Privacy policy

Thanks for using our services!

PRIVACY POLICY

I. DEFINITIONS

Personal Data Administrator ("Administrator") - means a natural or legal person, public body, unit or other entity that independently or jointly with others sets the purposes and means of processing personal data;

Processing Personal Data ("Processor") is the entity that processes customer data on behalf of the Administrator. The rules of processing are described in the Agreement on Personal Data Processing concluded between the processor and the administrator;

Website is a software created by Skubacz.pl Sp. z o.o. operating under the Skubacz.pl and Restaumatic.com brands, and used by the Partner Restaurant via which the Customer can order products and services offered at the Partner Restaurant;

The Mobile application: a mobile application available for mobile phones and mobile devices is another form of the Internet System used to order goods and services in the Partner Restaurant;

Personal data: all information about an identified or identifiable physical person through one or more specific factors determining the physical, physiological, genetic, psychological, economic, cultural or social identity of the individual, including the IP number of the device, location data, internet identifier and information collected through cookies and other similar technology;

Recipient means a natural or legal person, public body, unit or other entity to whom personal data are disclosed, regardless of whether it is a third party. Public bodies which may receive personal data in the context of a specific proceeding under Union law or under the law of a Member State shall not, however, be considered as recipients; the processing of these data by these public authorities must be in accordance with the data protection rules applicable to the purposes of the processing;

Policy: this Privacy Policy;

Profiling means any form of automated processing of personal data, which involves the use of personal data to assess some of the personal factors, in particular to analyze or forecast aspects of the effects of this individual's work, its economic situation, health, personal preferences, interests, credibility, behavior, location or movement;

Processing means the operation or set of operations performed on personal data or personal data sets in an automated or non-automated way, such as collecting, recording, organizing, organizing, storing, adapting or modifying, downloading, browsing, using, disclosing by sending, distributing or otherwise sharing, matching or linking, limiting, deleting or destroying;

GDPR: Regulation of the European Parliament and of the Council (EU) 2016/679 of 7 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data and the repeal of Directive 95/46 / EC.

Partner Restaurant: Uncle B's Ltd., 189 Wilmslow Rd. , M14 5AQ Manchester, GB, , j444wad@hotmail.com, ;

The client is a natural person (including a Consumer) who is 18 years of age and has full legal capacity, or a legal person or an organizational unit with legal capacity. The client may be a natural person who is 13 years old but under 18 years of age to the extent that he can acquire rights and incur liabilities in accordance with the generally applicable laws, i.e. in small current matters of everyday life;

An order within the meaning of this document is a legal act performed using the Website, during which the Customer expresses the will to purchase the ordered products and services in accordance with their description and price;

The consent of the data subject means a voluntary, concrete, informed and unambiguous representation of the will, which the data subject, in the form of a declaration or a clear confirmation action, allows for the processing of personal data concerning him;

II. OBJECTIVES TO WHICH PERSONAL DATA ON THE USE OF THE WEBSITE AND THE MOBILE APPLICATION IS PROCESSED.

  1. Keeping Accounts of Customers and Partner Restaurants on the Website for the purpose of purchasing goods and services.
  2. For the purpose of handling online payments for ordered products via the Website and the Mobile Application.
  3. For the purpose of marketing products and services of Partner Restaurants.
  4. Social media
  5. Cookie files
  6. For the purpose of marketing the Website.

Ad. 1. Creating and maintaining accounts of Customers and Partner Restaurants on the Website for the purpose of purchasing goods and services.

The administrator of data processed for this purpose is Skubacz.pl Sp. z o.o., 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71, email: privacy@restaumatic.com The administrator has appointed a Personal Data Protection Inspector with whom you can contact in matters relating to the processing of personal data: privacy@restaumatic.com.

The recipients of the data are, among others: Partner Restaurants (to the extent necessary for the implementation of ordered goods and services) and entities providing teleinformation services to the Administrator, eg: e-mail, hosting, etc.

Using the Website (including placing orders, presenting the offer) requires the creation of a user account (client, partner restaurant, called users). The Customer may also use the option of placing an order without first creating an account on the Website. In both of the above cases, the Administrator collects user data to the extent necessary to provide services offered via the Website and the Mobile Application, as well as information about their activity on the Website.

The Administrator processes personal data of all persons using the Website (including the IP address or other identifiers and information collected via cookies or other similar technologies), and also records the Customer's activity on the Website in system logs (a special computer program for chronological storage) a record containing information about events and activities regarding the IT system used to provide services by the Administrator). Information collected in logs is processed primarily for purposes related to the provision of services. The administrator also processes these data for technical, administrative purposes, for the purposes of ensuring the security and management of the IT system, as well as for analytical and statistical purposes. Persons who register on the Website are requested to provide the data necessary to create and service an account. Such data can be deleted at any time. Providing data marked as mandatory is required to set up and service an account, and failure to do so results in the inability to set up an account.

