Privacy and cookie policy

PRIVACY AND COOKIES POLICY

You have the right to access, correct, and delete your data, among other things. You also have the right to object to the processing of your personal data or to request the restriction of its processing.

Providing the required personal data is voluntary, but is a condition for us to provide certain services to you (e.g., maintaining an account, sending a newsletter) or to perform a contract. We do not make individual decisions about you based solely on automated processing (profiling) that would produce legal effects or significantly affect your situation in a similar manner.

Our domain has an SSL certificate, so your data is encrypted.

Below you will find all the most important issues related to the processing of personal data on our website.

Who is the administrator of the website and personal data?

The administrator of the website and personal data is Cargopack Polska spółka z ograniczoną odpowiedzialnością with its registered office in Poznań, at ul. Szamarzewskiego 21/2, 60-514 Poznań, entered into the register of entrepreneurs maintained by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under the KRS number: 0001138043, Tax Identification Number (NIP): 7812079739, with the share capital of PLN 5,000.00.

Contact details: info@ekoliva.pl, phone number +48 573 199 164.

What is the legal basis for processing personal data?

Personal data are collected and processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (GDPR). The processing of personal data is also regulated by the National Data Protection Act of 10 May 2018 (consolidated text: Journal of Laws of 2019, item 1781).

What data do we process?

Depending on the purpose and user preferences, we may process data such as: name and surname, address, email address, telephone number, bank account number, IP address, and, in the case of entrepreneurs, also the Tax Identification Number (NIP) and business address. We may also process other personal data provided in correspondence with us. For analytics purposes, we may also process data regarding the source of access to the Store, the operating system and web browser used to browse the Store, data regarding products viewed, time spent on the site, abandoned carts, placed orders, activity in response to newsletter mailings, the user's age range, gender, approximate location, and interests (based on online activity).

The above data is transferred to us as a result of activities such as:

  • Using the contact form
  • Sending correspondence directly to our email address
  • Providing us with data during a telephone conversation,
  • Registering an account in the Store,
  • Placing an order in the Store,
  • Newsletter subscription,
  • Adding a product review (if this option is available)
  • Collection of other data for analytical purposes by the Store software or tools listed in this Privacy Policy.

For what purposes do we process your data?

We process data to the extent necessary for the operation of our store and store it for the period permitted by law. We process data provided by users when using the store.

  • Conclusion and performance of a contract – pursuant to Article 6(1)(b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party, or to take steps at the request of the data subject before entering into a contract.
  • Creating and maintaining an account - pursuant to Article 6(1)(b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract.
  • Ensuring contact with us via the contact form, e-mail, telephone call - pursuant to Article 6(1)(b) of the GDPR, i.e. when processing is necessary for the performance of a contract to which the data subject is a party or to take steps at the request of the data subject before entering into a contract.
  • Adding opinions and verifying them - based on: Article 6 paragraph 1 letter a of the GDPR - i.e. when the data subject has consented to the processing of his or her personal data for one or more specific purposes,
  • Direct marketing based on: Article 6(1)(a) of the GDPR – i.e. when the data subject has consented to the processing of his or her personal data for one or more specific purposes, or on the basis of Article 6(1)(f) of the GDPR, i.e. when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular when the data subject is a child.
  • Sending the newsletter and managing loyalty programs - pursuant to Article 6(1)(a) of the GDPR, i.e. when the data subject has consented to the processing of his or her personal data for one or more specific purposes.
  • Compliance with legal obligations, establishment and pursuit of claims – pursuant to Article 6(1)(c) of the GDPR, i.e. where processing is necessary for compliance with a legal obligation to which the controller is subject, and pursuant to Article 6(1)(f) of the GDPR, i.e. where processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.
  • Analytical and statistical activities - Article 6(1)(f) of the GDPR, i.e. when processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular when the data subject is a child.

We use tools such as Facebook Ads and Google Ads, which allow us to target ads to specific groups based on interests, gender, age, and profession. These tools are described in detail in our cookie policy.

Who do we share personal data with?

We transfer personal data to other entities only to the extent the data subject has consented to data processing, to the extent necessary for the performance of the contract, or to the extent required by the legitimate interests pursued by the controller. These entities include the following entities cooperating with the Store: hosting provider, newsletter delivery tool provider, CRM and invoicing system provider, accounting firm, courier and transport companies, IT company providing services for the Store, online payment processors, banks, marketing tool providers, and other subcontractors, as well as entities to which we are obligated to transfer your data under applicable law. Data related to analytics and statistics, which does not constitute personal data, may be transferred to companies that commonly provide analytics, statistics, and optimization services, including to the United States (e.g., Google LLC, Meta Platforms Inc.).

Is data transferred to third countries or international organisations?

Some data processing operations may involve the transfer of anonymised data to third countries or international organisations in connection with the use of tools that store personal data on servers located in third countries, in particular the USA.

