Privacy policy

Privacy policy

This document sets out the conditions for the processing of personal data (hereinafter also referred to as "data") and cookies in the area of the effepack.com online shop, operated via the website made available at URL: effepack.com, hereinafter referred to as the "Shop".

§1. GENERAL

The administrator of the personal data processed in the course of the Shop is Daniel Stachowiak, conducting business under the name eBigroup Daniel Stachowiak, based in Józefowo (88-300) at Józefowo 22, registered in the Central Register of Business Activity and Information maintained by the Minister of Development, under the NIP number 5571664575 and REGON number 341172369

The data controller can be contacted on the following telephone number: Temporary hotline outage. Please send us an e-mail. and using the e-mail address: info@effepack.com.

§2. ON WHAT BASIS WE PROCESS YOUR DATA

When collecting personal data, we always inform you of the legal basis for processing it. This derives from the provisions of the RODO (Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data on the free movement of such data and repealing Directive 95/46/EC – General Data Protection Regulation). When we inform you about:

  • 6(1)(a) RODO – this means that we process personal data on the basis of consent received,
  • 6(1)(b) RODO – this means that we process personal data because it is necessary for the performance of a contract or for taking steps prior to entering into a contract, at your request,
  • 6(1)(c) RODO – this means that we process personal data in order to comply with a legal obligation,
  • 6(1)(f) RODO – this means that we process personal data in order to pursue legitimate interests.

§3. INFORMATION ON DATA PROCESSING FOR THE CONCLUSION AND PERFORMANCE OF CONTRACTS, POSSIBLE REDRESS AND DEFENCE

  1. We may process personal data necessary for the performance of the contract concluded with you. However, even before the conclusion of the contract, we may process personal data necessary in order to take action at your request. The processing of this data takes place on the basis of Article 6(1)(b) of the RODO.
  2. During the execution of the contract and after its execution, we process the personal data of the contracting party for the purpose of possible claims processing and their assertion. Our legitimate interest is, for example, to be able to respond to a possible complaint, to which we are obliged under separate provisions of civil law. In this case, we will process personal data based on the legitimate interest of defending against or asserting possible claims. The processing of this data takes place on the basis of Article 6(1)(f) of the RODO.
  3. We will store this data for the period necessary to fulfil the stated purposes, but no later than until the statute of limitations for claims arising under separate laws.
  4. You have the right of access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint to the supervisory authority. In the situation of data processing for the purpose specified in point 3, you also have the right to object to the processing.
  5. Provision of this data is voluntary, but failure to do so will prevent the conclusion of the contract or its execution.
  6. The recipients of this data are: our web host, email service provider, IT service provider, transport service providers, accounting and invoicing software provider, electronic payment service provider, legal, advisory and debt collection service provider and other service providers we use for the designated purpose, leasing service provider.

§4. INFORMATION ON DATA PROCESSING FOR SENDING THE NEWSLETTER

  1. We allow you to subscribe to our newsletter. If you have used this functionality, we process your personal data precisely for the purpose of sending it. The newsletter may contain advertising, commercial or marketing content.
  2. The processing of this data is based on your consent and thus Article 6(1)(a) of the RODO.
  3. You have the right to withdraw the consent you have given at any time. However, withdrawal of consent does not affect the lawfulness of previous data processing.
  4. We will keep your data until you withdraw the consent you have given. If you never withdraw it, we will process your data until we stop sending the newsletter.
  5. You have the right of your data access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint with the supervisory authority.
  6. The provision of this data is voluntary, but failure to provide this data will prevent the sending of the newsletter.
  7. The recipients of this data are: our web host, IT service provider, email service provider and newsletter service provider.

§5. INFORMATION ON DATA PROCESSING FOR THE PURPOSE OF SENDING NOTIFICATIONS

  1. We make it possible for you to subscribe to a list of recipients of our notifications, displayed via your web browser. If you have used this functionality, we process your personal data precisely for the purpose of sending it. The notifications may contain advertising, commercial or marketing content.
  2. The processing of this data is based on your consent and thus Article 6(1)(a) of the RODO.
  3. You have the right to withdraw the consent you have given at any time. However, the withdrawal of consent does not affect the lawfulness of the previous data processing.
  4. We will keep your data until you withdraw the consent you have given. If you never withdraw it, we will process your data until we stop sending notifications.
  5. You can withdraw your consent to data processing in your browser.
  6. You have the right of your data access, rectification, erasure, restriction of processing, the right to data portability, as well as the right to lodge a complaint with the supervisory authority.
  7. Provision of this data is voluntary, but failure to do so will prevent notifications from being sent.
  8. The recipients of this data are: our web host, our advertiser and our notification service provider.

