privacy policy

PRIVACY AND COOKIES POLICY

You have the right, among others, to access your data, correct it, and request its deletion. Furthermore, you have the right to object to the processing of your personal data or to request a restriction of its processing.

Providing the required personal data is voluntary, but it is a condition for us to provide you with certain services (e.g., maintaining an account, sending a Newsletter) or fulfilling a contract. We do not make individual decisions about you based solely on automated processing (profiling) that would have legal effects or similarly significantly affect your situation.

Our domain has an SSL certificate, thanks to which your data is encrypted.

Below you will find all the most important issues related to the processing of personal data on our website.

Who is the administrator of the website and personal data?

The administrator of the website and personal data is Tea Brother sp. z o.o. with its registered office in Nowy Dwór Mazowiecki at ul. Targowa 9B, 05-100 Nowy Dwór Mazowiecki, entered into the register of entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XIV Commercial Division of the National Court Register under KRS number 0000956323, with NIP: 5311691575, REGON: 36051965400000.

Contact details: e-mail address: sklep@basilur.pl, phone no. +48 500 164 000.

What is the legal basis for processing personal data?

Personal data is collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). The processing of personal data is also regulated by the national Act of 10 May 2018 on the protection of personal data (Journal of Laws of 2019, item 1781, as amended).

What data do we process?

Depending on the purpose and user preferences, we may process data such as: name and surname, address, e-mail address, phone number, bank account number, IP address, and for entrepreneurs, also NIP number and business address. In addition, we may process other personal data sent to us in correspondence. For analytical purposes, we may also process data regarding the source of traffic to the Store, the operating system and web browser used to browse the Store, data regarding viewed products, time spent on the website, abandoned carts, placed orders, activities in response to Newsletter mailings, user age range, gender, approximate location, and interests (based on online activity).

The above data is provided to us as a result of actions such as:

  • Using the contact form
  • Sending correspondence directly to our e-mail address
  • Providing us with data during a phone conversation,
  • Registering an account in the Store,
  • Placing an order in the Store,
  • Subscribing to the Newsletter,
  • Adding a product review (if such an option is available)
  • Collecting other data for analytics by the Store's software or tools listed in this Privacy Policy.

For what purposes do we process your data?

We process data to the extent essential for the functioning of our store and store it for the period permitted by law. We process data provided by users while using the store.

  • Conclusion and performance of a contract – pursuant to Art. 6 sec. 1 lit. b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Setting up and maintaining an account - pursuant to Art. 6 sec. 1 lit. b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Ensuring contact with us via the contact form, e-mail, phone call - pursuant to Art. 6 sec. 1 lit. b) GDPR, i.e., when processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.
  • Adding opinions and their verification - based on: Art. 6 sec. 1 lit. a GDPR – when the data subject has given consent to the processing of his or her personal data for one or more specific purposes,
  • Direct marketing based on: Art. 6 sec. 1 lit. a GDPR – when the data subject has given consent to the processing of his or her personal data for one or more specific purposes or based on Art. 6 sec. 1 lit. f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Sending a Newsletter and operating loyalty programs - pursuant to Art. 6 sec. 1 lit. a) GDPR, i.e., when the data subject has given consent to the processing of his or her personal data for one or more specific purposes.
  • Fulfilling legal obligations, establishing and pursuing claims – pursuant to Art. 6 sec. 1 lit. c) GDPR, i.e., when processing is necessary for compliance with a legal obligation to which the controller is subject, and pursuant to Art. 6 sec. 1 lit. f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Analytical and statistical activities - Art. 6 sec. 1 lit. f) GDPR, i.e., when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

We use tools such as Facebook Ads and Google Ads, through which we can target ads to specific target groups based on interests, gender, age, and profession. These tools are described in detail in the cookie policy.

To whom do we disclose personal data?

We disclose personal data to other entities only to the extent that the data subject has consented to the processing of data, to the extent necessary for the performance of the contract, or to the extent resulting from the legitimate interests pursued by the administrator. These include entities cooperating with the store: hosting provider, Newsletter sending tool provider, CRM system and invoicing system provider, accounting office, courier and transport companies, IT company providing services for the Store, online payment operators, banks, marketing tool providers, and other subcontractors, as well as entities to whom we are obliged to disclose your data under applicable law. In the case of analytical and statistical data, which are not personal data, they may be transferred to companies providing generally available services in the field of analytics, statistics, and optimization, including to the United States (e.g., Google LLC, Meta Platforms Inc.).

The Administrator hereby informs that the hosting provider is home.pl Spółka Akcyjna with its registered office in Szczecin at ul. Zbożowa 4, 70-653 Szczecin, registered in the register of entrepreneurs of the National Court Register by the District Court Szczecin – Centrum in Szczecin, XIII Commercial Division of the National Court Register under number 0000431335, REGON 811158242, NIP 8522103252. More information can be found here.

Are data transferred to third countries or international organizations?