An account in the Information System may be set up or logged in to an account already created also via the Mobile Application.

The Customer is obliged to use the Information System only and exclusively from his own personal data, under the threat of violation of applicable law in this area and personal rights of third parties. Providing personal data when creating a user account account and subsequent use of the Website requires entering personal data. Failure to provide such data prevents the use of the Website. Their processing is necessary for the performance of the contract to which the Customer or Partner Restaurant is a party or to take action at the request of these persons prior to the conclusion of the contract. (Article 6 (1) (b) of the GDPR)

Ad. 2. For the purpose of handling online payments for ordered products via the Website and the Mobile Application.

The Administrator of the data processed for the purpose of online payments is the Partner Restaurant. Personal data of customers using payments via the Internet are transferred to specialized companies dealing with the operation of online payments such as Dotpay.pl Sp. z o.o., ul. Wielicka 72, 30-552 Kraków, phone: +48 12 688-26-00, website: www.dotpay.pl., As well as to Skubacz.pl Sp. z o.o. When placing an order using online payments, customers are always informed by which entity the payment is served.

The Website provides Clients with the payment service via the internet network for ordered goods and services in Partner Restaurants. The use of the payment option via the internet is voluntary. Failure to provide personal data necessary to make a payment via the internet will result in the inability to carry out such a transaction. Their processing is necessary for the performance of the contract to which the customer is a party or to take action at the customer's request prior to the conclusion of the contract. (Article 6 (1) (b) of the GDPR).

The customer may also use other forms of payment for ordered goods and services, including with cash payment and, depending on the offer of the Partner Restaurant, also through the payment terminal of the Partner Restaurant.

Personal data processed for the purpose of processing online payments may be further processed in other legally justified administrator purposes (Article 6 paragraph f). These legally justified goals are: ● conducting analyzes of customer activity and preferences in order to improve the functionalities and services provided. ● possible determination, investigation or defense against claims.

Ad. 3. For the purpose of marketing products and services of Partner Restaurants.

The administrator is the Partner Restaurant: Uncle B's Ltd., 189 Wilmslow Rd. , M14 5AQ Manchester, GB, , j444wad@hotmail.com, ; Personal data is transferred to the following recipients: Skubacz.pl Sp. z o.o., 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71 (within the scope of the commissioned marketing campaign), mobile telephony operators, e-mail providers, online advertising agencies, etc.

The customer must give separate, explicit consent to the processing of his personal data for marketing purposes. His consent is voluntary and does not affect the implementation of the order or use of the IT System.

The administrator processes personal data of the IT System Customers in order to carry out marketing activities that may include: a) displaying to the Customer marketing content that is not adapted to its preferences (contextual advertising), including in the form of web banners, advertising texts or "push" functionality; b) displaying to the Customer marketing content that is tailored to its preferences (behavioral advertising), including in the form of web banners, advertising texts or "push" functionality; c) directing e-mail notifications about interesting offers or content, which in some cases contain commercial information (newsletter service). d) directing SMS notifications about interesting offers or content, which in some cases contain commercial information (newsletter service).

In order to implement marketing activities, the Administrator uses profiling in some cases. This means that due to the automatic data processing, the Administrator evaluates selected factors pertaining to individuals, in order to analyze their behavior, create a forecast for the future or invitations to re-use products and services.

Ad. a) Contextual advertising The administrator processes Customers' personal data for marketing purposes in connection with targeting contextual advertising to clients (ie advertising that is not tailored to the client's preferences). The processing of personal data for this purpose takes place in connection with the pursuit of the legitimate interest of the Administrator (Article 6 (1) letter f) of the GDPR, which consists in promoting its own brand.

Ad. b) Behavioral advertising Administrator or Processors (entities from the marketing industry) process customer personal data, including personal data collected through cookies and other similar technologies for marketing purposes, in relation to targeting behavioral advertising to clients (ie advertising that is tailored to the Customer's preferences ). The processing of personal data for this purpose also includes customer profiling.

