Privacy Policy
Table of Contents
1. Access Data and Hosting
Hosting
2. Data Collection and Processing for Contract and Contact Purposes
2.1 Data Processing for Contract Purposes
2.2 Customer Account
2.3 Data Processing for Contact Purposes
3. Data Processing for Delivery
4. Data Processing for Payment Processing
5. Marketing Channels: Email
5.1 Sending a Newsletter
5.2 Sending an Invitation to Leave a Purchase Review
6. Cookies and Similar Technologies
General Information
Cookiebot – User Consent Management Platform
Information on Data Transfer to Third Countries
7. Use of Cookies and Similar Technologies
7.1 Use of Adobe Services
7.2 Use of Google Services
7.3 Use of Facebook Services
7.4 Other Service Providers for Analytical and Marketing Tools
8. Social Media
8.1 Social Media Plugins: Facebook (by Meta), X (formerly: Twitter), Instagram (by Meta)
8.2 Our activity on social media: X (formerly: Twitter), Instagram (by Meta), YouTube, LinkedIn
9. Our contact details and your rights
9.1 Your rights
9.2 Contacting us
9.3 Transferring data outside the EU/EEA
The controller of personal data responsible for data processing is: IBB.PL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Ożarowska 40/42 05-850 Poland [email protected]
Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information on how to handle your data.
1. Access data and hosting
You can visit our websites without providing personal data. Each time you access a website, the server automatically saves only so-called cookies. Server logs, e.g., the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting internet service provider (so-called access logs), and document the page access. This data is analyzed solely to ensure the proper functioning of our website and to improve our offer. This serves, in accordance with Article 6, Section 1, Letter f of the GDPR, to safeguard our legitimate interest in the optimal and correct presentation of our websites and offers.
Hosting
All access data will be deleted no later than one month after the end of your visit to our website.
The hosting and display of the website are partially provided on our behalf by our service providers as part of a data processing agreement. Unless otherwise stated in this privacy policy, all access data and data collected in the forms provided for this purpose on our website will be processed on their servers. For questions regarding our service providers and the basis for cooperation with them, please contact us. Our contact details can be found in the section "Our Contact Details and Your Rights."
2. Data Collection and Processing for Contract and Contact Purposes
2.1 Data Processing for Contract Purposes
We process the personal data you voluntarily provide when placing an order for the purpose of contract fulfillment (including inquiries regarding the processing of warranty claims for defects or guarantees and the obligation to provide information about necessary updates). The legal basis for this is Article 6(1)(b) of the GDPR. Mandatory fields are marked as such because they contain data required to fulfill the order, and without this data, we cannot fulfill it. The data collected is directly derived from the forms into which the data is entered. Further information regarding the processing of your data, in particular regarding the transfer of data to our service providers for the purpose of order fulfillment, payment, and shipping, can be found in the following sections of this privacy policy. After the contract is fulfilled, the processing of your data will be restricted, and after the retention periods required by tax regulations and the Accounting Act have elapsed, the data will be deleted (Article 6, Section 1, Letter c of the GDPR), unless you expressly consent (Article 6, Section 1, Letter a of the GDPR) to further use of this data for other purposes, or we reserve the right to further use it in legally permitted cases, in which case we inform you in this privacy policy.
Merchandise Management System
We also use an external merchandise management system to process orders and fulfill the contract. Our service providers provide us with services in this regard under a data processing agreement. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our Contact Details and Your Rights"
2.2 Customer Account
If, pursuant to Art. 6.1.a of the GDPR, you consent to the creation of a customer account, we will process your personal data required for this purpose. This data will also be used for future orders on our website. Your customer account can be deleted at any time. To do this, please send a message to our contact address indicated in the section "Our Contact Details and Your Rights" or use the appropriate function in your customer account settings. After deleting your customer account, the processing of your data will be restricted, and after the retention periods specified in tax regulations and the Accounting Act have elapsed, the data will be deleted (Art. 6.1.c of the GDPR), unless you expressly consent (Art. 6.1.a of the GDPR) to the further use of this data or, in accordance with applicable law, we reserve the right to continue using the data for other purposes, of which we inform you in this privacy policy.
