Privacy policy

This English text is provided for information. If it differs from the Polish version of this policy, the Polish version applies.

Who is the data controller

The data controller is IMEX Katarzyna Piwek, ul. Meteorologów 9/18, 40-526 Katowice, Poland, VAT ID 6491010731, REGON statistical number 277286065.

For matters concerning personal data, write to smaczaki@smaczaki.pl or call +48 509 756 600.

The site and the traffic measurement are handled on our behalf by JT CONSULTING, Juliusz Tomeczek, ul. Panewnicka 327/8, 40-773 Katowice, Poland, VAT ID 6331823945. That company is a processor, which means it acts only within the scope we have entrusted to it and under our responsibility. The Google Analytics account through which the measurement runs belongs to that company, but we remain the data controller, and every matter set out below is addressed to us.

What data we collect

We collect data in three situations. The first is the enquiry form: company name, an optional tax identification number, first name and surname, e-mail address, an optional telephone number, the content of the enquiry, and a description of the brand if the enquiry concerns private label production. The second is a telephone call, in which we record only what you tell us yourself so that we can prepare an answer: the company name, the details of the contact person and the question. We do not record calls. The third is independent of what the enquiry says: when the form is used, we store the network address in the server memory in order to protect the form against abuse, and that record expires after ten minutes.

Giving your data in the form is voluntary, but without the required fields we cannot prepare an answer to your enquiry; the tax identification number and the telephone number may be left out.

Why we process this data

We process it in order to answer a trade enquiry and to carry on the correspondence in that matter, and we process the network address in order to protect the form against abuse.

We do not make automated decisions on the basis of this data and we do not profile.

We process visit statistics in order to know which pages and which products are viewed most often, and to order the catalogue accordingly. We do not combine them with data from the form and we do not establish who exactly visited the site.

On what basis we process data

For the form, the basis is the consent given when it is sent, together with the legitimate interest of carrying on trade correspondence and of protecting the form against abuse.

For visit statistics there are two bases and they depend on the tool. Umami operates on the basis of legitimate interest, namely learning about the traffic on our site, because it stores nothing on your device and does not recognise individuals. Google Analytics operates on the basis of consent alone, which we ask for on your first visit, and without it collects nothing.

How long we keep data

We keep trade correspondence for 24 months from the last contact in a given matter. If a transaction takes place, we keep the accounting documents for as long as tax law requires.

Analytics and cookies

On smaczaki.pl we count visits with two tools, and they differ in what they require from you.

The first is Umami, a counter that runs on our own server. It stores no cookies, does not recognise you between visits and builds no profiles, which is why it works regardless of how you answer the question about consent. It collects aggregate statistics: the number of page views, the address of the page viewed, the country, the type of device and the site you arrived from.

The second is Google Analytics, and it requires your consent, because it stores cookies on your device. Until you give consent, the Google script is not even downloaded. If you refuse, it collects nothing, and the question does not come back on the following pages.

There are two measurement cookies and they appear only after your consent. The first is called "_ga" and makes it possible to tell a returning browser from a new one. The second is called "_ga_LZNPRY07E6" and keeps a single visit continuous. Both expire thirteen months after your last visit. You can delete them in your browser settings, and withdrawing consent deletes them at once.

Apart from these, the site stores no cookies on your device. It does, however, remember two things. The first is your choice of the light or dark theme, so that the site looks the same on your next visit. The second is your answer to the question about consent, so that we do not ask for consent again on the following pages. Both stay in your browser and are sent nowhere.

Who we pass data to

Beyond ourselves, the data reaches three recipients. The first is the mail provider through which we carry on correspondence. The second is JT CONSULTING together with the provider of the server on which this site and the Umami counter run. The third is Google, and that recipient appears only if you consent to Google Analytics statistics.

Transfers of data outside the European Economic Area

If you consent to Google Analytics statistics, data about your visit reaches Google Ireland Limited, and that company may pass it on to Google LLC in the United States and to other countries in which Google operates. The transfer rests on standard contractual clauses approved by the European Commission and on Google's membership of the Data Privacy Framework, that is the agreed data protection framework between the European Union and the United States.

The use of Google Analytics rests in addition on the data processing terms accepted towards Google by the entity carrying out the measurement on our behalf. If you do not consent to Google Analytics statistics, no data about your visit leaves the European Economic Area for that purpose.

Your rights

You have the right to access your data, to rectify it, to erase it and to restrict its processing. You may also object to processing based on legitimate interest and ask for your data to be transferred. Consent, where it has been given, may be withdrawn at any time, which does not affect the lawfulness of processing before the withdrawal. You can change your consent to Google Analytics statistics with the "Privacy settings" button in the footer of every page, and the withdrawal takes effect at once and deletes the measurement cookies.

For matters concerning your data, write to smaczaki@smaczaki.pl or call +48 509 756 600. If you believe that we process data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), the supervisory authority in Poland.