Privacy policy

GDPR clause

Who is who in this privacy policy?

We, i.e. Cafe Americano with its seat in Kołobrzeg, address: Bulwar Jana Szymańskiego 8/2, 78-100 Kołobrzeg.

You, i.e. our Client – a natural person whose personal data we process for at least one purpose indicated in the privacy policy.

What is the purpose of this privacy policy?

We attach great importance to the protection of your privacy and your personal data. When processing your personal data, we make sure that it is safe.

Who is the administrator of your personal data and what are their contact details?

The administrator of your personal data is Cafe Americano. based in Kołobrzeg. Our contact details: Bulwar Jana Szymańskiego 8/2, 78-100 Kołobrzeg, email: cafeamericano@wp.pl, phone number: 94 35 23 997. How can you contact our Data Protection Officer? We have appointed a Data Protection Officer with whom you can contact in all matters related to the processing of your personal data by us and in order to exercise your rights related to the processing of your personal data by us

To contact the Data Protection Officer:

send us an e-mail to the following address: cafeamericano@wp.pl;

call 94 35 23 997;

send a letter (preferably with the annotation: “Data Protection Officer”) to the following address: Cafe Americano, Bulwar Jana Szymańskiego 8/2, 78-100 Kołobrzeg.

What personal data do we process and where do we get it from? For what purpose do we process your personal data and on what basis?
Compliance with legal obligations

In order to comply with the obligations imposed on us by law, e.g. by the Accounting Act or tax regulations (e.g. issuing and storing invoices and accounting documents), we will process your transaction data, as well as information related to complaints and complaints;

The legal basis for the processing of the above-mentioned data is subject to a legal obligation (Article 6 (1) (c) of the GDPR).

Handling inquiries, complaints or suggestions

in order to handle your inquiry, complaint or suggestion, we will process your data provided in the question, complaint or suggestion;

The legal basis for the processing of the above-mentioned data is our legitimate interest in being able to answer you (Article 6 (1) (f) of the GDPR).

Automated decision making

We will not make decisions about you that would be based solely on the automated processing of your data and would have legal effects on you or otherwise significantly affect you.

Who do we transfer your personal data to?

We will transfer your data to entities that act on our behalf, i.e. providers of IT services and solutions, marketing agencies, entities providing accounting and administrative services, entities carrying out customer satisfaction surveys on our behalf.

Will your personal data be transferred to a third country (i.e. a country outside the European Economic Area)?

We will not transfer your personal data to third countries (i.e. countries outside the European Economic Area).

How long do we keep your personal data?

We store your data for no longer than it is necessary to achieve the purposes for which we process it. We will store your data:

For the purposes of the implementation of transactions made by you, including the purchase of our products or services – for the duration of the contract relating to such a transaction, but we may extend this period by the limitation period for your or our claims resulting from legal provisions, if the processing of this data is necessary for the purpose of establishing or pursuing claims, as well as to defend against such claims.

For the purposes of fulfilling our obligations under the law (e.g. from the Accounting Act or tax regulations) – for the period resulting from such provisions (e.g. for billing purposes, your data will be stored for 5 years from the end of the calendar year, in which the deadline for payment of tax related to the order has expired).

For the implementation of our legitimate interests, i.e. establishing and pursuing claims or defending against claims – for the period of limitation of your claims against us or our claims against you resulting from legal provisions (e.g. the general limitation period for claims related to business activity is 3 years, and the general limitation period for consumer claims against us is 10 years; the periods for storing personal data provided above may change with the change in generally applicable law).

For the implementation of our legitimate interests, i.e. answering your inquiry, complaint or suggestion – for the time necessary to respond, not longer than 30 days, but we may extend this period by the limitation period for your or our claims, if the processing of this data it will be necessary to establish or pursue claims, as well as to defend against such claims.

For the implementation of our legitimate interests, i.e. customer satisfaction surveys and determining the quality of our services – for the duration of our legitimate interest, but not longer than 24 months.

Do you have the right to object to the processing of your data? What rights do you have due to the fact that we process your personal data? How can you exercise your rights?

Objection to data processing for marketing purposes: You have the right to object, at any time, to the processing of your data for marketing purposes, including profiling.

Objection due to your special situation: You have the right to object at any time to the processing of your data for the purposes of our legitimate interest (other than marketing), for reasons related to your particular situation. In this case, you should indicate the specific situation that, in your opinion, justifies the cessation of our processing of your data covered by the objection.

In addition, you have the following rights:

The right to obtain confirmation as to whether we process your personal data, as well as the right to access this data and a copy thereof.

The right to request rectification (correction) or supplementation of your personal data if it is incomplete or incorrect.

The right to request the restriction of the processing of your personal data, if, for example:

you question the correctness of your personal data processed by us;

the processing of your personal data is unlawful, but you oppose the deletion of this data and request the restriction of its use instead;

we no longer need your personal data to achieve our purposes, but you need them to establish, assert or defend claims;

you have objected to our processing of your personal data due to your special situation – in this case, you may request that we restrict the processing of this data until it is determined whether our legitimate interests override the grounds for your objection.

If the processing of your personal data is limited, we will be able to store it, and additionally use it only to establish, assert or defend claims, to protect the rights of another natural or legal person, or for important reasons of public interest of the European Union or a Member State. We will only be able to take other actions with your consent.

The right to request the deletion of your personal data if, for example:

Your personal data are no longer necessary to achieve the purposes for which they were collected and processed;

you object to our processing of your personal data due to your special situation, and we do not have grounds for processing that would override your objection;

you object to their processing by us for marketing purposes;

we have processed your personal data unlawfully.

The right to transfer data: Due to the fact that your data is processed automatically on the basis of consent or contract, you have the right to receive from us your data that you provided to us on the basis of consent or contract, in a structured, publicly available format machine-readable (e.g. computer-readable). You also have the right to request that your personal data be sent by us directly to another administrator, if technically possible.

The right to withdraw, at any time, consent to the processing of your personal data in relation to the data that we process on the basis of consent. Withdrawal of consent does not affect the lawfulness of the processing carried out by us on the basis of consent before its withdrawal.

The right to withdraw consent to marketing communication: You can withdraw consent to marketing communication at any time. To do this, log in and change the settings in your account or write to us at cafeamericano@wp.pl.

To exercise your rights, you can contact our Data Protection Officer (contact details can be found in section 4 above) or with us (contact details can be found in section 3 above.

Complaint to the supervisory authority: You also have the right to lodge a complaint with the President of the Personal Data Protection Office of your habitual residence, place of work or place of an alleged breach of personal data.

Do you have to provide us with your personal details?

Some personal data is necessary to comply with certain legal obligations. Without them, we will not be able to issue you, for example, an invoice.

What is GDPR?

GDPR is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46 / EC (general regulation on data protection).

Since when does this privacy policy apply?

This privacy policy applies from May 25, 2018.