2.3 Data Processing for Contact Purposes
As part of customer communication, we process personal data to process your enquiries (Article 6, Section 1, Letter b of the GDPR). You voluntarily provide this data when contacting us (e.g., via the contact form or email). Mandatory fields are marked as such because they concern data required to process your enquiry. The data collected is directly evident from the forms into which the data is entered. Once your enquiry has been fully processed, your data will be deleted, unless you expressly consent (Article 6, Section 1, Letter a of the GDPR) to the further use of this data for other purposes, or we reserve the right to further use it in legally permitted cases, which we will inform you about in this privacy policy.
Live Chat Tool Responso
When you use the Live Chat Tool Responso to contact us, the data you voluntarily provide (name, email address, message content) will be processed by us to respond to your inquiry. This serves our legitimate interests (Article 6, Section 1, Letter f of the GDPR) in ensuring effective communication with us. The live chat tool is a service provided to us by an external service provider – HelpRatchet spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk, at ul. Mariana Kołodzieja 55B/41, 80-180 Gdańsk, entered into the National Court Register – Register of Entrepreneurs by the District Court in Gdańsk, under KRS number 0000919366, NIP number 5833435693, REGON number 389833253, which ensures the tool's functionality. All data collected as part of the use of this tool is stored on the servers of this service provider. Data processing in connection with the services provided by Live Chat Tool Responso takes place under a data processing agreement.
3. Data processing for delivery
To fulfill the contract (Article 6, Section 1, Letter b of the GDPR), we transfer your data to the shipping company you selected during the ordering process, which is commissioned to deliver the ordered products. If you have any questions about our service providers and the basis for our cooperation with them, please contact us. Our contact details can be found in the section "Our Contact Details and Your Rights."
The same applies to the transfer of data to our manufacturers or wholesalers cooperating with us when they handle shipping on our behalf (dropshipping). For the purposes of this privacy policy, they are considered shipping service providers.
4. Data Processing for Payment Processing
To process payments in our online store, we work with external service providers that handle online electronic payments and transfer your data to the payment processor you selected during the ordering process. This serves to fulfill the contract (Article 6, paragraph 1, letter b of the GDPR).
Data Processing for Fraud Prevention and Payment Optimization
In certain situations, we may provide the above-mentioned service providers with additional information that they may use, along with the information required to process payments, to prevent fraud and optimize our payment processes (e.g., invoicing, analysis of rejected payments, accounting support). Pursuant to Article 6, paragraph 1, letter f of the GDPR, this serves our legitimate interests in protecting against fraud and fraudulent activity and in efficient payment management.
5. Marketing Channels: Email
If you subscribe to our newsletter, we will use the data transferred based on your consent (Article 6, paragraph 1, letter a of the GDPR).
You consent to the processing of your data by us for the purpose of regularly sending our newsletter electronically.
You can unsubscribe from the newsletter at any time. To do so, please send a message to our contact address indicated in the section "Our Contact Details and Your Rights" or use the unsubscribe link provided in the newsletter.
After unsubscribing from the newsletter, we will delete your email address unless you expressly consent (Art. 6, Section 1, Letter a of the GDPR) to the further use of your data for other purposes, or, in accordance with applicable law, we reserve the right to further use your data, in which case we inform you in this privacy policy.
5.1 Sending the Newsletter
The newsletter is sent as part of the data processing entrusted to us by an external service provider. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our Contact Details and Your Rights."
5.2 Sending an invitation to leave a review
If you have given us your consent during or after placing your order (Article 6, Section 1, Letter a of the GDPR), we will use your email address to send you an electronic invitation to review your purchase in our store. The review/rating process is performed via our review system. You can withdraw your consent at any time by sending a message informing us of your withdrawal of consent to our contact address specified in the section "Our contact details and your rights." Alternatively, you can use the unsubscribe link included in the review invitation message. If you withdraw your consent, we will remove your email address from the newsletter recipient list. Your email address will be deleted from our systems unless you have expressly consented (Article 6, Paragraph 1, Letter a of the GDPR) to its further use for other purposes, or we have reserved the right to further use it for other purposes in accordance with applicable law (e.g., for the performance of a contract), in which case we inform you about this in this privacy policy. Review invitations are sent by our service provider Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne, Germany ("Trusted Shops"). As part of sending these invitations, we receive status information from Trusted Shops (e.g., whether the review invitation has been sent and whether it has reached the recipient). This is done in accordance with Article 6, Paragraph 1, Letter a of the GDPR. f GDPR to pursue our legitimate interest in receiving information about review invitations, so that we can optimize them if necessary, and to pursue Trusted Shops' legitimate interest in being able to offer this service. We and Trusted Shops are jointly responsible for sending review invitations and for collecting and displaying information about reviews and ratings or statuses. As part of this shared responsibility between us and Trusted Shops, if you have any questions about the protection of your data or wish to assert your rights, please contact Trusted Shops. Contact details are available on this website. You will also find further information about data protection at Trusted Shops there. You can also contact us directly at any time. If necessary, your inquiry will be forwarded to Trusted Shops, which is jointly responsible for data processing.
