privacy policy

This privacy policy describes how your personal data is collected, used and shared when visiting or making purchases at www.basilur.pl

Contents:

1. About us.

The administrator of personal data responsible for their processing is:

Tea Brother Sp. z o. o
Street Targowa 9B
05-100 Nowy Dwór Mazowiecki
E-mail address: sklep@basilur.pl
Phone number: 500-164-006

2. Access data and hosting.

You can visit our website without providing personal data. Whenever a website is accessed, the server automatically only saves the so-called server logs, e.g. the name of the requested file, your IP address, date and time of the request, the amount of data transferred and the Internet service provider making the request (so-called access logs) and documents the page visit.

This data is analyzed solely to ensure the proper functioning of our website and to improve our offer. The above serves in accordance with Art. 6 section 1 letter f GDPR to secure our legitimate interest in the optimal, correct presentation of our websites and offers. All access data is deleted within seven days from the end of your visit to the website.

Hosting

Website hosting and display services are partly provided on our behalf by our service providers as part of outsourcing data processing. Unless otherwise provided in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. If you have any questions about our service providers and the basics of working with them, please contact us. You will find our contact details in the sections: "About us" and "Our contact details and your rights".

Content Delivery Network

In order to shorten the loading time of our websites, we use the so-called Content Delivery Network ("CDN"). As part of CDN services, the content on the website, e.g. large multimedia files, is delivered via regional servers of external CDN service providers. This means that also the so-called access data is processed on CDN service providers' servers. The services provided to us in this area are provided under a data entrustment agreement concluded with service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. You can find our contact details in the sections : " About us" and "Our contact details and your rights".

3. Collection and processing of data for the purposes of contract execution, contact and setting up a Customer account.

We collect personal data only when you voluntarily provide it to us when placing your order or contacting us (e.g. via the contact form or e-mail). Mandatory fields are marked as such because the data they contain is necessary to perform the contract or consider the matter in which you contact us. Without providing them, you cannot complete your order or contact us. What data is collected results directly from the forms into which the data is entered. We use the data provided by you in accordance with Art. 6 section 1 letter b GDPR in order to perform the contract and respond to your inquiries. Moreover, if pursuant to Art. 6 section 1 letter a GDPR, you consent to creating a customer account - we will process your personal data necessary for this purpose. Further information regarding the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of order processing, payment and shipping, can be found in the following sections of this privacy policy.
After complete execution of the contract or deletion of your customer account, the processing of your data will be limited, and after the expiry of the storage periods specified in the tax regulations and the Accounting Act, this data will be deleted (Article 6(1)(c) of the GDPR), unless you expressly express consent (Article 6(1)(a) of the GDPR) to further use of this data or, in accordance with applicable law, we reserve the right to further use the data for other purposes, about which - in such a situation, we inform you in this privacy policy. Your customer account may be deleted at any time. To do this, please send a message to our contact address indicated in the section "Our contact details and your rights" or use the appropriate function in the settings of your customer account.

4. Transfer of data for the purpose of delivery.

In order to perform the contract (Article 6(1)(b) of the GDPR), we transfer your data to the forwarding company you selected in the ordering process, which has been commissioned to deliver the ordered products.

5. Data processing for the purpose of making payments.

In order to make payments in our online store, we cooperate with external service providers handling electronic online payments and transfer your data to the payment processing company you selected in the ordering process. The above is for the implementation of the contract (Article 6(1)(b) of the GDPR).

Data processing to prevent fraud and optimize payments

In some situations, we may provide our service providers with additional information that may be used by them along with the information necessary to complete payment. These service providers then act on our behalf as processors and provide us with services in the field of fraud prevention and optimization of payment processes (e.g. invoicing, analysis of disputed payments, accounting support). Pursuant to Art. 6 section 1 letter f GDPR, this serves our legitimate interests in protection against abuse and fraud and in the effective management of payments.

