Introduction
This website (the “website”) is made available to you by Pimenta Foods sp. z o. o. with its registered office in Łowicz, Ekonomiczna 8, 99-400 Łowicz, NIP 701-07-17-051, REGON 368312450, hereinafter referred to as “Pimenta.pl”. The controller of your personal data, within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC („GDPR„), is Pimenta.pl. The following privacy policy sets out how we may use your personal data and forms part of the „Terms of Use of the website.“ The term „Personal Data“ refers to any information that relates to you, such as your name, email address, and postal address, as well as information that indirectly identifies you as a user of the Website. Please read this privacy policy to understand how we use your personal data after we collect it.

How can you contact us?
If you have any questions regarding this privacy policy or would like to exercise your rights, please contact us at: info@pimenta.pl or send correspondence to our registered office address.

When do we collect data?
When you visit our Website, we may collect personal data that you provide yourself, as well as data that is generated automatically. We may collect your personal data when you do the following while on our Website:
You browse our Website (automatic collection);
You register as a user of the service provided via our Website;
You register to receive our newsletters/communications;
You contact us about a problem or initiative, ask us a question or send us information;
We also automatically collect certain information about visitors to our websites, as described in the section titled „Cookies“ below.

What personal data do we collect from you?
Depending on the situation, we may ask you to provide certain personal data in order to properly identify you and enable efficient communication, such as: name and surname, e-mail address, telephone number, postal address. The scope of data depends on the nature of the relationship with you and may include a broader scope of data. In certain situations, providing data may be necessary to perform actions requested by you (e.g., registering for services or events).
We also collect data regarding your use of specific features and the choices you make. When you use the Website, we may process data that does not include your contact details, but is used to identify the specific device and software you use to access our Website. In this way, we may collect: connection data, including: internet connection details, IP address and other online identifiers; data about the device and software used to access the Website, including: device identifiers, device make and type, device operating system and version, device and software settings such as fonts, language settings, time zone, screen resolution, browser type and version, software information about the device; location data, including: information about the area from which the device connects to the Website, location information provided by the device; data contained in cookies: information saved and stored temporarily in cookies; data related to user activity on the Website, including event log data.

What do we do with your personal data?
When you provide us with the personal data set out above, we use it for the following purposes: enabling you to use the services made available via the Website and registering you as a user – the legal basis for data processing is the necessity to perform the contract or provide you with services (Article 6, paragraph 1, letter b) of the GDPR); enabling you to register for events organised or co-organised by us – the legal basis for data processing is the pursuit of legitimate interests (Article 6(1)(f) of the GDPR); maintaining proper correspondence with you – the legal basis for data processing is the pursuit of legitimate interests (Article 6(1)(f) of the GDPR); providing you with information about events, latest news or special offers that may be of interest to you – the legal basis for data processing is the pursuit of legitimate interests (Article 6(1)(f) of the GDPR), in connection with your consent to receive such electronic messages; ensuring the stability and security of the Website and our users, including preventing and counteracting the posting or distribution of content of an aggressive, inappropriate or offensive nature – the legal basis for data processing is the pursuit of legitimate interests (Article 6, paragraph 1, letter f) of the GDPR); establishing, pursuing and defending claims of pimenta.pl or third parties – the legal basis for data processing is the pursuit of legitimate interests (Article 6, paragraph 1, letter f) of the GDPR); analysing user activity on the Website and performing statistical research so that we can improve the usefulness and content of the Website – the legal basis for data processing is the pursuit of legitimate interests (Article 6, paragraph 1, letter f) of the GDPR).

Sharing your personal data
We use the services of service providers acting on our behalf and on our behalf. These include technical service providers who operate the technical infrastructure needed to actively maintain the Website, in particular providers who host, store, and maintain the Website, its content, and the data we process. We also use the services of service providers who provide IT services, consulting or auditing services, and support the Website’s user experience. As a general rule, we do not share your data with other entities unless such disclosure is required by law (e.g., disclosure at the request of authorized authorities) or is necessary for the performance of our services and is made at your request (e.g., in the case of registration for events organized by third-party providers).
We may also share your personal data to respond to incidents related to the operation of our services for our own purposes or the legitimate purposes of a third party related to national security, law enforcement, litigation, criminal investigations, protecting the safety of any person, or protecting against death or bodily injury, provided that we determine that such interests override the fundamental rights and freedoms for which your personal data is protected.

International transfers of personal data
Given that the Internet is a global environment, using it to collect and process personal data may involve the transfer of data across national borders. Some data recipients may be located outside the European Economic Area, which does not provide an adequate level of protection („third country”). In each case, data will be transferred to a third country only in accordance with appropriate safeguards related to such data processing, including, in particular, an agreement with the data recipient using Standard Contractual Clauses approved by the European Commission and/or the application of additional protective measures in accordance with Chapter V of the GDPR. For more information on the security measures used, please contact us as described above.

Automated decision-making and profiling.
Users’ personal data will be processed by automated means (including profiling), but this will not produce any legal effects or significantly impact the situation of users. Automated processing, including profiling, may involve the analysis and evaluation of user data to adapt the behavior of our Website to the configuration of the device and software used by the user, as well as to user preferences, and to ensure the stability and security of the Website and its users.