6. Cookies and Similar Technologies
General Information
To enhance your visit to our website and enable you to use its key features, we use technological tools, including cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing it (so-called session cookies). Other cookies are stored on your device and enable us to recognize your browser the next time you visit the website (so-called persistent cookies). You can check the storage duration in your browser's cookie settings. Privacy Policy for End Devices When using our online offerings, we use technologies that are strictly necessary to ensure the correct and optimal use of the essential features of our website. In this regard, storing information on your device or accessing information already stored on your device does not require your consent.
For functions that are not strictly necessary, we use cookies, storing information on the user's end device or accessing information already stored on the user's end device requires the user's consent. Please note that without consent, some functions or features of the website may not be fully available. Any consent granted by the user remains valid until you withdraw your consent, configure the settings, or reset the relevant settings on your end device.
Other data processing using cookies and other technologies: We use technologies that are strictly necessary to ensure the correct and optimal use of the essential functions of our website (e.g., the shopping cart function). These technologies process data such as your IP address, time of visit, information about your device and browser, as well as information about the use of our website (e.g., the contents of your shopping cart). This serves, in accordance with Article 6(1)(f) of the GDPR, our legitimate interest in the optimal presentation of our offer.
Furthermore, we also use technological tools to comply with legal obligations to which we are subject (e.g., to prove consent to the processing of your personal data), as well as for web analytics and online marketing purposes. Further information on this topic, including the relevant legal basis for data processing, can be found in the following sections of this privacy policy.
Cookie Settings
You will find explanations on how to change your cookie settings in your browser's help menu. These are available at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
If you have given us consent to use certain technological tools (Art. 6, Para. 1, Letter a of the GDPR), you may withdraw this consent at any time. To withdraw your consent, please contact us using the contact address provided in the section "Our Contact Details and Your Rights."
Alternatively, you can click the privacy settings button. If you reject the use of cookies, the functionality of our website may be limited.
Cookiebot – User Consent Management Platform
Our website uses Cookiebot to provide you with information about the technologies used on our website that rely on cookies and to obtain, manage, and document your consent to the processing of your personal data by these technologies. This is in accordance with Art. 6, Para. 1 letter c GDPR, necessary to comply with our legal obligation under Article 7 paragraph 1 GDPR, which stipulates that, in the case of data processing based on consent, the controller must be able to demonstrate that the data subject has consented to the processing. The Cookiebot consent management tool is a service of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf and on our behalf. When you express your consent to the use of cookies by individual technologies on our website, the Cookiebot server stores your anonymous IP address, the date and time of your decision, information about your browser and the URL from which the decision was sent, as well as your anonymous identification key. In addition, a cookie (so-called CookieConsent) is stored on your end device, which remembers information about your decisions regarding the use of individual cookies and your anonymous identification key. Your data will be deleted after twelve months, unless you expressly consent to the continued use of your data in accordance with Article 6(1)(a), or we reserve the right to continue using your data for other legally permitted purposes in accordance with applicable law, which we inform you about in this privacy policy. Our service providers are headquartered and/or use servers in countries for which the European Commission has issued adequacy decisions. Our service providers are headquartered in the USA. The adequacy decision for the USA applies as a basis for data transfers to third countries, provided that the service provider in question has been certified. This certification has been obtained.