6. Marketing channels: e-mail, telephone contact

Advertising sent by e-mail after subscribing to the newsletter

If you subscribe to our newsletter, we will use the data you provide to us, necessary for the purpose of regularly sending you our newsletter electronically, based on your consent (Article 6(1)(a) of the GDPR). You can unsubscribe from the newsletter at any time by sending us a message to our contact address indicated in the section "Our contact details and your rights" or by using the appropriate link included in the newsletter. After unsubscribing, we will delete your e-mail address, unless you expressly agree. we expressly consent to the further use of your data for other purposes or we do not reserve the right to further use this data in legally permitted cases, and in such a situation we inform you in this privacy policy.

Sending a newsletter

The newsletter is sent as part of entrusting data processing on our behalf by an external service provider. If you have questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the sections: "About us" and "Our contact details and your rights".

Sending an invitation to leave a purchase review

If, during or after placing the order, you expressed your consent (Article 6(1)(a) of the GDPR), then we will use your e-mail address to send you an electronic invitation to evaluate the purchase made in our store. Opinions/ratings are issued via the feedback system we use. You can withdraw your consent at any time by sending an appropriate message to our contact address indicated in the section "Our contact details and your rights" or by using the appropriate link included in the message inviting you to leave an opinion.

Invitations to submit reviews may be sent on our behalf and on our behalf by our service provider - Trusted Shops, which provides services in this area for us. Trusted Shops cooperates with subcontractors based in the USA for this purpose. As part of this cooperation, an appropriate level of data protection was ensured. You can find further information about the data protection policies of Trusted Shops here . If you have questions about the basis of our cooperation with this service provider, please contact us. You will find contact details in the section "Our contact details and your rights".

Telephone advertising

If you have given your consent to this during or after placing the order (Article 6(1)(a) of the GDPR), we will use your data for our own advertising purposes, e.g. to inform you about our new products and promotions. You can withdraw your consent at any time by sending us a message to our contact address indicated in the section "Our contact details and your rights" or by making an appropriate oral statement during a telephone conversation. After withdrawing your consent, we will delete your telephone number, unless you expressly express your consent. express consent to its further use for other purposes or we will not reserve the right to further use this data in legally permitted cases, and in such a situation we inform you in this privacy policy.

Telephone advertising is carried out on our behalf by an external service provider to whom we provide your data for this purpose as part of the concluded data processing agreement.

7. Cookies and similar technologies

General Information

To make your visit to our website more attractive and to enable you to use its key functions, we use technological tools, including the so-called cookies. Cookies are small text files that are automatically saved on your end device. Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser the next time you visit the website (so-called persistent cookies). We use technologies that are absolutely necessary to ensure the correct and optimal use of the necessary functions of our website (e.g. shopping cart function). These technologies process data such as your IP address, time of visit to the website, information about your device and browser, as well as information about the use of our website (e.g. the contents of the shopping cart). This serves in accordance with Art. 6 section 1 letter f GDPR to pursue our legitimate interest in the optimal presentation of our offer.

In addition, we also use technological tools to fulfill legal obligations to which we are subject (e.g. to prove consent to the processing of your personal data), as well as for web analytics and internet marketing purposes. Further information on this, including the relevant legal basis for data processing, is provided in the following sections of this privacy policy.

In the auxiliary menu of your web browser you will find explanations on how to change cookie settings. They are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have given us your consent to use certain technological tools (Article 6(1)(a) of the GDPR), you may withdraw your consent at any time. To withdraw your consent, please contact us via the contact address provided in the section "Our contact details and your rights".

8. Use of cookies and similar technological tools for web analytics and marketing purposes.

Provided you have given your consent (Article 6(1)(a) of the GDPR), we use the cookies and other similar technological tools of external service providers indicated below on our website. After achieving the purpose of processing and ending the use of a given technological tool, the data collected as part of the use of these tools will be deleted. The consent granted may be withdrawn by you at any time. Detailed information on the possibility of withdrawing consent and your right to object can be found in the section "Cookies and similar technologies". Further information can be found on the websites of the individual service providers. If you have questions about our service providers and the basis of our cooperation with them, please contact us. You will find contact details in the section "Our contact details and your rights".

