Privacy Policy

I. General information

Respecting your privacy, we hereby make this Privacy Policy available so that each of you knows to what extent your personal data is processed, for what purposes it is collected, with whom it can be shared, how it is protected, and what rights you have in this regard.

We would like to inform you that we make every effort and it is our priority that the data that you provide to us are processed in accordance with applicable law, in particular with regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR).

This document and its contents refer to the website: https://www.cedc.com (hereinafter: the Website).

1. Who is the Data Controller?

   The Controller of your personal data is the company CEDC International sp. z o.o. with its registered office in Oborniki, Kowanowska 48 St., Oborniki, 64-600, entered into the register of enterprises with the National Court Register number KRS 0000051098, foundation documents stored at the District Court Poznań – Nowe Miasto and Wilda in Poznań, 9th Commercial Division of the National Court Register, NIP (Taxpayer Identification Number): 5260209395, REGON (Statistical Identification Number): 002160096, BDO (Product, Packaging, and Waste Management Database Number): 000010463 share capital: 1,199,367,000.00 PLN (hereinafter: the Controller).

   Contact with the Controller is possible via traditional mail, at the address indicated above, preferably with the annotation “personal data” or by e-mail to: firma@cedc.com.

   The Controller has appointed a Data Protection Officer who can be contacted in all matters related to the processing of personal data by e-mail at: iod@cedc.com.

2. What do we mean by “personal data”?

   The personal data referred to in this Privacy Policy is information about an identified or identifiable natural person to whom the data relate, i.e. a natural person who can be identified, directly or indirectly, in particular by reference to a given name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

3. What do we mean by “personal data”?

   In connection with the use of our website, we process your data in the form of:

   1. data that you provide by filling in the contact form;
   2. data that you provide by filling in the complaint form;
   3. data that you provide using email addresses and/or phone numbers provided on the Website;
   4. date of birth provided to confirm the age of majority;
   5. cookies

II. Scope, purposes, legal basis and period of personal data processing

1. Data in the contact form

   Personal data provided by you in the course of filling out the contact form available on the Website are processed in order to respond to your inquiry, based on the legitimate interest of the Controller. Personal data will be processed for the period necessary to answer the inquiry or until you object to the processing of your personal data.

2. Data in the complaint form

   Personal data provided by you in the course of filling out the complaint form available on the Website are processed in order to consider and respond to a complaint submitted in connection with the need to ensure proper warranty and quality of products and services provided by the Controller and to ensure the right to complain to persons who have purchased the Controller’s products, based on the legitimate interest of the Controller. Personal data may also be processed for the purpose of pursuing or defending against claims related to a reported complaint, based on the legitimate interest of the Controller. Personal data will be processed for a period of 1 year from the moment of filing a complaint or until the period governed by the statute of limitations for claims related to filing a complaint expires.

3. Data processed in connection with the use of email addresses, telephone numbers indicated on the Website

   Personal data provided by you in connection with the use of email addresses/phone numbers provided on the Website, e.g. in connection with the desire to undertake business cooperation, will be processed by the Controller in order to answer a question or to take measures to conclude cooperation, based on the legitimate interest of the Controller. Personal data will be processed for the period necessary to respond to the inquiry sent or for the period of implementation of the cooperation undertaken.

4. Date of birth to confirm the age of majority

   Due to the fact that the Website contains content about alcoholic beverages, we make sure that viewers are only adults. We ask you to confirm your age when you enter the Website. In this case, confirmation of the age of 18 by providing the date of birth is mandatory and this information is processed only to confirm that you are not a minor. The legal basis for the processing of personal data for this purpose is the fulfilment of legal obligations incumbent on the Controller, in particular in the field of preventing alcoholism. Personal data are processed only for the duration of the cookies that allow the collection of this information.

5. Cookies

   Cookies are used to provide services at the highest level, including in a way adapted to individual needs. Cookies are IT data, in particular text files, which are stored on the end device of the website user and are intended for the use of websites.

   Saving cookies on the user’s end device takes place when the user expressly consents to this. Consent does not apply to “essential cookies”, for which the consent of the user is not required because they are necessary for the proper functioning of the Website.

