FREE DELIVERY FOR ORDERS OVER 490 PLN

0

Added to cart

see the cart

Content of the privacy policy

§1. ERSONAL DATA CONTROLLER

  1. The controller of personal data within the meaning of Art. 4(7) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27th April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR) is Grassland Horse Feeding Spółka z ograniczoną odpowiedzialnością with its registered office in Gostkowo at ul. Ekologiczna 10a, 87-148 Gostkowo, NIP (Tax ID No.): 8792736180, REGON (Statistical ID No.): 520784654, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000942090, registration court: District Court in Toruń, VII Economic Division of the National Court Register, share capital: PLN 5,000.00.
  2. Email address of the data controller: info@grassland.com.pl.
  3. Pursuant to Art. 32(1) GDPR, the controller shall comply with the principle of personal data protection and shall apply appropriate technical and organisational measures to prevent accidental or unlawful destruction, loss, modification, unauthorised disclosure of or unauthorised access to personal data processed in the course of its business.
  4. The provision of personal data by the Customer is voluntary but necessary in order to conclude a contract with the data controller.
  5. The controller shall process personal data to the extent necessary for the performance of a contract or the provision of services to the data subject.

§2. PURPOSE AND GROUNDS FOR PROCESSING PERSONAL DATA

The controller processes personal data for the following purposes:
a) preparation of a commercial offer in response to a customer’s interest, which is a legitimate interest of the data controller (Art. 6(1)(f) GDPR);
b) conclusion of sales contracts with customers and processing orders under such contracts (Art. 6(1)(b) GDPR);
c) provision of services by electronic means through the Online Shop under a contract (Art. 6(1)(b) GDPR);
d) handling of complaints under the obligation incumbent on the data controller in conjunction the provisions of applicable laws (art. 6(1)(c) GDPR);
e) accounting related to the issuing and acceptance of accounting documents under the provisions of the tax law (art. 6(1)(c) GDPR);
f) data retention for possible establishment, investigation or defence against claims or the need to prove facts, which is a legitimate interest of the controller (Art. 6(1)(f) GDPR);
g) contact by telephone or email, in particular in response to queries addressed to the data controller, which is a legitimate interest of the data controller (Art. 6(1)(f) GDPR);
h) sending technical information regarding the functioning of the Online Shop and the services used by the customer, which is a legitimate interest of the data controller (art. 6(1)(f) GDPR);
i) marketing, which is a legitimate interest of the data controller (art. 6(1)(f) GDPR) or takes place based on a previously granted consent (art. 6(1)(a) GDPR).

§3. RECIPIENTS OF THE DATA. TRANSFER OF DATA TO THIRD COUNTRIES

  1. The recipients of personal data processed by the controller may be entities cooperating with the controller when this is necessary for the performance of a contract concluded with the data subject.
  2. The recipients of personal data processed by the controller may also be subcontractors, i.e. entities whose services are used by the controller for data processing, e.g. accounting offices, law firms, IT service providers (including hosting services).
  3. The data controller may be obliged to disclose personal data under applicable laws, in particular to disclose personal data to state authorities or authorised institutions.
  4. Personal data collected in connection with the data controller’s use of website analytics and tracking tools may be transferred to an entity based outside the European Economic Area, such as Google LLC. As an appropriate data protection measure, the data controller has agreed to standard contractual clauses with the providers of these services in accordance with Art. 46 GDPR. More information is available here: https://ec.europa.eu/info/law/law-topic/data-protection/datatransfers- outside-eu_en.

§4. PERIOD OF RETENTION OF PERSONAL DATA

  1. The controller shall keep personal data for the duration of the contract concluded with the data subject and after its termination for the purposes of dealing with claims related to the contract, performing the obligations arising from the applicable legislation, but for a duration not exceeding the period of limitation in compliance with the provisions of the Civil Code.
  2. The controller shall retain the personal data contained in the accounting documents for the period indicated in the Act on Tax on Goods and Services and the Accounting Act.
  3. The controller shall retain personal data processed for marketing purposes for a period of 10 years but no longer than until the withdrawal of consent to the processing or filing of an objection to the processing.
  4. The controller shall retain personal data for purposes other than those indicated in paragraphs 1 to 3 for a period of one year unless the consent to the processing of the data has been withdrawn beforehand and the processing of the data cannot be continued on any other basis than the consent of the data subject.