Some data processing operations may involve transferring them to third countries or international organizations in connection with the use of tools that store personal data on servers located in third countries, especially the USA.

However, it should be noted that the providers of these tools guarantee an adequate level of personal data protection, in particular by adhering to the Privacy Shield program or using standard contractual clauses. This applies in particular to Google Ireland Limited services.

What exactly are your rights regarding the processing of your personal data?

You have the right to:

  • request access to your personal data,
  • request rectification of your personal data,
  • object to the processing of personal data,
  • request the erasure of your personal data,
  • request restriction of processing of personal data,
  • request data portability,
  • obtain information about automated decision-making, including profiling, and about safeguards applied in connection with the transfer of such data outside the EU,
  • obtain information about the purposes of processing, categories of personal data processed, recipients or categories of recipients of such data,
  • obtain information about rights under the GDPR, the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), the planned period of data storage or criteria for determining this period, and the source of such data,
  • obtain a copy of your personal data.

If you wish to exercise any of the aforementioned rights, please inform us. We will promptly provide you with all information about the actions taken in response to your request.

You can withdraw your consent to the processing of your personal data at any time. To do this, please contact us.

Cookies Policy

Cookies are commonly used short text files that allow identifying the software used, adapting content to user needs, and ensuring the proper functioning of websites. They are stored on the device you are using and have a domain name, storage time, and a specific value. Cookies used in our store are safe and are divided into session and persistent cookies. Session cookies are stored only until the end of a given browser session. Persistent cookies are stored on the device until they are deleted. You can change your cookie preferences or delete them (persistent cookies) at any time using your web browser.

Basis for using cookies

We use some cookies to the extent necessary for the proper provision of services by electronic means, and we use other cookies based on your granted consent.

Consent is given through browser settings, other software for managing cookies, or cookie manager settings if available on the website.

You can disable cookies, as well as individual types of cookies. However, we reserve that if you disable or restrict cookie support, you may lose access to some functionalities available on our website, for which consent to the use of specific cookies is necessary.

Entities whose cookies we use:

Google tools - Google Analytics, Google Ads, Google Adsense, Google Tag Manager, as well as Google's YouTube, provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. Our actions regarding the use of these tools are based on our legitimate interest in marketing using commonly used tools. From our perspective, the data collected in connection with the use of these tools do not constitute personal data due to anonymization.

More information about the tools can be found in Google's Terms of Service and Privacy Policy.

Google Analytics

We use the Google Analytics tool for analytical and statistical purposes, which serve to improve the functioning of our website.

The data collected in connection with the use of the tool does not constitute personal data due to anonymization and includes tracking user traffic on the website (information about the operating system, browser, visited pages and subpages, time spent on the website and subpages, source of traffic to the website).

Google Ads

When you visit our website, remarketing cookies are left on your device that collect information about activity on our website. The collected information is used to display ads in the Google network that match your activities and interests. If you have consented to this with Google, this data may also be further processed by this company, e.g., to create target groups.

If you do not wish to receive personalized ads, you can define settings on the myadcenter.google.com website.

Google Tag Manager

This tool allows for the analysis of user traffic and activity using tags. This allows for gathering information about ad effectiveness, which contributes to optimizing our website and offer.

Meta Pixel

We use marketing tools available within the Facebook service and provided by Meta Platforms Ireland Limited.

Meta Pixel is a short code placed on a website that allows measuring ad effectiveness based on analyzing user actions on the website and personalizing ads. The purpose of the code is to display ads to the right audience, increase sales, and measure ad results.

Meta Pixel uses cookies to record website activities – for example, website traffic, visiting specific subpages, adding products to the cart, or making purchases. The analysis of these activities optimizes the website's operation and our offer.

More information can be found in Meta's Privacy Policy.

Social Media

If we place a plugin for a given social media platform (Facebook, Instagram, LinkedIn, Twitter) on the website, the administrator of that service receives information about visits to our website using the user ID. The administrator of the given platform collects information about the browser used, the date and time of the visited page. The administrators of the given platform use this information to ensure the full functionality of the plugins and to improve their services, as well as to personalize ads.

More information can be found in Meta's Privacy Policy and in the Privacy Policy of LinkedIn and Pinterest.

Cloudflare

We use the Cloudflare tool to ensure security and optimize traffic on our Store's websites.

More information can be found in Cloudflare's Privacy Policy.

Skąpiec

We use the Skąpiec plugin, which allows Users to compare product prices, and the Store to enhance the shopping experience through optimizations.

More information can be found in the Privacy Policy of Grupa Ringier Axel Springer Polska.

Server logs

Visiting and using the website involves sending requests to the server, which are saved in so-called server logs. These include, among other things, information about the user's IP address, date and time of the request, browser, and operating system.

Server logs are saved and stored on the server. However, they are not linked to specific individuals using the site and are not intended for identification – they are used solely for website administration, and their content is not disclosed to unauthorized persons.