The following document outlines rules governing the gathering, processing, use and protection of personal data of customers of the internet store located under the adress of www.herbatyczas.pl.

Personal Data Administrator

In accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/WE (General Data Protection Regulation) henceforth known as GDPR, we hereby inform that the owner of the store and the Administrator of the www.herbatyczas.pl internet store’s customers personal data is Małgorzata Devos Company, headquartered on Ludna 3A St., Warsaw, NIP 8411300044, REGON 771600220.

The Administrator takes great concern with protection of personal data and securing it from being accessed by unauthorized parties.

You can contact the Personal Data Administrator regarding your own personal data electronically by writing at herbatyczas@herbatyczas.pl e-mail address, over the telephone under the number 880908780, or through postal mail by writing to the Tea Store’s address: Ludna 3A St., 00-406 Warsaw.

Purpose and extent of collected data

The customer provides their personal data voluntarily when placing an order. Providing personal data is a necessary condition to place an order.

Customer data is processed in order to provide the service, especially to maintain a customer account, as well as enter into and execute payment agreements, including payment for purchased products, discount offers, product delivery, sending notifications concerning carrying purchases into effect, carrying complaint and refund processes into effect, match the advertisement offers to meet the customers’ needs, display advertisements and send trade information, attend to notifications and complaints, write public reviews of purchased products, enable the contact between the buyer and the seller, also for the purpose of statistics.

Data collected by the Administator used to carry out orders are: first and last name, home address, e-mail adress, telephone number, IP address, internet browser information and session identifier, and if it is necessary to make out an invoice, company name, NIP number and company address are additionally collected.

Data recepients

In order to carry out purchases into effect, personal data is entrusted to the following third parties:

  1. Poczta Polska S.A. Company – in order to deliver the purchased goods

  2. www.home.pl Company – in order to store data on the server, on which the herbatyczas.pl is located

  3. payu.pl Company – in order to carry out online payments

Data storage period

Personal data associated with purchases is processed for a period necessary to carry out the order. After that time it is archivized and will be stored with exceptional caution until the expiry of the period of limitation (10 years)

Personal data processed in marketing purposes to which the customer has given an additional consent (bulletin) will be processed until its withdrawal.

User rights concerning personal data

In accordance with GDPR everyone who entrusted us with their personal data has the right to:

  1. access their data and receive a copy

  2. correct, fill out, update and rectify the data

  3. remove the data (the right to be forgotten)

  4. file a complaint to the regulatory body (in case of a violation of GDPR regulations, the customer has the right to file a complaint to the President of Personal Data Protection Office)

Information on cookie files.

  1. The website uses cookie files.

  2. Cookie files consist of digital data, especially text files, which are stored on the visitor’s device, and are intended for use with the website. Cookie files usually contain the name of their originating website, their time of storage on the device and a unique number.

  3. The Subject placing cookies on the website visitor’s device is the website operator.

  4. Cookie files are used for the following purposes:

    1. createating statistics which help us understand the way visitors use our websites, allowing us to improve their structure and contents;

    2. maintaing the session of the visitor (after logging in), thanks to which the visitor does not have to type in their username and password in every subsection of the website.

  5. The website uses two kinds of cookie files: session cookies and persistent cookies. Session cookies are temporary files, stored on the visitor’s device until logging off, leaving the website or exiting the internet browser. Persistent cookies are stored on the visitor’s device for an amount of time specified in the cookie files’ parameters, or until their removal by the visitor.

  6. Software used to browse internet websites (internet browser) usually permits the storage of cookie files within the visitor’s device. The visitors may edit the preferences in this regard. Internet browsers allow to delete cookie files. It is also possible to block cookie files automatically. Detailed information can be found within the internet browser help file or manual.

  7. Setting limitations on the use of cookie files might affect some of the website’s functionalities.

  8. Cookie files may also be placed visitor’s device and used by advertisers and partners cooperating with the website operator.

Cookie file management

If the visitor does not wish to receive cookie files, they can change their browser preferences. We make a reservation that disabling cookie files necessary for the processes of authenthication, security and maintenance of user preferences might make using the website more difficult.