§5. RIGHTS OF THE DATA SUBJECT

  1. Each data subject shall have the right to:
    a) access – to obtain from the controller confirmation as to whether or not personal data concerning them are being processed. If data about a person are being processed, they shall be entitled to access them and to obtain the following information: the purposes of the processing, the categories of personal data, information about the recipients or categories of recipients to whom the data have been or will be disclosed, the period for which the data have been or will be stored or the criteria used to determine that period, the right of the subject to request rectification, erasure or restriction of the processing of personal data and to object to such processing (Art. 15 GDPR);
    b) to obtain a copy of the data – to obtain a copy of the data undergoing processing, the first copy being free of charge while for subsequent copies the controller may charge a reasonable fee based on administrative costs (Art. 15(3) GDPR);
    c) to rectify – to request rectification of personal data concerning them which are inaccurate or completion of incomplete data (Art. 16 GDPR);
    d) to erasure – to request the erasure of their personal data where the controller no longer has a legal basis for the processing or the data are no longer necessary for the purposes of the processing (Art. 17 GDPR);
    e) to restriction of processing – to request the restriction of the processing of personal data (Art. 18 GDPR) when: – the data subject disputes the accuracy of the personal data – for a period of time that will enable the controller to verify the accuracy of the personal data; – the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead; – the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims; – the data subject has objected to the processing – pending the verification whether the legitimate grounds of the controller override those of the data subject;
    f) to data portability – to receive the personal data concerning them, which they provided to the controller, in a structured, commonly used and machine-readable format, and to transmit those data to another controller, where the processing is based on the data subject’s consent or on a contract with them and where the processing is carried out by automated means (Art. 20 GDPR);
    g) to object – to object to the processing of their personal data for the legitimate purposes of the controller on grounds relating to their particular situation, including profiling. The controller shall then assess if there are compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims. If, according to the assessment, the interests of the data subject override the interests of the controller, the controller shall be obliged to cease processing for these purposes (Article 21 GDPR).
  2. In order to exercise the aforementioned rights, the data subject should contact the controller using the contact details provided and inform them of which right and to what extent they wishes to exercise.
  3. The data subject shall have the right to lodge a complaint with the supervisory authority, which is the President of the Office for Personal Data Protection in Warsaw.

§6. PROFILING

Personal data obtained by the controller shall not be processed by automated means, including profiling.

§7. GOOGLE ANALYTICS

  1. This website uses Google Analytics, a web analytics service provided by Google Inc. based in the USA.
  2. Google Analytics uses cookies to help the website analyse how users use the site. The information generated by the cookie about your use of the website is transmitted to and stored on a Google server. At the request of the Controller, Google will use this information to analyse the use of the website by the users in order to compile reports on website activity and to provide other services relating to website and internet usage to the requesting party.
  3. The data will not be used to identify any natural person.
  4. Users may refuse the use of cookies by selecting the appropriate settings in the browser; however, in this case they may not be able to use the full functionality of the website. In addition, users can prevent the collection by Google of the data generated by the cookie and relating to their use of the website (including their IP address) as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=pl.
  5. Users may object at any time to the collection and processing of data relating to their use of the Google website by downloading and installing a plug-in their browser, which is available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

§8. COOKIE POLICY

  1. The Online Shop does not automatically collect any information except that contained in cookies.
  2. Cookies are small pieces of information, in particular text files, which are stored on the Customer’s end device and are intended for the use of the website of the Online Shop. Cookies usually contain the name of the website they come from, the time they are stored on the end device and a unique number.
  3. The entity placing cookies on the Customer’s end device and accessing them is the Seller in accordance with the Terms and Conditions of the Online Shop.
  4. Cookie files are used for the following purposes:
    a) adapting the content of the pages of the Online Shop to the Customer’s preferences and optimising the use of the websites; in particular, these files enable the recognition of the Customer’s device and the appropriate display of the website, adjusted to their individual needs;
    b) creating statistics that help to understand how the Customers use the websites, which makes it possible to improve their structure and content;
    c) maintaining the Customer’s session in order to return to the content of the shopping cart.
  5. The following types of cookies are used within the Online Shop:
    a) session and persistent cookies. Session cookies are temporary files that are stored on the Customer’s end device until the Customer logs out, leaves the website or switches off the software (web browser). Persistent cookies are stored on the Customer’s end device for the time specified in the parameters of the cookies or until they are deleted by the Customer;
    b) necessary cookies which enable the use of the services available within the Online Shop, e.g. authentication cookies used for services requiring authentication within the Online Shop;
    c) cookies used for security, e.g. to detect abuse of authentication within the Online Shop;
    d) performance cookies which make it possible to collect information about the manner of use of the pages of the Online Shop;
    e) functional cookies which make it possible to ‘remember’ the settings selected by the Customer and to personalise the Customer’s interface, e.g. with respect to the selected language or region from which the Customer comes, font size, appearance of the website, etc.;
    f) advertising cookies which make it possible to provide the Customer with advertising content more suited to their interests.
  6. n many cases, the web browsing software (web browser) allows cookies to be stored on the Customer’s end device by default. Customers may change their cookie settings at any time. These settings can be changed in particular in such a way as to block the automatic handling of cookies in the settings of the web browser or to inform the Customer each time cookies are placed on their end device. Detailed information on the options and methods of using cookies is available in the web browser settings.
  7. The Seller informs that restrictions on the use of cookies may affect some of the functionalities available in the Online Shop.