However, it should be noted that the providers of these tools guarantee an adequate level of personal data protection, in particular by joining the Data Privacy Framework or using standard contractual clauses. This applies in particular to the services of Google Ireland Limited.

What exactly are your rights in relation to the processing of your personal data?

You have the right to:

  • request access to your personal data,
  • request the rectification of your personal data,
  • object to the processing of personal data,
  • request the deletion of your personal data,
  • request to limit the processing of personal data,
  • requests to transfer personal data,
  • obtain information on automated decision-making, including profiling, and on the safeguards applied in connection with the transfer of such data outside the EU,
  • obtaining information about the purposes of processing, the categories of personal data processed, and the recipients or categories of recipients of such data,
  • obtain information about your rights under the GDPR, about the right to lodge a complaint with the Personal Data Protection Office, about the planned period of data storage or about the criteria for determining this period, and about the source of the data,
  • obtain a copy of your personal data.

If you wish to exercise any of the above rights, please let us know. We will promptly provide you with all information regarding the actions taken in response to your request.

You may withdraw your consent to the processing of your personal data at any time. To do so, please contact us.

Cookie Policy

Cookies are commonly used short text files that identify software used, tailor content to user needs, and ensure the proper functioning of websites. They are stored on the device you are using and have a domain name, storage duration, and a specific value. Cookies used in our store are secure and are divided into session cookies and persistent cookies. Session cookies are stored only until the end of the browser session. Persistent cookies are stored on the device until deleted. You can change your cookie preferences or delete them (persistent cookies) at any time using your web browser.

The basis for using cookies

We use some cookies to the extent necessary for the proper provision of electronic services, while we use other cookies based on your consent.

The consent granted results from the settings of the web browser, other software used to manage cookies or the settings of the cookie manager if it is made available on the website.

You can disable cookies, as well as specific types of cookies. However, if you disable or limit the use of cookies, you may lose access to some of the features available on our website that require consent to the use of certain cookies.

Entities whose cookies we use:

Google tools - Google Adsense, Google Tag Manager, and Google's YouTube, are provided by Google Ireland Limited (Registration Number: 368047 / VAT Number: IE6388047V), Gordon House, Barrow Street, Dublin 4, Ireland. We base our use of these tools on our legitimate interest in marketing using commonly used tools. From our perspective, the data collected in connection with the use of these tools is not personal data due to anonymization.

More information about the tools can be found in the Google Terms of Use and Privacy Policy .

Google AdSense

Our website may display personalized ads through the AdSense network. Cookies are used to display ads based on your visits and activity on our website and other websites.

Google Tag Manager

This tool analyzes traffic and user activity using tags. This allows us to collect information about advertising effectiveness, which helps us optimize our website and offerings.

YouTube

Our website uses YouTube widgets that allow you to embed videos from YouTube. YouTube collects cookies containing information about played videos to ensure the proper and secure provision of services, to improve them, and to personalize advertising.

Firebase

We use Firebase to better understand user behavior and optimize apps. Firebase is a database that allows you to embed information into websites in real time. Firebase is a subsidiary of Google and is headquartered in San Francisco, California, USA. For more information, please see the Firebase Privacy Policy.

Hotjar

We use the Hotjar tool to better optimize the Online Store and your experience when using the Online Store. The tool is provided by a third party, Hotjar Limited, Level 2, St Julian's Business Centre, 3, Elia Zammit Street, St Julian's STJ 1000, Malta. If you are interested in details regarding data processing within Hotjar, we encourage you to review Hotjar's privacy policy .

Meta Pixel

We use marketing tools available on Facebook and provided by Meta Platforms Ireland Limited.

A meta pixel is a short code placed on your website that allows you to measure the effectiveness of your ads based on user actions on your site and personalize ads. The code's goal is to show ads to the right audience, increase sales, and measure ad performance.
The Meta Pixel uses cookies to record website activity—for example, website traffic, visits to specific subpages, adding products to the cart, or making purchases. These activities are analyzed to optimize the website and our offerings.

For more information, please see Meta's Privacy Policy .

Social media
When we embed a plugin for a given social media platform (Facebook, Instagram, TikTok) on our website, the administrator of that platform receives information about your visit to our website using your user ID. The administrator of that platform collects information about the browser used, the date, and time of the page visit. The administrators of that platform use this information to ensure the full functionality of the plugins, improve their services, and personalize advertising.

For more information, please see Meta's Privacy Policy and TikTok's Privacy Policy.

Server logs

Visiting and using the website involves sending queries to the server, which are stored in server logs. These logs contain information such as the user's IP address, the date and time of the query, the browser used, and the operating system.

Server logs are saved and stored on the server. However, they are not associated with specific individuals using the website and are not intended for identification purposes – they are used only for website administration, and their content is not disclosed to unauthorized persons.