§6. INFORMATION ON PROCESSING FOR DIRECT MARKETING PURPOSES AND ON PROFILING

  1. We may process your personal data for direct marketing purposes. This happens, for example, when we reply to your message providing details of our offer.
  2. For direct marketing purposes, we may use profiling, which involves an automated decision to display advertisements to you. This decision is made on the basis of the actions you take in the Shop, in particular on the basis of the contracts concluded or the pages viewed. In practice, profiling supports the usability of our Store by allowing us to present you with content that may potentially be of interest to you.
  3. The processing of this data takes place on the basis of Article 6(1)(f) of the RODO.
  4. We will keep your data until the time necessary for the purpose of performance.
  5. You have the right of your data access, rectification, erasure, restriction of processing, the right to data portability, the right to object to processing, and the right to lodge a complaint with the supervisory authority.
  6. You have the right not to be subject to profiling unless you have given your consent. However, in that case, the processing of your data will be based on the consent you have given (Article 6 (1) (a) RODO), which you can withdraw at any time. In that case, too, your data will be processed until the consent given is withdrawn.
  7. Provision of this data is voluntary and failure to provide this data will prevent direct marketing activities.
  8. The recipients of this data are: our hosting provider, IT service provider, email service provider, advertising service provider.

§7. INFORMATION ON DATA PROCESSING FOR SECURITY PURPOSES

  1. From the moment you launch our website, in order to ensure the security of our services, we process data such as:
    • the public IP address of the device from which the request was received,
    • browser type and language,
    • date and time of the request,
    • number of bytes sent by the server,
    • the URL address of the previously visited website, in case the visit was made via a link,
    • information about errors which occurred during the execution of the request.
  2. Our legitimate interest in this processing is to keep server event logs and to protect the Store from potential hacking attacks and other misuses. This includes the ability to determine the IP address of anyone performing unauthorised activity in the Shop area, such as attempting to breach security or publishing prohibited content, or attempting unauthorised activity using our servers.
  3. The processing of this data takes place on the basis of Article 6(1)(f) of the RODO.
  4. We will store this data for the period necessary to fulfil the stated purposes, but no later than until the statute of limitations for claims arising under separate laws.
  5. You have the right of access, rectification, erasure, restriction of processing, to object to the processing of your data, as well as the right to lodge a complaint with the supervisory authority.
  6. Providing this data is a condition for using the Shop. Failure to provide this data will make it impossible to use the Shop.
  7. The recipient of this data is our web host and IT service provider.

§8. INFORMATION ON DATA RECIPIENTS

When processing your personal data, we use external services. Therefore, the recipients of your personal data may be third parties:

  • Transport service provider / couriers.
  • IT service provider.
  • Email service provider.
  • Advertising services provider.
  • Accounting service provider.
  • Supplier of invoice processing software.
  • Provider of legal / advisory / recovery services – these service providers are established on a case-by-case basis, as and when the need arises.
  • The provider of the newsletter sending service.
  • Provider of electronic payment services.
  • Leasing service provider.

§9. THE ABSOLUTE RIGHTS OF THE PERSONS WHOSE DATA ARE BEING PROCESSED

When we write about rights related to the processing of your personal data, we refer to the rights described below. The possibility of using the rights below is independent of the legal basis for the processing of personal data.

Right of access to data

You have the right to obtain confirmation from us as to whether we are processing personal data relating to you. If this is the case, you have the right to access this data and to receive further information about:

  • the purposes of the processing,
  • categories of data concerned,
  • the recipients or categories of recipients to whom the data have been or will be disclosed, in particular recipients in third countries or international organisations,
  • as far as possible the intended period of retention and, where this is not possible, the criteria for determining that period,
  • the right to request us to rectify, erase or restrict the processing of your data, to object to such processing, and the right to lodge a complaint with a supervisory authority,
  • the source of the data, if your data were not collected from you,
  • automated decision-making, including profiling, and the rules on their taking, as well as the significance and the envisaged consequences of such processing for you.