Ad. c) Newsletter For those who have given their e-mail address for this purpose, the Administrator provides the newsletter service. Providing data is required to provide the newsletter service, and failure to do so results in the inability to dispatch it. Personal data is processed: ● in order to provide the newsletter delivery service - the legal basis for processing is the necessity of processing to perform the contract (Article 6 (1) (b) GDPR); ● in the case of marketing content to the Customer as part of the newsletter - the legal basis for processing, including profiling, is the legitimate interest of the Administrator (Article 6 paragraph 1 point f) RODO), in connection with the expressed consent to receive the newsletter; the legitimate interest of the Administrator is to promote his own brand; ● for analytical and statistical purposes - the legal basis of the processing is the legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR), based on analyzing the activity of Clients in the IT System in order to improve the functionalities used; ● In order to possibly determine, investigate or defend against claims - the legal basis for processing is a legitimate interest of the Administrator (Article 6 (1) (f) of the GDPR) consisting in the protection of its rights.

Ad. d) Direct marketing The Customer's personal data may also be used by the Administrator to direct marketing content to it through various channels, ie via e-mail, via MMS / SMS. Such actions are taken by the Administrator only if the Customer expressed his consent in this respect. The consent may be withdrawn by the Customer at any time, which will not affect the lawfulness of the processing which the Administrator made before its withdrawal.

Ad. 4. Social networks The administrator of data processed for this purpose is Skubacz.pl Sp. z o.o., 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71, email: privacy@restaumatic.com The administrator has appointed a Personal Data Protection Inspector with whom you can contact in matters relating to the processing of personal data: privacy@restaumatic.com.

The recipients of data are, among others: entities providing teleinformation services to the Administrator, eg: electronic mail, hosting, social network administrators, etc.

The administrator processes personal data of clients visiting the Administrator profiles carried out in social media (Facebook, YouTube, Instagram, LinkedIn, Twitter). These data are processed only in connection with running a profile, including to inform clients about the activity of the Administrator and to promote various types of events, services and products. The legal basis for the processing of personal data by the Administrator for this purpose is his legitimate interest (Article 6 (1) (f) of the GDPR), which consists in promoting his own brand.

Ad. 5. Cookies and similar technology

The administrator of data processed for this purpose is Skubacz.pl Sp. z o.o., 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71, email: privacy@restaumatic.com The administrator has appointed a Personal Data Protection Inspector with whom you can contact in matters relating to the processing of personal data: privacy@restaumatic.com.

The recipients of data are, among others: entities providing teleinformation services to the Administrator, eg: e-mail, hosting, etc.

a) "Service" cookies and similar technologies The administrator uses the so-called service cookies and similar technologies (local storage), primarily to provide the customer with services provided electronically and improve the quality of these services. Therefore, the Administrator and other entities providing its analytical and statistical services use cookies by storing information or accessing information already stored in the client's telecommunications terminal equipment (computer, telephone, tablet, etc.). Cookies used for this purpose include: ● cookies with data entered by the Customer (session ID) for the duration of the session (user input cookies); ● authentication cookies used for services requiring authentication for the duration of the session (authentication cookies); ● cookies used to ensure security, e.g. used to detect user centric security (cookies); ● session cookies for multimedia players (e.g. flash player cookies), for the duration of the session (multimedia player session cookies); ● persistent cookies used to personalize the client's interface, for the duration of the session or a bit longer (user interface customization cookies), ● cookies used to monitor traffic on the website, i.e. data analytics. b) "Marketing" cookies Processors (entities from the marketing industry) also use cookies for marketing purposes, including in relation to behavioral advertising addressed to clients.

  c) Push technology

The administrator uses the so-called Push technology, which gives the ability to send notifications to the client, including in connection with advertising to the Customer. For this purpose, the Administrator stores information or accesses information already stored in the client's telecommunications terminal equipment (computer, telephone, tablet, etc.).

Ad. 6. For the purposes of marketing the Website. The administrator of data processed for this purpose is Skubacz.pl Sp. z o.o., 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71, email: privacy@restaumatic.com The administrator has appointed a Personal Data Protection Inspector with whom you can contact in matters relating to the processing of personal data: privacy@restaumatic.com.

Data recipients include: entities providing teleinformation services to the Administrator, eg: e-mail, hosting, mobile telephony operators, etc.

Marketing activities are implemented to promote the Website by the Administrator. The marketing activities used are identical to those described in "Ad. 3. For the purpose of marketing products and services of Partner Restaurants" and when, the Administrator requested and obtained separate consent from the Customers for the processing of their personal data also for marketing purposes of their own products and services, in particular the Website.