Information regarding data transfers to third countries
Our website uses tools and technology from external service providers whose headquarters and/or server locations may be located in third countries outside the EU or EEA. If there is no EU Commission adequacy decision for a given third country, an adequate level of data protection must be ensured by other appropriate guarantees. Appropriate other guarantees, such as concluding a contractual agreement on the applicability of so-called standard contractual clauses of the EU Commission or binding internal corporate rules, are generally possible, but require prior verification by the contracting parties as to whether an adequate level of protection can be guaranteed by them. In accordance with ECJ case law, additional protective measures may be necessary for this purpose. We have generally agreed with our service providers processing personal data in a third country on the applicability of standard data protection clauses issued by the EU Commission. Where possible, we also agree on additional protective measures to ensure sufficient data protection in third countries for which no adequacy decision has been issued (so-called adequacy decision). Regardless of this, it may happen that, despite all contractual and organizational measures, the level of data protection in a third country does not correspond to the level of protection in the EU. In such cases, we will request your consent in accordance with Article 49(1) lit. GDPR via the Cookie Consent Manager. a GDPR to transfer your personal data to a third country. In the case of third countries, there is a risk that authorities or individual bodies in the third country may not have sufficiently limited rights of access to your personal data in accordance with the standards applicable under European data protection, and that we, as the data exporter, or you, as the data subject, may not be aware of this and/or that you may not have sufficient legal remedies to prevent and/or take action against such access. In particular, the following countries are currently among the third countries for which the EU Commission has not issued a decision on the adequacy of data protection (the list is indicative): - China - Russia - Taiwan. Information about the third countries to which we transfer data is based on the description of the tools used in the privacy policy and/or the content included within the tool within our cookie consent manager (Consent Manager).
7. Use of Cookies and Similar Technologies
We use the cookies and other similar tools/technologies from third-party service providers listed below on our website. Unless otherwise indicated in the description of the individual technologies, their use is based on your consent within the meaning of Article 6(1)(a) of the GDPR. Once the processing purpose has been fulfilled and the use of the respective tool/technology is terminated, the data collected through the use of these tools/technologies will be deleted. You may withdraw your consent at any time. Detailed information on how to withdraw consent and your right to object can be found in the section "Cookies and Similar Technologies." Further information can be found on the websites of the individual service providers. If you have any questions about our service providers and the basis of our cooperation with them, please contact us. Contact details can be found in the section "Our Contact Details and Your Rights."
7.1 Use of Adobe Services
Use of Adobe Fonts for Content Presentation on the Website
We use the technologies described below from Adobe Systems, Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland ("Adobe"). Information collected automatically by Adobe technologies regarding your interaction with and use of our website is generally transferred to and stored on an Adobe, Inc. server at 345 Park Avenue, San Jose, CA 95110-2704, USA. When processing your IP address via Adobe technologies, the IP address is shortened or replaced with a generic IP address before being stored on Adobe's servers. Our service providers are headquartered in and/or use servers in countries for which the European Commission has issued adequacy decisions. Our service providers are headquartered in: Canada, Japan, Switzerland, the United Kingdom, and the United States. The adequacy decision for the United States applies as the basis for data transfers to third countries, provided that the service provider in question has been certified. This certification has been obtained. Our service providers are headquartered in and/or use servers located in countries outside the EU and EEA. The European Commission has not issued adequacy decisions for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission. In order to ensure optimal and consistent presentation of content on our websites, we use the "Adobe Fonts," which processes data (your IP address, time of visit, device and browser information). We have no influence on the processing of this data. Data processing is carried out in accordance with Article 26 of the GDPR on the basis of joint agreements concluded between the joint controllers.
7.2 Use of Google Services
We use the technological tools of Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"), indicated below. The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for the individual Google technologies described in this privacy policy, data processing is based on a joint data controllership agreement with Google pursuant to Article 26 of the GDPR. Further information on data processing by Google can be found in the privacy policy on the Google website. Our service providers are based in and/or use servers located in countries outside the EU and EEA to which the Commission has The European Commission has issued an adequacy decision confirming an adequate level of data protection. Our service providers are based in and/or use servers located in countries outside the EU and EEA. The European Commission has not issued decisions regarding the adequacy of data protection for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.
Google Analytics
To analyze the use of our website, we use Google Analytics, a web analytics tool from Google that automatically processes your data (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and creates pseudonymous user profiles based on it. Cookies may be used for this purpose. When you visit our website from the EU, your IP address is stored on a server located in the EU to obtain location data and then immediately deleted before the traffic is redirected to further Google servers. Data processing within Google Analytics is based on a data processing agreement with Google.