Use of Google services

We use the technological tools set out below from Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information collected automatically by Google technologies regarding the use of our website is usually transferred to a server of Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA and stored there. The European Commission has not issued an adequacy decision for the US. Our cooperation is based on standard data protection clauses adopted by the European Commission. If your IP address is processed as part of the use of Google technological tools, your address is shortened before being stored on Google servers thanks to enabled IP anonymization. Only in exceptional cases will the full IP address be sent to a Google server and shortened there. Unless otherwise specified for individual Google technologies described in this privacy policy, data processing is carried out on the basis of an agreement concluded with Google for the joint control of personal data in accordance with Art. 26 GDPR. Further information on data processing by Google can be found in privacy policy on the Google website .

Google Analytics

To analyze the use of our website, we use Google Analytics - a web analytics tool from Google, which automatically processes your data for this purpose (IP address, time of visit to the website, information about the device and browser, as well as information regarding the use of our website). ) and creates pseudonymized user profiles on their basis. Cookies may be used for this purpose. Your IP address is generally not combined with other data collected by Google. Data processing as part of the Google Analytics service takes place on the basis of a data entrustment agreement concluded with Google.

In order to optimize and make the offer of our website more attractive, we have also activated data sharing settings for "Google products and services" . This allows Google to access data collected and processed as part of the Google Analytics service and use it to improve the products and services provided by Google. Data is made available to Google for this purpose on the basis of an additional agreement concluded between data administrators. We have no influence on the subsequent processing of data by Google.

Google Ads

With the help of Google Ads, we promote our website in search results and on third-party websites. For this purpose, a file will be automatically saved on your device when you visit our website remarketing cookies by Google, which enables the display of advertisements based on your interests based on the pages you visit, processing your data (IP address, time of visit to the website, information about the device and browser, as well as information about using our website). Further data processing only takes place if you have activated the advertising personalization option in your Google account settings. In such a case - if you are logged in to Google at the same time during your visit to our website, Google will use your data together with the data collected as part of the Google Analytics service in order to create and define the so-called lists of target groups for remarketing purposes on various devices.

We use a tool for web analytics purposes Google Ads Conversion Tracking to measure and analyze your behavior when you visit our website via an advertisement within the Google Ads tool. For this purpose, cookies may be used and data processed such as: IP address, time of visit, information about the device and browser, as well as information regarding the use of our website, e.g. visit to the website or registration to the newsletter. Pseudonymous user profiles are then created based on this data.

Google Maps

In order to visually present geographical information, Google Maps will save and process information about how you use the maps and individual functions, including, for example, your IP address and location data. We have no influence on the above data processing by Google.

Google reCAPTCHA

In order to protect against spam and prevent abuse and misuse of our online forms (e.g. using malicious bots), the Google reCAPTCHA tool has been integrated with our website, which processes your data for this purpose (IP address, time of visit to the website, information about device and browser, as well as information regarding the use of our website) and based on them, using JavaScript scripts and cookies, analyzes your use of our website. Personal data you enter in individual form fields on our websites will not be read or saved.

Google Fonts

In order to ensure consistent presentation of content on our websites, the "Google Fonts" script is integrated with our website, which processes your data (IP address, time of visit to the website, information about the device and browser, as well as information regarding the use of our website ). We have no influence on the above data processing by Google.

YouTube Video Plugin

In order to integrate third-party content using the YouTube video plug-in, the following data is processed by Google when playing the video: IP address, time of visit, information about the user's device and browser.