How long do we store personal data?
We retain personal data for as long as necessary to provide the Website and for legitimate and necessary statutory and business purposes, such as maintaining website performance, making data-driven decisions about new features, complying with legal obligations, preventing abuse and fraud, and for statistical and archiving purposes. Your personal data will be processed for the period necessary to achieve the purposes for which the data was collected, e.g., providing a service, and then for the period specified in the regulations and necessary to establish, pursue, or defend claims (e.g., during the limitation period for claims), or if the obligation to retain the data results from legal provisions (e.g., if it is necessary to retain data necessary for financial and tax reporting). Generally, we process automatically collected data for a period of 90 days.

What rights do you have regarding the data being processed?
In connection with the processing of your personal data, you have a number of rights. We ensure that all user rights arising from the GDPR and other legal provisions are respected, including:
The right to access personal data – Every user may request information about what personal data we process, including receiving a copy of their personal data.
The right to rectify personal data – the User may request that data that is incorrect be corrected or that data that is incomplete be supplemented.
The right to delete personal data („the right to be forgotten”) – The user may request the deletion of all of their data in certain cases, including if consent to their processing is withdrawn (if it constituted the sole basis for processing) or if the data was processed unlawfully. Important: The user will not be able to exercise this right when data processing is required to fulfill legal obligations or when processing is necessary to establish, pursue, or defend legal claims.
Right to object – You may at any time request that we suspend the processing of your data for reasons relating to your particular situation, where your data is processed for purposes based on legitimate interests (e.g., for statistical and analytical purposes). In such a case, we will cease processing your personal data unless there are legally valid and justified grounds for processing: (1) overriding your interests, rights, and freedoms, or (2) grounds for establishing, pursuing, or defending legal claims.
The right to limit the processing of personal data – the User may request that data be „blocked” (i.e., data processing operations be stopped except for storage) in certain situations, including for the time necessary to correct the data or when the data is no longer needed, but its storage is necessary for the User, e.g., to protect their rights.
The right to data portability – The user may request that the data they have provided be received in a structured, commonly used, and machine-readable format. The user may request that this data be obtained or transmitted directly to another designated controller, provided that this is technically feasible.
Furthermore, in the event of a suspected violation of personal data protection regulations, the user has the right to lodge a complaint with the President of the Personal Data Protection Office.

Cookies
When you browse our website, we may need to store information on your computer’s hard drive or mobile device in the form of „cookies.” Cookies are widely used by website owners to enable or improve the functionality of their websites, as well as to provide reporting. Cookies are small pieces of data that are stored as text files on your computer when you visit certain websites. Their typical purpose is to allow websites to remember specific actions you have taken in the past. For example, cookies can track when you logged into a website, when you visited certain web pages, or when you clicked certain buttons. Cookies set by parties other than the website owner are called third-party cookies. These cookies enable third-party features or functionality to be provided on or through the website (e.g., advertising features and content, videos, and website analytics services). The parties that set the cookies can recognize your computer both when you use it to visit the website and when you use it to visit certain other websites.
Cookies may remain on your computer or mobile device for varying periods of time. Some cookies are session cookies, meaning they only exist while your web browser is open and are automatically deleted when you close it. Other cookies may be persistent cookies, meaning they remain after you close your browser and can be used by websites to recognize your computer when you reopen your browser and resume browsing.

We use cookies for several reasons. For example, they allow us to track the interests of our users, which allows us to make our website more attractive. Third parties also set cookies on our website for analytical purposes. The types of cookies used on this website and the purposes they serve are described below:
Performance and functionality cookies
Name: pop-up
Publisher: Pimenta.pl (own)
Expiration date: 1 month
Description: This cookie checks whether the user has been shown the cookie information and has „closed” it. If so, the information will not be displayed for another month.

Analytics and customization cookies
Name: __utma
Publisher: Google (Google Analytics)
Expiration date: 2 years
Description: This file tracks how many times a user has visited the site, when they first visited the site, and when they last visited the site.

Name: __utmb
Publisher: Google (Google Analytics)
Expiration date: 30 minutes
Description: This file allows the duration of a website visit to be calculated by obtaining a timestamp of when a visitor enters the website.

Name: __utmc
Publisher: Google (Google Analytics)
Expiration date: end of session
Description: This cookie allows us to calculate the duration of a website visit by capturing a timestamp of when a visitor leaves the page. The cookie remains active for 30 minutes to manage any subsequent visits to the site and expires if no further visits are made.

Name: __utmz
Publisher: Google (Google Analytics)
Expiration date: end of session
Description: This file remembers where a visitor came from, what search engine was used, what link was clicked, what keywords were used, and from where in the world the website was accessed.

Name: __ga
Publisher: Google (Google Analytics)
Expiration date: 2 years
Description: This cookie is used to distinguish users.
More information about the use of Google Analytics tools can be found at: http://www.google.com/analytics/learn/privacy.html.

How can you prevent cookies from being saved?
If you wish to disable or delete cookies, please refer to the „Help” section of your browser or mobile device. Each browser or device handles cookies differently, so you should refer to the appropriate „Help” documentation. You have the right to decide whether to accept or reject cookies. You can also set or modify your web browser settings to accept or reject cookies. If you choose to reject cookies, you may still use our website; however, your access to certain features and areas of the website may be limited.

Final provisions
This privacy policy may be updated from time to time. The date of the last changes will appear on the website, so please check the privacy policy regularly. We may periodically develop new or offer additional services or features. If the introduction of new or additional services or features changes the way we collect or process your personal data, we will provide you with additional information, terms, or policies. Unless otherwise specified, the introduction of new or additional services or features will be subject to the provisions of this policy.

This Privacy Policy is effective from June 1, 2022.