This Privacy Policy sets out the rules for the processing and protection of personal data of users (Consumers) using the Platform managed by [YOUR COMPANY NAME] (hereinafter: Administrator).
The personal data controller is: [FULL COMPANY NAME]
address: ........................................
............................................
NIP: .......................................
KRS: .......................................
Contact regarding data protection: [E-MAIL ADDRESS, E.G. DPA@YOURCOMPANY.COM]
The Administrator collects data necessary to provide Services and fulfill Orders, including:
Registration data: first name, last name, e-mail address, phone number.
Address data: street, house/apartment number, postal code, city (for delivery purposes).
Technical data: IP address, device type, cookie identifiers.
Payment data: (if applicable) processed by external payment operators (the Administrator does not store full payment card details).
Personal data is processed for the purpose of:
Executing the Agreement (Art. 6(1)(b) GDPR): Account management, Order processing, communication with the Consumer.
Legal obligations (Art. 6(1)(c) GDPR): issuing invoices, accounting, and tax reporting.
Legitimate interest (Art. 6(1)(f) GDPR): direct marketing, pursuing claims, statistical analysis of traffic on the Platform.
Consent (Art. 6(1)(a) GDPR): sending a newsletter or personalizing offers (if consent was given).
Personal data may be transferred to the following entities:
Partners (Restaurants/Shops): to the extent necessary to prepare the Order.
Courier companies: to deliver the Order to the indicated address.
Payment operators: to settle online transactions.
IT service providers: hosting providers, CRM and analytical system providers.
Data will be stored for the period of:
Having an Account on the Platform.
Necessary to fulfill the Order and the expiration of the limitation periods for claims (usually [3/6] years).
Required by tax law (5 years from the end of the calendar year).
Every Consumer has the right to:
Access their data and receive a copy of it.
Rectify (correct) data.
Delete data ("right to be forgotten").
Restrict processing.
Data portability.
Object to processing.
Lodge a complaint with the President of the Personal Data Protection Office (PUODO).
7.1. The Platform uses cookies to ensure the proper functioning of the site, remember preferences, and for analytical purposes.
7.2. The Administrator may use profiling to match the Offer to the Consumer's preferences, but does not make automated decisions with legal effects on this basis.
7.3. The user can change cookie settings in their browser at any time.
The Administrator uses technical and organizational measures (such as SSL encryption, secure servers) to protect data against unauthorized access, loss, or alteration.
The Administrator reserves the right to update the Policy. The new version will be published on the Platform with the date of the last update.
Last update: [DATE]