For web analytics purposes, we also use Google Signals, an extension of Google Analytics. and enables so-called "cross-device tracking" (identifying users across multiple devices). This means that if your internet-enabled devices are connected to your Google account and you have activated the "personalized advertising" option in your Google account, Google can generate reports on how our website is used (in particular, the number of users using different devices), even if you change devices. We do not process your personal data in this regard; we only receive statistics based on the functions and technologies of Google Signals.
If you do not consent to the use of Google Analytics in accordance with Article 6, Paragraph 1, Letter a of the GDPR, no cookies will be read or stored on your end device. The data processing described in the previous paragraphs does not take place in this case. To fill gaps in the website's statistical analysis through behavior and conversion modeling, pings containing data (so-called user agent, information about user behavior, screen resolution, IP address) are sent to Google.
Google Ads
With the help of Google Ads, we promote our website in search results and on websites of third parties. Third parties. For this purpose, when you visit our website, a Google remarketing cookie is automatically stored on your device. This cookie allows you to display interest-based advertising based on the websites you visit. For this purpose, your data (IP address, time of visit, device and browser information, and information about your use of our website) is processed using a pseudonymous identifier (ID). Further data processing only takes place if you have activated the ad personalization option in your Google account settings. In this case, if you are logged in to Google while visiting our website, Google will use your data together with the data collected through Google Analytics to create and define so-called target group lists for cross-device remarketing purposes.
For web analytics purposes, we use Google Ads Conversion Tracking to measure and analyze your behavior when you visit our website.
The website may be used through advertising within Google Ads. Cookies may be used for this purpose, and data such as the IP address, time of visit, device and browser information, and information regarding the use of our website, such as website visits or newsletter registration, may be processed. Pseudonymous user profiles are then created based on this data.
If the user does not consent to the use of Google Analytics in accordance with Article 6, Paragraph 1, Letter a of the GDPR, no cookies will be read or stored on their end device. The data processing described in the previous paragraphs will not take place. To fill gaps in the statistical analysis of the website through behavior and conversion modeling, pings containing data (so-called user agent, information about user behavior, screen resolution, IP address, website URL, and information about ad clicks in URL parameters) are sent to Google. The user's IP address is used to determine the IP country.
Google Maps
To visually display geographic information, Google Maps will store and process information about your use of maps and individual features, including, for example, your IP address and location data. We have no influence over this data processing by Google.
Google reCAPTCHA
To protect against spam and prevent abuse and misuse of our web forms (e.g., by malicious bots), our website integrates the Google reCAPTCHA tool. For this purpose, it processes your data (IP address, time of visit, information about your device and browser, as well as information about your use of our website) and, based on this data, analyzes your use of our website using JavaScript and cookies. Personal data you enter in individual form fields on our pages will not be read or saved.
Google Fonts
To ensure consistent presentation of content on our websites, our website uses the "Google Fonts" script, which processes your data (IP address, time of visit, information about your device and browser, and information about your use of our website). We have no influence on this data processing by Google.
YouTube Video Plugin
To integrate third-party content using the YouTube video plug-in, Google processes the following data when playing the video: IP address, time of visit, information about your device and browser.
7.3 Use of Facebook Services
Facebook Pixel
We use the Facebook Pixel tool provided by Meta Platforms Ireland Ltd, Block J, Serpentine Avenue, Dublin 4, Ireland ("Facebook (by Meta)" also known as "Meta Platforms Ireland"). The scope of the functionalities we use is described below. The Facebook Pixel automatically collects and stores data (your IP address, time of visit, information about your device and browser, as well as information about your use of our website, such as website visits or newsletter registration). This data is then used to create pseudonymous user profiles. For this purpose, when you visit our website, the Facebook Pixel stores a cookie on your device, which, using a pseudonymized cookie ID, enables automatic recognition of your browser when you visit other websites. Facebook (by Meta) will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to your use of the website, in particular for advertising personalization purposes. The information automatically collected by Facebook (by Meta) technologies regarding your use of our website is usually transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Further information on data processing by Facebook can be found in the Facebook (by Meta) privacy policy. Our service providers are headquartered and/or use servers in countries for which the European Commission has issued adequacy decisions. Our service providers are headquartered in: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA applies as a basis for data transfers to third countries, provided that the service provider in question has been certified. This certification has been obtained. Our service providers are headquartered and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico. The European Commission has not issued decisions regarding the adequacy of data protection for these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses of the European Commission.