Upon receipt of such a request, we are obliged to provide a copy of the personal data being processed. If such a request is received by e-mail and if no other objection is received, we will also provide the information by e-mail.

Right of rectification

You have the right to request us to immediately rectify personal data concerning you that is inaccurate. Having regard to the purposes of the processing, you have the right to request the completion of incomplete personal data, including by providing an additional statement.

The right to erasure (being forgotten)

You have the right to request us to delete personal data concerning you immediately. We are then obliged to delete your personal data without undue delay if one of the following circumstances applies:

  • you have withdrawn your consent to process your personal data and we have no other basis for processing them,
  • you have raised an effective objection to the processing of data relating to you,
  • Your personal data have been unlawfully processed,
  • Your personal data must be deleted in order to comply with a legal obligation,
  • Your data was collected in connection with the offering of information society services.

Right to restrict processing

You have the right to request us to restrict processing in the following cases:

  • where you contest the accuracy of the data, for a period allowing us to check its accuracy,
  • the processing is unlawful and you object to the erasure of the data by requesting the restriction of their use instead,
  • we no longer need the personal data for the purposes of the processing, but you need them for the establishment, exercise or defence of claims,
  • you have objected to the processing of your data, until such time as we have ascertained whether the legitimate grounds on our side override the grounds for your objection.

Automated decisions, including profiling

You have the right not to be subject to a decision that is based solely on automated processing, including profiling, and produces legal effects on you or similarly significantly affects you.

The law does not apply if this decision:

  • is necessary for the conclusion or performance of a contract between you and us,
  • is allowed by Union or Republic of Poland law and which provides for appropriate measures to protect your rights, freedoms and legitimate interests, or
  • is based on your explicit consent.

Right of complaint

You have the right to lodge a complaint in relation to the processing of your personal data, to the supervisory authority: President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, tel. 22 531 03 00, fax. 22 531 03 01, e-mail: kancelaria@uodo.gov.pl.

§10. THE RELATIVE RIGHTS OF THE PERSONS WHOSE DATA ARE BEING PROCESSED

When we write about rights related to the processing of your personal data, we refer to the rights described below. The possibility of using them is in each case dependent on the legal basis for the processing of your personal data.

Right to withdraw consent to processing

Where we process your personal data on the basis of your consent to do so, you have the right to withdraw the consent you have given at any time. Naturally, the withdrawal of the consent given does not affect the lawfulness of the previous processing of your personal data.

Right to data portability

You have the right to receive your personal data provided to us, in a structured and commonly used machine-readable format. You also have the right to send this personal data to another controller without hindrance from us, if the processing takes place:

  • on the basis of consent or on the basis of a contract, and
  • by automated means.

When exercising your right to data portability, you have the right to request that we send your personal data directly to another controller, insofar as this is technically possible. This right must not adversely affect the rights and freedoms of others.

Right to object

Where we process your personal data on the basis of Article 6(1)(f) of the RODO, you have the right to object to the processing of that data on grounds relating to your particular situation.

We are then no longer allowed to process this personal data unless we can demonstrate the existence:

  • valid legitimate grounds for processing, which must override the interests, rights and freedoms of your person, or
  • grounds for the establishment, exercise or defence of claims.

Also, if you object to the processing of your personal data for direct marketing purposes, then we will not be able to process it for such purposes.

§11. COOKIES - INTRODUCTION

The Shop’s website uses cookies. These are commonly used, small files containing a string of characters which are sent to and stored on the end device (e.g. computer, laptop, tablet, smartphone) used when visiting the Shop. This information is sent to the memory of the browser used, which sends it back on subsequent visits to the website. We can categorise cookies according to three methods.

