website by using the appropriate extensions for your browser, e.g. blocking scripts with "NoScript" (http://noscript.net/)."

Video plug-ins for YouTube

Content from other service providers is integrated into this website. Video plug-ins for YouTube are provided by Google Inc ("Service Provider"). YouTube is operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA ("Google").

Extended data protection has been activated for the YouTube videos available on our website. This means that YouTube does not collect and store information about visitors to the website, unless they play a video.

The purpose and scope of data collection and their further processing and use by service providers, as well as your rights in this regard and options regarding settings that ensure the protection of your privacy are described in Google's privacy policy.