Facebook Analytical Tools
As part of Facebook Business tools, statistics on user activity on our website are created based on data collected via the Facebook pixel code. Data processing by Facebook is based on a concluded data processing agreement. Data analysis (usage statistics) serves to optimize and enhance our website.
Facebook Ads (Ad Management)
Facebook Ads allows us to advertise our website on Facebook and other platforms. We determine the parameters of a given advertising campaign. Facebook is responsible for the precise implementation, in particular for the decision to display a given ad to individual users. Unless otherwise specified for individual functions and tools, data processing is based on a joint data controllership agreement pursuant to Article 26 of the GDPR. Joint responsibility is limited to data collection and transfer to Facebook Ireland. This does not include subsequent data processing by Facebook Ireland.
7.4 Other Service Providers for Analytics and Marketing Tools
Use of Hotjar for Web Analytics
For the purpose of analyzing the use of our website, the web analytics tool Hotjar Ltd., Dragonara Business Centre 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta ("Hotjar"), automatically collects and stores data when you visit our website (your IP address, time of visit, information about your device and browser, and information about your use of our website), which is used to create pseudonymized user profiles. Cookies may be used for this purpose. Without separate, express consent, pseudonymized user profiles are not merged with the personal data of the person assigned the pseudonym. Data processing in connection with the services provided by Hotjar takes place under a data processing agreement. Our service providers are based in and/or use servers located in countries outside the EU and EEA for which the European Commission has issued an adequacy decision confirming an adequate level of data protection. Our service providers are based in and/or use servers located in countries outside the EU and EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.
Use of the Vimeo Video Plugin
For the purpose of integrating third-party content using the Vimeo video plug-in, the following data is processed during video playback by Vimeo LLC, 555 West 18th Street, New York 10011, USA ("Vimeo"): IP address, time of visit, information about the user's device and browser. Data processing is carried out in accordance with Article 26 of the GDPR based on joint agreements concluded between the joint controllers. Google Analytics is automatically integrated into the Vimeo Video Plugin. For web analytics purposes, Google Analytics automatically processes data (your IP address, time of visit, information about your device and browser, and information about your use of our website) and creates pseudonymous user profiles from it using cookies. Google Analytics is a product of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies regarding your use of our website is usually transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. If your IP address is processed using Google technologies, it will be shortened before being stored on Google servers thanks to the activation of IP anonymization. Only in exceptional cases will the full IP address be transferred to a Google server and then shortened there. We have no influence on or access to the data processing by Vimeo, including the settings for Google Analytics. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses adopted by the European Commission.
8. Social Media
8.1 Social Media Plugins channels: Facebook (by Meta), X (formerly: Twitter), Instagram (by Meta)
Our website uses so-called social media plugins (buttons). These plugins are accessible via an HTML link, which ensures that when you visit our website containing such plugins (buttons), no automatic, direct connection is established to the servers of the operator of the relevant social media platform. Clicking on one of the buttons (plugins) will open a new browser window displaying the relevant social media platform's page, where you can confirm the use of the button, e.g., "Like" or "Share."
8.2 Our activity on social media platforms: X (formerly: Twitter), Instagram (by Meta), YouTube, LinkedIn
If you have given the relevant social media platform consent (Art. 6, Section 1, Letter a of the GDPR), when you visit our account/profile on the aforementioned social media platforms, your data will be automatically collected and stored for web analytics and marketing purposes. Pseudonymous user profiles are created based on this data. They can be used, for example, to display personalized ads within and outside social media platforms that are likely to be relevant to your interests. Cookies are typically used for this purpose. Detailed information on the processing and use of your data by individual social media platforms, as well as information on your rights and privacy settings, and contact details for inquiries, can be found in the privacy policies of the individual social media platforms linked below. If you require assistance in this regard, you can also contact us.
X is a social media platform operated by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("X"). Automatically processed information about your activities and how you use our profile on X is generally transferred to a server of X Corp., FM 1209, Building 2, Bastrop, TX 78602 in the USA and stored there. Our service providers are based in and/or use servers located in countries outside the EU and EEA for which the European Commission has issued an adequacy decision confirming an adequate level of data protection. Our service providers are based in and/or use servers located in countries outside the EU and EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.
