Ladies and Gentlemen,

The protection of the privacy of users of the polskieziarno.pl website ("Website"), including the online store operating within the Website ("Online Store"), in particular the protection of personal data, is an aspect that we treat as a priority. We respect the right to privacy and take every precaution to ensure that the personal data provided to us by Users is protected against loss, destruction, disclosure, access by unauthorized persons or improper use. For this purpose, it is used, among others: secure communication encryption protocol (SSL).

We ensure that the data we collect is processed in accordance with the law, including: collected for specified, lawful purposes and not subjected to further processing incompatible with these purposes, substantively correct and adequate in relation to the purposes for which they are processed, and stored in a form enabling the identification of data subjects for no longer than is necessary to achieve purpose of processing.

The rules for dealing with personal data of visitors are described below: Website (in a customer account created using the functionalities available on the Website ("Customer Account") and Polskie Ziarno brand profiles in social media (hereinafter jointly: "Digital Channels") and the rules for using files cookies and other technologies on the website operating at: https://polskieziarno.pl.

Administrator of personal data

The administrator of personal data collected via Digital Channels is Logistic sp. z o.o. with its registered office in Budzów 53 (postal code 57-215), for which the registration files are kept by the District Court in Wrocław, 0000653347th Commercial Division of the National Court Register, under the number 8871814187, NIP: 366094204, REGON: XNUMX ("Administrator", "we").

Users can contact the Administrator directly via e-mail at: sklep@polskieziarno.pl.

What data are we processing?

In the case of unlogged Website Users, we process the IP number and data from cookies. You can read more about cookies further in this Policy

Depending on which of our services you use, we may process:

• if you create a Customer Account in the Online Store: e-mail address, purchase history,
• if you are shopping: name, surname, e-mail address, telephone number, shipping details, billing address, NIP (if you are an entrepreneur), account number (if you pay by transfer directly to us),
• if you order notification about the availability of the Goods: e-mail address, information about interest in the Goods,
• if you use available contact channels, such as the contact form - personal data that you provide to us during this contact, e.g. e-mail address or other contact details,
• We may also process content that you create and share with us on third party social media, including through third party social media applications such as Facebook or Twitter or YouTube (“Social Media”); as well as other data for which you have given consent to be made available to us by the third party running the Social Media. This may include, in particular, basic data of your account in a given Social Media, such as name, e-mail address, current place of residence, profile photos, etc. ("Social Data"). To the extent permitted by law, we may collect and publish content created by you in connection with various activities on our Digital Channels in Social Media, such as competitions.

How are data and information about Users collected?

The data that the User provides himself is collected and processed - when creating a Customer Account, making purchases in the Online Store, subscribing to the newsletter, ordering product notification, using available contact forms or posting an opinion about a given Good.

In some cases, during a visit to the Website, including after logging in to the Customer Account, data regarding the visit itself may be collected automatically (using cookies), e.g. the User's IP address, browser type, operating system type, login data, type of device used (desktop/mobile), location. Data collected automatically may be used to analyze Users' behavior on the Website, personalize the content of the Website in order to improve it and ensure efficient service or direct marketing content, and are not associated with the data of individual Users. You can read more about cookies further in this Policy.

Due to placing content available via YouTube on the Website, it is possible for the administrator of this website to collect information about Users.

If you contact us via Social Media, we may access Social Data and information about the interaction itself, for example whether the interaction takes place across multiple social media. We may also gain access to the above data whenever you use a Social Media function integrated with the Website, such as plug-ins.

To learn more about how the Administrator collects your personal data and information on Social Media and how to withdraw your consent to sharing it, please visit the website of the relevant Social Media.

When using plug-ins, the web browser establishes a direct connection to the servers of a given Social Media, and its administrator receives information about the content displayed by the browser, even if you do not have an account or are not logged in to it. Plugins are independent extensions of social networking providers and the Administrator has no influence on the scope of data collected by social networking providers using plug-ins.

The purpose and scope of data collection, its further processing and use by the Social Media as well as the related rights of users and the options for setting the protection of their privacy are presented in the information on the privacy policy of the given Social Media.

More information about Facebook plugins can be found here:: http://developers.facebook.com/plugins

More information about Twitter plugins can be found here: https://twitter.com/about/resources/buttons

If you do not want Social Media providers to receive and possibly save or use your personal data, you should not use the plugins in question.

Is providing data voluntary?

Providing data is always voluntary, but failure to provide some information may result in the inability to use selected functionalities of the Website. Data necessary to use certain functionalities are generally marked as mandatory.

