Privacy policy

I. GENERAL INFORMATION

This document contains information we are required to provide to you when collecting your personal data through the website https://zibru.com/ or in another form, when you make purchases from us.

We make every effort to ensure that your personal data is:

  • processed lawfully (in particular in accordance with the GDPR), fairly, in a manner transparent to you ("lawfulness, fairness and transparency");
  • collected for specified, explicit and legitimate purposes and not further processed in a manner incompatible with those purposes ("purpose limitation");
  • adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed ("data minimisation");
  • accurate and, where necessary, kept up to date ("accuracy");
  • kept in a form which permits identification of you for no longer than is necessary for the purposes for which the data is processed ("storage limitation");
  • processed in a manner that ensures appropriate security of personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures ("integrity and confidentiality").

II. DEFINITIONS

Baltaz, We/Us – Baltaz spółka z ograniczoną odpowiedzialnością (a Polish limited liability company) with its registered office in Gdańsk at ul. Nowiec 70, entered into the register of entrepreneurs kept by the District Court Gdańsk – Północ in Gdańsk, 7th Commercial Division of the National Court Register, under KRS number 0000786420, NIP: 9571115965, with share capital of PLN 5,000.

Account – a user account created in accordance with the Terms and Conditions.

Terms and Conditions – the terms and conditions of the zibru.pl online store, available at https://zibru.pl/pl/content/Regulamin-3.

GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).

You – a person using the services provided by zibru.pl, purchasing goods through zibru.pl, or receiving commercial information requested from us, including the newsletter.

III. WHO IS THE CONTROLLER OF YOUR DATA COLLECTED BY ZIBRU.COM AND HOW CAN YOU CONTACT THEM?

The controller of your personal data is Baltaz.

If you need to contact us regarding matters related to the protection of your personal data, please use one of the following methods:

  • by email at: daneosobowe@zibru.com;
  • by phone at: +48 885 292 999;
  • in writing at: ZIBRU.COM, Ul. Kościuszki 7/9, 80-451 Gdańsk.

IV. WHAT HAPPENS TO YOUR PERSONAL DATA FROM THE MOMENT IT IS COLLECTED UNTIL IT IS DELETED?

A. WHEN YOU SEND US A PRICE/PRODUCT INQUIRY

What data do we collect? To respond to your inquiry, the email address you provide is enough for us. If you provide other data that turns out to be necessary or useful for handling your inquiry, e.g. your identifying details (first and last name) or contact details (correspondence address, phone number), we will process those too.

Why do we process it? So that you receive the commercial information you requested from us.

On what legal basis do we process your data? We process your data in order to take steps at your request prior to entering into a contract for the purchase of goods from us.

How long will we process your data? Your data will be processed until you lose interest in our offer, after we have answered your questions.

Who do we share your data with? Apart from our employees, we do not share your data with anyone. Only the provider of our email hosting service has access, and that access is limited to storing data on the email server.

B. WHEN YOU SIGN UP FOR THE NEWSLETTER

What data do we collect? To send the newsletter, the email address you provide is enough for us. You can enter it:

  • in the pop-up window that appears when you visit Zibru.com,
  • when creating an Account, and
  • when placing an order (both as a guest and using an Account).

Why do we process it? So that you receive commercial information from us about Zibru.com's current standard product offering, any promotional offers, and discount codes.

On what legal basis do we process your data? We process your data based on your explicit consent, given by checking the relevant checkbox before providing us with your data.

How long will we process your data? Your data will be processed until you withdraw your consent. Withdrawal does not, however, affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Who do we share your data with? We do not share email addresses collected solely for sending the newsletter with anyone, except for Fresh Mail Sp. z o.o., through which our newsletters are sent.

C. WHEN YOU SHOP WITH US

What data do we collect? We identify 2 categories of data that we process when you shop on Zibru.com:

  • Necessary data: first name, last name, email address, phone number, shipping address,
  • Additional data: tax ID (NIP), billing address – if different from the shipping address (if you request an invoice).

Why do we process it? If you make purchases on Zibru.com, we enter into a sales contract with you for the goods in our offer. Concluding this contract and fulfilling our resulting obligations – including confirming your order and shipping the goods you ordered – would be impossible without the personal data listed above. If you do not provide this data, we will be unable to conclude and perform a contract of sale with you.

On what legal basis do we process your data? We process your data because:

  • it is necessary to perform our sales contract, including exercising your rights both during the purchase and during the period of our liability for the sold goods, whether under warranty or statutory warranty (handling any complaints and returns);
  • it is necessary to fulfil a legal obligation to which we are subject under accounting regulations.

How long will we process your data? Your data will be processed for as long as necessary to achieve the purposes indicated above, i.e.:

  • during performance of the contract, and during the period of our liability for the sold goods under warranty or statutory warranty, and longer only if, after that period expires, a court dispute is pending between us to determine the scope of our liability towards you;
  • until our tax obligations related to the sale of goods to you expire, i.e. generally for a period of 5 years from the end of the year in which you purchased goods through Zibru.com.

Who do we share your data with? We only share the personal data we receive from you with entities we cooperate with in conducting our business. We have data processing agreements with these entities that properly protect the data you provide. These entities include:

  • entities supplying the goods we sell;
  • entities handling our accounting;
  • entities hosting the Zibru.com website and providing us with email services.

D. WHEN YOU CREATE AN ACCOUNT ON ZIBRU.COM

What data do we collect? We collect the same data as when you make purchases, but in your Account panel you can also add: gender, and a payment card number, and you also get access to your order history.