III. PERIOD OF PROCESSING OF PERSONAL DATA

The period of data processing by the Administrator depends on the type of service provided and the purpose of the processing. As a rule, the data is processed by the time the service is provided or the order is processed, until the consent is withdrawn or effective opposition to the data processing is filed in cases where the legal basis for data processing is the Administrator's legitimate interest. The data processing period may be extended if the processing is necessary to establish, investigate or defend against any claims, and after this period, only in the case and to the extent that the law will require it. After the processing period, the data is irreversibly deleted or anonymized.

IV. POWERS RELATED TO THE PROCESSING OF PERSONAL DATA

The data subjects have the following rights: a) the right to information about the processing of personal data - on this basis, the person making the request transfers information about data processing, including primarily about the purposes and legal grounds for processing, the scope of data held, entities to which they are disclosed and the planned date of deletion; b) the right to obtain a copy of the data - on this basis, the Administrator provides a copy of the data processed concerning the person making the request; c) the right to rectify - the Administrator is obliged to remove any incompatibilities or errors of personal data being processed and to supplement them if incomplete; d) the right to delete data - on this basis, you can request deletion of data, the processing of which is no longer necessary to pursue any of the purposes for which they were collected; e) the right to limit processing - in the event of such a request, the Administrator ceases to perform operations on personal data - except for operations agreed to by the data subject and their storage, in accordance with accepted retention rules or until the reasons for limiting data processing have ceased to exist ( for example, a supervisory decision will be issued allowing further processing of data); f) the right to data transfer - on this basis - to the extent that the data is processed in relation to the concluded agreement or expressed consent - the Administrator issues data provided by the person they concern in a format that allows their reading by the computer. It is also possible to request this data to another entity - provided, however, that there are technical possibilities in this regard on the part of the Administrator as well as the other entity; g) the right to object to the processing of data for marketing purposes - the data subject may at any time object to the processing of personal data for marketing purposes, without the need to justify such objection; h) the right to object to other purposes of data processing - the data subject may at any time object to the processing of personal data, which takes place on the basis of the Administrator's justified interest (eg for analytical or statistical purposes or for reasons related to the protection of property); objection in this respect should contain justification; i) the right to withdraw consent - if the data are processed on the basis of the consent given, the data subject has the right to withdraw it at any time, but this does not affect the lawfulness of the processing carried out prior to the withdrawal of the consent. j) the right to complaint - if it is decided that the processing of personal data violates relevant provisions regarding the protection of personal data, the data subject may file a complaint to the President of the Office for the Protection of Personal Data.

V. SUBMISSION OF DEMANDS RELATED TO THE IMPLEMENTATION OF THE RIGHTS

The request for the exercise of the rights of the data subjects can be submitted in any form to the appropriate Data Administrator due to the purpose of the processing. They will be considered. In the case where the data controller is Skubacz.pl Sp. z o.o., please send applications to the following address: 41-800 Zabrze, ul. Wolności 345/605, NIP: 648-276-55-71, email: privacy@restaumatic.com For purposes where the Data Administrator is a Partner Restaurant - please send your application to the following address: j444wad@hotmail.com

If the Administrator is unable to identify the person submitting the application on the basis of the submitted application, he will ask the applicant for additional information. The application may be submitted in person or through a proxy. The response to the notification should be given within one month of its receipt. If it is necessary to extend this deadline by a maximum of two months - the Administrator will inform the applicant about the reasons for the delay. The reply is provided via traditional mail, unless the request was submitted via e-mail or a response was requested in electronic form. If the data subject so requests, the information may be given orally, provided that the identity of the data subject is confirmed by other means.

VI. TRANSMISSION OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

The level of protection of personal data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers personal data outside the EEA only when it is necessary, with an adequate level of protection, primarily through: ● cooperation with entities, processing personal data in countries for which an appropriate decision of the European Commission has been issued; ● use of standard contractual clauses issued by the European Commission; ● applying binding corporate rules, approved by the competent supervisory authority; ● in the event of data transfer to the USA - cooperation with entities participating in the Privacy Shield program, approved by the European Commission. The administrator always informs about the intention to transfer personal data outside the EEA at the collection stage.

VII. SECURITY OF PERSONAL DATA

The administrator conducts risk analysis on an on-going basis to ensure that personal data is processed in a secure manner, ensuring, above all, that only authorized persons have access to the data and only to the extent that it is necessary due to the tasks performed by them. The administrator makes sure that all operations on personal data are recorded and made only by authorized employees and associates. The Administrator undertakes all necessary actions, so that its subcontractors and other cooperating entities would guarantee that appropriate security measures will be applied whenever they process personal data at the request of the Administrator.

VIII. CHANGES IN PRIVACY POLICY

The policy is verified on an ongoing basis and updated if necessary. The current version of the Policy has been adopted and is effective from 25 May 2018.