The User's provision of data that is not mandatory, or more data than requested, is based on the User's own decision. In such a case, processing is carried out on the basis of the User's consent (Article 6(1)(a) of the GDPR).

For what purposes and on what basis do we process Users' personal data?

We may process Users' personal data to the extent and purpose:

1. necessary to establish and shape the content of the contract, changing or terminating it and the proper implementation of this contract - this applies to both the sales contract and the contract for the provision of services provided electronically, including for the purpose of ordering services, providing specific information or services (pursuant to Article 6(1)(b) GDPR),
2. resulting from legally justified interests pursued by the Administrator - in particular to ensure the security of the service, for analytical purposes, to improve services offered via Digital Channels, to maintain contact with users and customers, in order to establish, pursue or defend against claims, in order to operate the Channels Digital and interacting with users (pursuant to Article 6(1)(f) of the GDPR),
3. corresponding to your consent, including consent to the use of certain types of cookies, consent expressed when subscribing to the Product Notification - in order to provide and adapt content to the needs and convenience of users (e.g. personalizing content in services), as well as for marketing purposes direct (pursuant to Article 6(1)(a) of the GDPR),
4. resulting from the obligations imposed on us by law, in particular for the purpose of keeping accounting, considering complaints or claims (pursuant to Article 6(1)(c) of the GDPR).

How long do we store data?

We may process personal data until the purpose of processing expires or until the consent to processing is withdrawn, in particular:

• for purposes related to the conclusion and implementation of the contract - until its termination,
• to handle communication - for the period needed to resolve the reported case, and after its completion for the period of limitation of claims related to the case,
• in order to establish, pursue or defend against claims - until the expiry of the limitation period for claims,
• for tax and accounting purposes or other purposes necessary under applicable law - for a period of time in accordance with applicable law;
• in order to conduct activities based on your consent or our legitimate interest - until you withdraw your consent, satisfy your legally justified interests or object to the processing of personal data, depending on which event occurs first.

Can user data be transferred outside the EEA?

User data may be transferred outside the European Union and the European Economic Area, i.e. to the so-called third countries.

The Administrator uses external suppliers of various services, therefore Users' data may be transferred to the USA for storage on American servers (in whole or in part - Facebook, Google, Twitter). Detailed information is available in the privacy policy of each provider of these services, available on their websites:

Google LLC: https://policies.google.com/privacy?hl=pl

Facebook Ireland Ltd.: https://www.facebook.com/privacy/explanation

Twitter Inc.: https://twitter.com/privacy

Links to other sites

The Site may contain links to other websites. We are not responsible for the content provided by these websites and we recommend that you read the privacy policy or regulations of these websites yourself.

Who may be the recipients of personal data?

We may share personal data with other administrators, e.g. for the purpose of providing payment or courier services.

We may entrust the processing of personal data to other entities supporting our activities (e.g. accounting service providers), but these entities will not be entitled to use the personal data entrusted to them for their own purposes, and their processing is subject to contracts and regulations protecting the rights of users.

Do we profile Users' data?

Your personal data will not be used for automated decision-making that affects your rights, obligations or freedoms.

However, personal data may be profiled within the Website and tracking technologies, which helps to better personalize the content addressed to a given user. However, this information is not linked to the user's personal data provided, for example, in order or contact forms. The profiling in question should not have any impact on your legal situation, and may only help in better matching the content and targeted advertisements to your interests.

You have the right to object to profiling if it would have a negative impact on your rights and obligations.

What rights do Users have in connection with the processing of their personal data?

You have the right to request from us:

• access to your personal data,
• rectification of incorrect data or completion of incomplete data,
• deleting your personal data or limiting their processing,
• data transfer.

Consent to the processing of personal data may be withdrawn at any time, and the withdrawal of consent does not affect the lawfulness of the processing that was previously carried out on its basis.

If the data is processed on a basis other than your consent, you may object to the Administrator against the processing of your data - for reasons related to your particular situation, and in the case of personal data processing for direct marketing purposes - at any time, without giving a reason.

However, the Administrator points out that these rights are not absolute and do not apply to all personal data processing activities. The exercise of rights may not adversely affect the rights and freedoms of other persons, such as copyrights or professional secrecy. Restrictions on the exercise of users' rights are specified in detail in the GDPR.

You have the right to lodge a complaint with the supervisory authority (President of the Personal Data Protection Office) if you consider that the processing of your personal data violates the law.

In order to exercise your rights, you can contact us via the e-mail address: sklep@polskieziarno.pl or by post to the address of the Administrator's place of business. Please indicate the scope of your requests in your message. We will respond within one month of receiving your request.