In terms of the purposes for which cookies are used, we distinguish between three categories:

  • Necessary files – these files enable proper operation of the Shop and its functionalities, e.g. authentication or security cookies. Without saving them on your device, using the Shop will be impossible.
  • Functional files – files which enable the Store to remember your selected settings and adjust the Store to your needs and preferences, e.g. with respect to the selected language, font size, website layout. They allow us to improve the functionality and efficiency of the Shop. Without them being stored on your device, the use of certain Shop functionalities will be limited.
  • Business cookies – this category includes, for example, advertising cookies. They make it possible to adjust the advertisements displayed in or outside the Shop to your preferences. Without storing them on your device, using some of the Shop’s functionalities may be limited.

In terms of the duration of their validity, we distinguish between two categories of cookies:

  • session files – existing until the end of a given session,
  • permanent files – existing after the session has ended.

In terms of differentiating the entity that administers the cookies, we distinguish between:

  • our cookies,
  • third-party cookies.

§12. DATA CONTROLLER COOKIES

Cookies administered by us allow:

  • access authentication,
  • maintaining a session after logging in,
  • securing the Shop against hacking attacks,
  • “memorising” by the browser the content of the fields of forms that are filled in (optional),
  • “memorising” items added to the shopping cart by the browser,
  • adapting the content of the Shop’s websites to your preferences.

This makes using the Shop’s features easier and more enjoyable.

§13. THIRD-PARTY COOKIES

The use of third party cookies is subject to the privacy and cookie policy applied by that entity.

GOOGLE

We use cookies administered by Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States as part of the services:

  • Google Ads – these allow you to run and evaluate the quality of advertising campaigns, carried out using the Google Ads service,
  • Google Analytics – these allow you to evaluate the quality of advertising campaigns carried out using the Google Ads service, as well as to study user behaviour and traffic and to compile traffic statistics,

The data collected by Google Inc are anonymous and collective in nature. In particular, they do not contain features which identify (understood as personal data) users of the Shop. When using these services we collect such data as the sources of obtaining information on users visiting the Store, as well as their behaviour on the Store’s website, information on the devices and browsers they use, IP address, domain, demographic data (age, gender), interests and geographical data.

The use of third-party cookies is subject to the privacy and cookie policies of these third parties. The current policies of third parties in this regard, can be found here: https://www.e-regulaminy.pl/biuletyn/polityki-prywatnosci-i-plikow-cookies/.

§14. CONSENT TO THE USE AND MANAGEMENT OF COOKIES

Consent to the processing of cookies is voluntary and may be withdrawn at any time. Please note, however, that a lack of consent for the use of certain cookies may result in restrictions on the use of the Shop and its functionalities or even prevent such use.

You can give your consent to the processing of cookies:

  • by means of the software settings installed on the telecommunications terminal equipment used by the user,
  • by using the button containing a statement of consent to the processing of cookies or confirming that you have read its terms and conditions.

Most browser settings by default allow the placement of cookies and other information on your terminal device. If you do not agree to the storing of these files, it is necessary to change your browser settings accordingly. It is possible to disable their storage for all connections from a given browser or for a specific site, or to delete them. How you manage these files depends on the software you are using.

You can find the current file management rules in the settings of the web browser you are using, as well as here: https://www.e-regulaminy.pl/biuletyn/polityka-cookies-obsluga/.

§15. CACHE

When you use the Store website, we may automatically use the cache memory installed on your device. Within the local memory, it is possible to store data intersessionally, i.e. between successive visits to the Shop website. The purpose of using the cache is to speed up the use of the Shop by eliminating the situation in which the same data would be downloaded repeatedly from the Shop, thus overloading the user’s Internet connection. The cache may also store data such as your login password.

§16. LINKS TO OTHER WEBSITES OR SOFTWARE

The shop may contain links to other websites or software. We are not responsible for the privacy and cookie policies of such websites or software. We recommend that you read the privacy and cookie policies of these websites or software once you have accessed them or before you install them.

§17. CHANGES TO THE PRIVACY AND COOKIES POLICY

  1. The privacy and cookie policy comes into force on the date of publication on the Store’s website.
  2. The Privacy and Cookies Policy shall be amended by publishing its new content on the Shop’s website.
  3. We will publish information about changes to the Privacy and Cookies Policy in the area of the Shop’s website no later than 3 days before the new version comes into effect.