Why do we process it? We process the data saved to your Account in order to provide the service electronically – having an Account makes it faster and easier to place orders, since order data is automatically pulled from your Account, and the Account also lets you keep a history of your orders.

On what legal basis do we process your data? We process your data because it is necessary to perform our contract for the provision of the electronic service.

How long will we process your data? Your data will be processed for as long as necessary for the purpose indicated above, i.e. for the duration of our contract for the electronic service. You can delete your Account and the personal data in it at any time.

Who do we share your data with? We only share the personal data we receive from you with entities we cooperate with in conducting our business. We have data processing agreements with these entities that properly protect the data you provide. These entities include those hosting the Zibru.com website and providing us with email services.

V. WHAT RIGHTS DO YOU HAVE REGARDING OUR PROCESSING OF YOUR PERSONAL DATA?

The GDPR grants you a number of rights related to the processing of your personal data. They are briefly described below.

Right to request access to your personal data

You have the right to obtain confirmation as to whether we process personal data about you, and if so, to access it along with the following information:

  • the purposes of processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • information about your right to request that we rectify, erase, or restrict the processing of your personal data, and to object to such processing;
  • information about the right to lodge a complaint with a supervisory authority;
  • where the personal data was not collected from you directly, any available information about its source;
  • information about automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR, and – at least in those cases – meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for you.

If you request access to your personal data, we will provide you with one copy of the data undergoing processing free of charge. For any further copies you request, we may charge a reasonable fee based on our administrative costs. If you make the request electronically, and unless you indicate otherwise, we will reply using a commonly used electronic format.

Right to request rectification of your personal data

You have the right to request that we promptly rectify any inaccurate personal data about you. Taking into account the purposes of processing, you also have the right to have incomplete personal data completed, including by providing an additional statement.

Right to request erasure of your personal data (the "right to be forgotten")

You have the right to request the prompt erasure of personal data about you, and we are obliged to erase it without undue delay if any of the following applies:

  • your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
  • you have withdrawn your consent to processing and there is no other legal basis for it;
  • your personal data has been processed unlawfully.

Right to request restriction of processing

You have the right to request that we restrict processing in the following cases:

  • you contest the accuracy of the personal data – for a period allowing us to verify its accuracy;
  • the processing is unlawful and you oppose erasure of the personal data, requesting restriction of its use instead;
  • we no longer need the personal data for our processing purposes, but you need it to establish, exercise, or defend legal claims;
  • you have objected to processing under Article 21(1) of the GDPR (see below) – pending verification of whether our legitimate grounds override those of your objection.

Right to object to processing

You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data where it is based on the necessity of processing for purposes arising from our legitimate interests. If you raise such an objection, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or grounds for the establishment, exercise, or defence of legal claims.

Right to data portability

You have the right to receive, in a structured, commonly used, machine-readable format, the personal data about you that you provided to us, and to transmit that data to another controller without hindrance from us, where:

  • the processing is based on your consent, or on a contract we have with you; and
  • the processing is carried out by automated means.

When exercising the right to data portability, you may request that we transmit your personal data directly to another controller, where technically feasible.

The right to data portability must not adversely affect the rights and freedoms of others.

VI. WHERE CAN YOU FILE A COMPLAINT IF YOU BELIEVE YOUR PERSONAL DATA IS BEING PROCESSED UNLAWFULLY?

If you believe your data protection rights have been infringed, you have the right to file a complaint with the supervisory authority, which is the President of the Office of Competition and Consumer Protection (UOKiK).

VII. INFORMATION ABOUT COOKIES

Zibru.com uses performance cookies, which collect information about how the site is used so we can improve it, and functional cookies, which let us "remember" user settings (e.g. language, items added to the cart).

These include, among others:

  • google-analytics.com cookies – statistics for this website; more about Google Analytics' privacy policy: https://www.google.com/analytics/learn/privacy.html?hl=pl
  • session cookies (expire when the session ends);
  • Facebook.com cookies, described below;
  • Tawk.to cookies, described below;
  • Opineo.pl cookies, described below;
  • Pinterest cookies.

The services whose content we display may also use cookies that enable logging in and are used to serve ads tailored to a user's preferences and behaviour. These cookies include, in particular:

facebook.com
We place Recommend/Share buttons linked to Facebook on pages of this site. The user logs into Facebook, where Facebook's own privacy policy applies. You can review it at: http://pl-pl.facebook.com/help/cookies

Instagram.com
We display photos pulled from Instagram on our pages. The user logs into Instagram, where Facebook's privacy policy applies. You can review it at: https://www.facebook.com/help/instagram/155833707900388

Pinterest
We place a Pinterest share button on pages of this site. The user logs into Pinterest, where Pinterest's own privacy policy applies. You can review it at: https://policy.pinterest.com/pl/privacy-policy

Opineo.pl
We display an Opineo.pl widget on our pages so you can read reviews of our store on Opineo.pl. Opineo.pl's privacy policy is available at: https://www.opineo.pl/i/dla-uzytkownika/polityka-prywatnosci

Tawk.to
We use the Tawk.to chat solution. Their privacy policy is available at: https://www.tawk.to/privacy-policy/

VIII. WHEN THIS PRIVACY POLICY MAY CHANGE

We reserve the right to change this Privacy Policy at any time, in particular if data-protection laws or guidance change. We will notify you of any change by email and via a notice on Zibru.com.