Privacy Policy - Chimei Food Europe

1. GENERAL information

1.1. In order to preserve the right to privacy of the Service Users managed by the Service Administrator and to meet the requirements resulting from the provisions of the law, the Service Administrator provides the Service Users with this Privacy Policy, in which it explains and informs about the manner in which the personal data of the Users are processed and secured.

1.2. The Service Administrator processes personal data in accordance with the applicable provisions of the law, including the GDPR and the Act of 18 July 2002 on the provision of services by electronic means.

1.3. Before starting to use the Service, the User should familiarize themselves with the content of the Privacy Policy.

2. DEFINITIONS

2.1. The terms written in capital letters in this Policy have the following meanings:

Privacy Policy – this Privacy Policy;
Website Administrator – Chimei Food Europe Sp. z o.o. with its registered office in Warsaw, ul. Zajęcza 2B, 00-351 Warsaw; registered in the National Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, Commercial Division of the National Court Register under number 0001087157, share capital PLN 4,137,500.00 paid in full;
User – a natural person whose personal data is processed by the Service Administrator in connection with the use of the Service;
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC; Service – a website run by the Service Administrator available at https://chimeifood.eu;
Cookie file – a file downloaded to the User’s computer when accessing certain websites;

1.3. Before starting to use the Service, the User should familiarize themselves with the content of the Privacy Policy.

3. COLLECTION AND PROCESSING OF DATA

3.1. The administrator of personal data provided by the User when using the Service is the Service Administrator.

3.2. As a result of using the Service, the Service Administrator may process in particular the following personal data: name and surname, e-mail address, telephone number.

3.3. In connection with the User’s use of the Service, the Service Administrator collects data to the extent necessary to provide individual services offered, as well as information about the User’s activity on the Service. Detailed principles and purposes of processing personal data collected during the User’s use of the Service are described below.

4. OBJECTIVES AND BASIS OF DATA PROCESSING

4.1. The Service Administrator processes the personal data of Service Users for the following purposes:

4.1.1. informing about its activities (based on art. 6 sec. 1 letter f of the GDPR – legitimate interest of the Service Administrator, i.e. contact with Users) Personal data are processed to identify the sender and handle their inquiry sent via the contact form or to send a newsletter to Users subscribed to the newsletter).

4.1.2. marketing activities and improving services (based on art. 6 sec. 1 letter f of the GDPR – implementation of the legitimate interest of the Service Administrator, i.e. improving its services, ensuring their best quality and matching marketing information to Users’ interests). The Service Administrator processes personal data in order to measure and improve content and services, including matching content to Users’ interests.

4.1.3. fulfillment of the legal obligations of the Service Administrator (based on art. 6 sec. 1 letter c of the GDPR) The Service Administrator processes data if it is necessary to fulfill the obligations resulting from the provisions of the law.

4.1.4. ensuring the security and functionality of the Service (based on art. 6 sec. 1 letter f of the GDPR – fulfillment of the legitimate interest of the Service Administrator, i.e. ensuring the operation of the Service and high quality of services). The Service Administrator processes personal data if it is necessary to ensure the security of information processing and the management of teleinformatic systems.

4.1.5. pursuing or protecting against potential claims (based on art. 6 sec. 1 letter f of the GDPR – fulfillment of the legitimate interest of the Service Administrator, i.e. protection against claims or pursuing claims).

In the event of potential claims against Users or the need to protect against claims, the Service Administrator may process User data obtained via the Service.

5. SHARING DATA

5.1. The Service Administrator may share Users’ personal data at the request of public authorities or other entities authorized to such access under the law, in particular when it is necessary to ensure the security of systems or the rights of other Users, as well as at the request of Users or when it is necessary to perform the services offered by the Service Administrator.

5.2. Access to User data may be obtained by entities whose services the Service Administrator uses to provide services to Users (e.g. entities providing hosting for the Service). In such cases, the Service Administrator has concluded appropriate agreements with these entities, the subject of which is to protect User data against access by unauthorized persons.

5.3. Some of our service providers may store User data outside the territory of the European Economic Area. In such cases, User data may be stored in countries that provide an adequate level of personal data protection, or in countries that do not provide such a level. In the latter case, the Service Administrator protects User data by concluding agreements with service providers containing so-called Standard Contractual Clauses approved by the European Commission, which guarantee adequate protection of Users’ data in third countries, or use other bases for the transfer of personal data.

6. USER RIGHTS

6.1. The User has the following rights in relation to his/her personal data processed by the Service Administrator within the Services:

the right to access personal data;
the right to rectify personal data;
the right to withdraw consent;
the right to delete personal data;
the right to limit the processing of personal data;
the right to request the transfer of personal data;
the right to object to the processing of personal data;

6.2. In order to exercise the rights, you can contact us electronically at the following address: contact@chimeifood.eu

6.3. In the event that it is recognized that there has been a violation of the provisions on the protection of personal data, the User has the right to lodge a complaint with the President of the Office for the Protection of Personal Data.

7. DATA STORAGE PERIOD

7.1. The Service Administrator stores Users’ personal data only for the time necessary to achieve the purposes for which the data was collected. After this time, the data is deleted or anonymized in such a way that it is not possible to determine the User’s identity.

7.2. Personal data may be stored longer if such an obligation results from legal regulations or it is necessary for the Service Administrator to defend or pursue claims against Users.

7.3. Data processed on the basis of consent will be processed until it is withdrawn.

8. COOKIE FILES

8.1. The Service uses Cookies that contain:

the name of the server from which the Cookie File was sent;
the period of the Cookie File’s existence;
the value of the Cookie File (usually a randomly generated unique number).

8.2. The Service that sent the Cookie File uses this number to recognize the User when they return to the website or browse from page to page. Only the Service that sent the Cookie File can read and therefore use this Cookie File.

8.3. The Service Administrator uses Cookies for the following purposes:

creating statistics that help understand how Users use websites, which allows for improving their structure and content;
maintaining the User’s session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage.

9. TYPES AND DURATION OF COOKIES

9.1. The Service uses several types of Cookies, including:

9.1.1. Google Analytics Cookies

Cookies used to monitor traffic on the website, i.e. data analytics, including Google Analytics cookies (these are files used by Google to analyze how the Service is used by the User, to create statistics and reports on the functioning of the Service). Google does not use the collected data to identify the User and does not combine this information to enable identification. Detailed information on the scope and principles of data collection in connection with this service can be found at the link: https://www.google.com/intl/pl/policies/privacy/partners.

9.2. The User may authorize, refuse or disable Cookies by changing browser settings. If the User disables a Cookie already installed in the browser, this File will no longer be active, but it will not disappear from the browser until the end of its lifespan. Please note that blocking all Cookies may result in parts of the Service being unavailable to the User or may have a negative impact on the performance, efficiency or customization of the Service.

9.3. Each browser is configured differently. Please follow the instructions provided by the browser publisher.

10. CHANGES TO THE PRIVACY POLICY

10.1. The Service Administrator places the most current version of the Privacy Policy in the footer of the Service.