9. Social media

Social media plugins: Facebook, Instagram, Pinterest

Our website uses the so-called plugins (buttons) of social networking sites. These plug-ins are available via an HTML link, which ensures that when you visit our website containing such plug-ins (buttons), an automatic, direct connection to the servers of the operator of a given social networking site is not established. After clicking on one of the buttons (plug-in), a new browser window will open displaying the page of a given social networking site, where you can confirm the use of a given button, e.g. "Like" or "Share".

Our activity on social networking sites: Facebook, Instagram

If you have given your consent to a given social networking site in this regard (Article 6(1)(a) of the GDPR), when visiting our account/profile on the above-mentioned social networking sites, your data will be automatically collected and stored for web analytics and marketing purposes. Pseudonymous user profiles are created based on this data. They can be used, for example, to post the so-called personalized ads that probably match your interests. Cookies are usually used for this purpose.
Detailed information on the processing and use of your data by individual social networking sites, as well as information on your rights and options for configuring privacy settings, as well as contact details for the purpose of submitting an inquiry are described in the privacy policies of individual social networking sites linked below. If you need help in this regard, you can contact us.

Facebook is a social networking service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). Automatically processed information about your activities and use of our Facebook fan page is usually sent to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued a decision confirming the adequacy of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting a fan page on Facebook takes place in accordance with Art. 26 GDPR based on joint arrangements between the joint controllers, which are available here . Further information regarding the processing of your personal data when visiting a Facebook fan page (information regarding the page statistics function) is available here .

Instagram is a social networking service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Automatically processed information about your activities and use of our Instagram fan page account is usually transferred to a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025 in the USA and stored there. In relation to the USA, the European Commission has not issued a decision confirming the adequacy of data protection. Our cooperation is based on standard data protection clauses adopted by the European Commission. Data processing when visiting an Instagram fan page account takes place in accordance with Art. 26 GDPR based on joint arrangements between the joint controllers. Further information regarding the processing of your personal data when visiting a Facebook fan page (information regarding the page statistics function) is available here .

In relation to the USA, the European Commission has not issued a decision confirming the adequacy of data protection.

10. Our contact details and your rights.

Persons whose data are processed have the following rights:

• in accordance with art. 15 GDPR: the right to obtain information about data processing to the extent specified in this article;
• in accordance with art. 16 GDPR: the right to rectify your incorrect or incomplete personal data;
• in accordance with art. 17 GDPR: the so-called "right to be forgotten", i.e. the right to delete your personal data stored with us, unless further processing is necessary:
  • to exercise the right to freedom of expression and information;
  • to fulfill a legal obligation;
  • for reasons of public interest;
  • to establish, pursue or defend claims;
• in accordance with art. 18 GDPR: the right to restrict the processing of personal data, provided:
  • the accuracy of this personal data is disputed by you;
  • the processing is unlawful and you oppose their deletion;
  • we no longer need your personal data, but you need it to establish, pursue or defend claims;
  • you filed pursuant to Art. 21 objection to data processing;
• in accordance with art. 20 GDPR: the right to receive the data provided to us in a structured, commonly used and machine-readable format and to transmit it to another administrator;
• in accordance with art. 77 GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office "UODO").

If you have any questions regarding the collection, processing and use of your personal data, as well as to request information, rectification, restriction of processing or deletion of data and to withdraw consents granted or to object to the use of specific data, please contact the administrator directly. data indicated at the beginning of this privacy policy.

Right to object

If we process personal data in the manner described in this privacy policy in order to protect our legitimate interests, then you may object to the processing of your data for this purpose – with future effect. If the processing takes place for direct marketing purposes, you can exercise your right to object at any time. If processing takes place for other purposes, you have the right to object only for reasons arising from your particular situation.

Once you have exercised your right to object, we will not continue to process your personal data unless we demonstrate compelling legitimate grounds for processing that override your interests and rights, or if the data processing is for the purpose of asserting, exercising or defending legal claims. .

The previous sentence does not apply when data processing is carried out for direct marketing purposes. In such a case, after you express your objection, we will always stop further processing of your personal data.