Menu

Privacy policy

General information

  1. Niniejsza polityka dotyczy Serwisu www, funkcjonującego pod adresem url: foodtown.pl
  2. Operatorem serwisu oraz Administratorem danych osobowych jest: SFF Sp. z o.o., ul. Jarosława Dąbrowskiego 46/1, 02-561 Warszawa
  3. Adres kontaktowy poczty elektronicznej operatora: hello@foodtown.pl
  4. The operator is the administrator of your personal data in relation to the data provided voluntarily on the Website.
  5. The Website uses personal data for the following purposes:
    1. Running a newsletter
    2. Handling enquiries via the form
    3. Presentation of offers or information
  6. The Website collects information about users and their behaviour in the following ways:
    1. Through data voluntarily entered into forms, which is entered into the Operator’s systems.
    2. By storing cookies on end devices.

Selected data protection methods used by the Operator

  1. Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the destination server.
  2. Personal data stored in the database is encrypted in such a way that only the Operator with the key can read it. This protects the data in the event of the database being stolen from the server.
  3. User passwords are stored in hashed form. The hashing function is one-way – it is not possible to reverse its operation, which is currently the modern standard for storing user passwords.
  4. The website uses two-factor authentication, which is an additional form of protection for logging into the Website.
  5. The Operator periodically changes its administrative passwords.
  6. In order to protect data, the Operator regularly makes backup copies.
  7. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

Hosting

  1. The service is hosted (technically maintained) on the operator’s servers: home.pl

Your rights and additional information about how your data is used

  1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfil the obligations incumbent on the Controller. This applies to the following groups of recipients:
    1. authorised employees and associates who use the data to achieve the purpose of the website
    2. companies providing marketing services to the Controller
  2. Your personal data processed by the Administrator for no longer than is necessary to perform the related activities specified in separate regulations (e.g. on accounting).
  3. With regard to marketing data, the data will not be processed for longer than 3 years.
  4. You have the right to request from the Administrator:
    1. access to your personal data,
    2. its rectification,
    3. deletion,
    4. restriction of processing,
    5. and data transfer.
  5. You have the right to object to the processing indicated in point 3.3 c) to the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling, whereby the right to object shall not be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  6. The Controller’s actions may be appealed to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  7. Providing personal data is voluntary, but necessary for the operation of the Website.
  8. You may be subject to automated decision-making, including profiling, for the purpose of providing services under the contract and for the purpose of direct marketing by the Controller.
  9. Personal data is not transferred from third countries within the meaning of the provisions on personal data protection. This means that we do not transfer it outside the European Union.

Information in forms

  1. The website collects information provided voluntarily by the user, including personal data, if provided.
  2. The website may store information about connection parameters (time stamp, IP address).
  3. In some cases, the website may store information that facilitates the linking of data in the form with the email address of the user filling out the form. In this case, the user’s email address appears within the URL of the page containing the form.
  4. The data provided in the form is processed for the purpose resulting from the function of a specific form, e.g. to process a service request or commercial contact, register services, etc. Each time, the context and description of the form clearly informs what it is used for.

Administrator Logs

  1. Information about user behaviour on the website may be logged. This data is used for the purpose of administering the website.

Important marketing techniques

  1. The operator uses statistical analysis of website traffic via Google Analytics (Google Inc., based in the USA). The operator does not transfer personal data to the operator of this service, only anonymised information. The service is based on the use of cookies on the user’s end device. With regard to information about user preferences collected by the Google advertising network, the user can view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques to tailor advertising messages to the user’s behaviour on the website, which may give the illusion that the user’s personal data is being used to track them, but in practice no personal data is transferred from the Operator to advertising operators. The technological prerequisite for such activities is the enabling of cookies.
  3. The Operator uses Facebook pixels. This technology allows Facebook (Facebook Inc. based in the USA) to know that a person registered with it is using the Website. In this case, it is based on data for which it is the controller; the Operator does not transfer any additional personal data to Facebook. The service is based on the use of cookies on the user’s end device.
  4. The Operator uses a solution that automates the operation of the Website in relation to users, e.g. it can send an email to a user after visiting a specific subpage, provided that the user has consented to receive commercial correspondence from the Operator.

Information about cookies

  1.  In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfil the obligations incumbent on the Controller. This applies to the following groups of recipients:
    1. authorised employees and associates who use the data to achieve the purpose of the website
    2. companies providing marketing services to the Controller
  2. Your personal data processed by the Administrator for no longer than is necessary to perform the related activities specified in separate regulations (e.g. on accounting). With regard to marketing data, the data will not be processed for longer than 3 years.
  3. You have the right to request from the Administrator:
    1. access to your personal data,
    2. its rectification,
    3. deletion,
    4. restriction of processing,
    5. and data transfer.
  4. You have the right to object to the processing indicated in point 3.3 c) to the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling, whereby the right to object shall not be exercised if there are valid legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. The Controller’s actions may be appealed to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary, but necessary for the operation of the Website.
  7. You may be subject to automated decision-making, including profiling, for the purpose of providing services under the contract and for the purpose of direct marketing by the Controller.
  8. Personal data is not transferred from third countries within the meaning of the provisions on personal data protection. This means that we do not transfer it outside the European Union.

Cookie management – how to give and withdraw consent in practice?

Windows Phone
Jeśli użytkownik nie chce otrzymywać plików cookies, może zmienić ustawienia przeglądarki. Zastrzegamy, że wyłączenie obsługi plików cookies niezbędnych dla procesów uwierzytelniania, bezpieczeństwa, utrzymania preferencji użytkownika może utrudnić, a w skrajnych przypadkach może uniemożliwić korzystanie ze stron www

W celu zarządzania ustawienia cookies wybierz z listy poniżej przeglądarkę internetową, której używasz i postępuj zgodnie z instrukcjami:
Edge
Internet Explorer
Chrome
Safari
Firefox
Opera

Urządzenia mobilne:
Android
Safari (iOS)