Instagram (by Meta) is a social media service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland ("Meta Platforms Ireland"). Automatically processed information about your activities and use of our Instagram fan page is generally transferred to a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA, and stored there. Data processing during visits to the Instagram fan page (by Meta) is carried out in accordance with Article 26 of the GDPR and is based on a joint agreement between the joint controllers. Further information on the processing of your personal data during visits to the Facebook fan page (information on the page statistics function) is available here. Our service providers are headquartered and/or use servers in countries for which the European Commission has issued adequacy decisions. Our service providers are based in: USA, Canada, Japan, South Korea, New Zealand, United Kingdom, Argentina. The adequacy decision for the USA applies as a basis for data transfers to third countries, provided that the service provider in question has been certified. This certification has been obtained. Our service providers are headquartered and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, Brazil, and Mexico. The European Commission has not issued an adequacy decision for these countries. Data transfers within the framework of our cooperation with service providers from these countries are based on the following safeguards: standard data protection clauses adopted by the European Commission.
YouTube is a social networking service operated by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Automatically processed information about your activities and the use of our YouTube profile is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA. 94043 in the USA and stored there. Our service providers are based in and/or use servers located in countries outside the EU and EEA for which the European Commission has issued an adequacy decision confirming an adequate level of data protection. Our service providers are based in and/or use servers located in countries outside the EU and EEA. The European Commission has not issued an adequacy decision for these countries. Our cooperation is based on standard data protection clauses adopted by the European Commission.
LinkedIn is a social networking service offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Automatically processed information about your activities and the use of our LinkedIn profile is generally transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085 in the USA and stored there. Our service providers are based in and/or use servers in countries for which the European Commission has issued an adequacy decision confirming a level of data protection. Our service providers are based in the USA. A decision on the adequacy of data protection for the USA applies as a basis for data transfers to third countries, provided that the service provider in question has been certified. This certification has been obtained.
9. Our Contact Details and Your Rights
9.1 Your Rights
Your data subjects have the following rights: in accordance with Article 15 of the GDPR: the right to obtain information about data processing within the scope specified in this Article; in accordance with Article 16 of the GDPR: the right to rectification of inaccurate or incomplete personal data; in accordance with Article 17 of the GDPR: the so-called "right to be forgotten," i.e., the right to have your personal data stored with us erased, provided that further processing is not necessary: to exercise the right to freedom of expression and information; to comply with a legal obligation; for reasons of public interest; to establish, pursue, or defend legal claims; in accordance with Article 17 of the GDPR: Article 18 GDPR: the right to restrict the processing of your personal data, provided that: you contest the accuracy of your personal data; processing is unlawful and you object to their deletion; we no longer need the personal data, but you require them to establish, pursue, or defend legal claims; you have objected to the processing of your personal data pursuant to Article 21 GDPR; pursuant to Article 20 GDPR: the right to receive the data you provided to us in a structured, commonly used, and machine-readable format and to have it transmitted to another controller; pursuant to Article 77 GDPR: the right to lodge a complaint with the supervisory authority (the President of the Personal Data Protection Office, "UODO").
Right to object. If we process your personal data as described in this privacy policy to protect our legitimate interests, you may object to the processing of your data for this purpose – with effect for the future. If the processing is for direct marketing purposes, you may exercise your right to object at any time. If processing is carried out for other purposes, you only have the right to object on grounds arising from your particular situation. After you exercise your right to object, we will no longer process your personal data unless we demonstrate compelling legitimate grounds for processing that override your interests and rights, or if the processing is for the purpose of asserting, exercising, or defending legal claims. The previous sentence does not apply when processing is for direct marketing purposes. In such a case, we will always cease further processing of your personal data upon your objection.
9.2 Contact Us
If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, rectification, restriction of processing, or deletion of your data, or to revoke consent or object to the use of certain data, please contact the data controller indicated at the beginning of this privacy policy directly.
9.3 Data Transfers Outside the EU/EEA
For deliveries to the United Kingdom or Ireland, your data may be transferred to third countries. In such cases, we ensure an adequate level of data protection (e.g., EU standard contractual clauses).
Data may be shared with:
- carriers and courier companies responsible for delivery,
- payment processors,
- accounting and tax offices, and customs agencies,
- government authorities to the extent required by law,
- IT service providers (hosting, security).