Privacy Policy
This Privacy Policy constitutes an integral part of the Regulations of the Rebel Roast Coffee Online Store of March 1, 2019 (Regulations).Definitions of terms used in this Privacy Policy are included in the Regulations. The provisions of the Regulations shall apply accordingly.
PERSONAL DATA
- Personal data provided by the Customer are processed by the Seller Rebel Roast Coffee SP. Z OO SPÓŁKA KOMANDYTOWA, Zawiszy 16B / 116 01-167 Warszawa, entered into the register of entrepreneurs under the KRS number 0000687611, using the tax identification number (NIP) 527 281 36 36 and the statistical number REGON 367850458, which is the administrator of personal data.
- The scope of personal data processed is determined by the scope of data completed by the Customer and then sent to the Seller using an appropriate form. The processing of the Customer's personal data may concern his e-mail address, name and surname, telephone number, residential address and computer IP address.
- Customers' personal data will be processed for the purposes of: (a) implementation of legal provisions, (b) execution of the Order, provision of services electronically, consideration of complaints and other activities indicated in the Regulations, (c) promotional and commercial activities of the Seller.
- Providing personal data is voluntary, but the lack of consent to the processing of personal data marked as obligatory will prevent the Seller from providing services and implementing Sales Agreements.
- The legal basis for the processing of personal data in the case referred to in section 3 letter (a) there is a statutory authorization to process data necessary for lawful activities, while in the case referred to in section 3 letter (b) and (c), this is a statutory authorization for processing necessary for the performance of a contract when the data subject is a party to it or when it is necessary to take action before concluding a contract at the request of the data subject or voluntarily expressed Client's consent.
- Customers' personal data may be entrusted for processing only for the purpose of implementing Sales Agreements and contracts for the provision of electronic services by the Seller to a hosting company, a company providing accounting services to the Seller and a courier company. Personal data collected by the Seller may also be made available: to relevant state authorities at their request pursuant to relevant legal provisions, or to other persons and entities - in cases provided for by law.
- Personal data may be made available to unauthorized entities pursuant to this Policy only with the prior consent of the Customer to whom the data relates.
- Customers have the right to control the processing of data concerning them contained in data files, and in particular the right to: a) access their personal data, supplement and correct the data by submitting such a request to the Seller, b) request a temporary or permanent suspension of their processing or delete them if they are incomplete, outdated, false or were collected in violation of the Act or are no longer necessary to achieve the purpose for which they were collected, c) object to the processing of their personal data - in cases provided for by law - and the right to request them deletion when they become unnecessary to achieve the purpose for which they were collected.
- If the Seller receives information about the Customer's use of a service provided electronically in violation of the Regulations or applicable regulations (prohibited use), the Seller may process the Customer's personal data to the extent necessary to determine the Customer's liability.
- The website may store http queries, therefore some information may be saved in the server log files, including the IP address of the computer from which the query came, the name of the client's station - identification carried out by the http protocol, if possible, date and system time registration in the Store and the arrival of the query, the number of bytes sent by the server, the URL address of the page previously visited by the Customer, if the Customer entered via a link, information about the Customer's browser, information about errors that occurred during the http transaction. Logs may be collected as material for the proper administration of the Store. Only persons authorized to administer the IT system have access to the information. Log files can be analyzed in order to prepare statistics on traffic in the Store and errors occurring.
- Legal basis for the processing of personal data: Personal data in the Roast Rebel Coffee SP store. Z OO SPÓŁKA KOMANDYTOWA are processed by the Administrator in accordance with applicable law (Article 6(1) of the GDPR) and in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons in connection with with the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("GDPR").
INFORMATION SECURITY
- The Seller applies technical and organizational measures to ensure protection of processed personal data appropriate to the threats and categories of data protected, and in particular technically and organizationally protects the data against disclosure to unauthorized persons, removal by an unauthorized person, processing in violation of the Act and change, loss, damage or destruction. , among others SSL (Secure Socket Layer) certificates are used. The set of collected personal data of Customers is stored on a secured server and the data is also protected by the Seller's internal procedures in the field of personal data processing and information security policy.
- At the same time, the Seller indicates that the use of the Internet and services provided electronically may be associated with specific IT risks, such as: the presence and operation of Internet worms, spyware or malware, including computer viruses, as well as the possibility of being exposed to cracking or phishing (password fishing), and others. In order to obtain detailed and professional information regarding maintaining security on the Internet, the Seller recommends obtaining it from entities specializing in this type of IT services.
COOKIES
- In order to ensure the proper operation of the Store, the Seller uses cookie technology. Cookies are information packages saved on the Customer's device via the Store, usually containing information consistent with the purpose of a given file, with which the Customer uses the Store - these are usually: website address, date of placement, expiration date, unique number and additional information in accordance with purpose of a given file.
- The Seller uses two types of cookies: session cookies, which are permanently deleted when the Customer's browser session ends, and persistent cookies, which remain on the Customer's device after the browser session ends, until they are deleted.
- It is not possible to determine the customer's identity based on cookies, both session and persistent. The Cookie mechanism does not allow the collection of any personal data.
- The Store's cookies are safe for the Customer's device, in particular they do not allow viruses or other software to enter the device.
- Files generated directly by the Store cannot be read by other services. External Cookies (i.e. Cookies placed by the Seller's partners) can be read by an external server.
- The Customer may disable cookies on his device, in accordance with the browser manufacturer's instructions, but this may result in the unavailability of some or all of the Store's functions.
- The Seller uses its own Cookies for the following purposes: authenticating the Customer in the Store and maintaining the Customer's session; configuration of the Store and adapting the content of the pages to the Customer's preferences, such as: recognizing the Customer's device, remembering the settings selected by the Customer; ensuring security of data and use of the Store; audience analysis and research; provision of advertising services.
- The Seller uses External Cookies for the following purposes: creating (anonymous) statistics enabling optimization of the Store's usability, via analytical tools such as Google Analytics; using interactive functions via social networking sites: Facebook, Twitter, Google+, YouTube and Instagram.
- The customer can change the cookie settings at any time by specifying the conditions for their storage, through the web browser settings or by configuring the service. The customer may also delete cookies stored on his device at any time, in accordance with the instructions of the browser manufacturer.
- Detailed information about cookies is available in the settings of the web browser used by the Customer.