   You can express consent for other cookies by starting to use the Website without changing the settings for cookies and by clicking “Accept all cookies”. If you do not agree to the saving of any cookies other than necessary on the end device, the option “Allow only necessary cookies” should be chosen. If you want to change the settings, you should select “Cookie settings”. Using this option allows you to select and consent to selected cookies.

   The cookie notice is displayed only when you first enter the Website and is visible until you make the appropriate settings or accept cookies. Changing the settings made regarding cookies is possible by selecting the option “cookie settings” while using the Website.

   In addition, from the level of the web browser which you are using, it is possible to independently manage cookies including by blocking or removing them. Comprehensive information is available in the settings of your web browser. Limiting or disabling the use of cookies and other similar technologies may affect some of the functionality available on the Website.

   In addition to the Controller, entities cooperating with the Controller may also place cookies on the end device; these entities may be partners providing analytical services, advertisers, application developers, online advertising agencies (in this situation, cookies placed by such entities are called third-party cookies).

   Types of cookies

   With regard to the lifetime of cookies, the Website uses two main types of cookies:

   • session cookies – temporary files stored on your end device until you log out, leave the site or turn off the software (web browser);
   • persistent – files which are stored on your end device for a period of time specified
     in the parameters of cookies or until they are deleted by you.

   The storage time of cookies is indicated for each cookie in the “Cookie settings”.

   With regard to the purpose of cookies, the site uses the following types of cookies:

   NECESSARY COOKIES

   The Controller uses the necessary cookies that serve to facilitate the functioning of the Website, as well as to provide the Website user with services in connection with the use of the Website; these cannot be disabled. Your consent for the storage of these cookies is not required when you use the Website.

   The legal basis for data processing in connection with the use of necessary cookies is the necessity of processing for the performance of the contract (Article 6 (1)(b) of the GDPR), in connection with your use of the functionalities available on the Website.

   ANALYTICAL COOKIES

   The Controller uses analytical cookies to collect information about the number of visits
   and traffic sources on the Website, which allows us to determine how site users navigate
   through the Website by keeping relevant statistics.

   The legal basis for data processing in connection with the use of analytical cookies is the consent given by the user, which is granted at the time of acceptance of the storage of files in connection with the selection of the option “accept all cookies” or in the “cookie settings”. This consent may be withdrawn at any time by making changes to the “cookie settings” option available at all times when using the Website.

   As part of the use of analytical cookies, the Controller uses among others cookies from the Google Analytics tool provided by Google. The provider of this tool may process the data collected from cookies for its own purposes, which may entail the possibility of transferring personal data outside the European Economic Area. The purpose and scope of data collection and its further processing by the Google Analytics provider, as well as the possibility of contact and information about the rights of Website users in this regard, are available in the Terms and Conditions and Privacy Policy of the service provider mentioned above by clicking on the link: https://policies.google.com/privacy?hl=en-GB.

   MARKETING COOKIES

   The Controller uses advertising cookies to enable the presentation on the site of personalised content tailored to the preferences and interests of the user, as well as to personalise ads displayed on other pages, applications, and sites. In connection with the use of advertising cookies, a profile of the user’s interests is created, which allows for a more personalised presentation of the content (user profiling).

   The legal basis for data processing in connection with the use of advertising cookies is the consent given by the user, which is granted in the same way as described above for analytical cookies.

   As part of the use of advertising cookies, the Controller uses the Pixel Meta cookies from the tool provided by Meta. This is a tool that allows us to measure the effectiveness of ads displayed on social networks provided by Meta based on the analysis of user activity within the Website. Meta may combine the information collected with other information collected in connection with the use of the social network site Facebook and use it for purposes other than those specified by the Controller. The purpose and scope of data collection and further processing by the Meta Pixel provider, as well as the possibility of contact and information about the rights of Website users in this regard, are available in the Terms and Conditions and Privacy Policy of the service provider mentioned above by clicking on the link:
   https://www.facebook.com/privacy/policy/?entry_point=facebook_help_center_ig_data_policy_redirect.

   The recipients of personal data processed in connection with the use of cookies may be the following entities: entities providing services, including maintenance services and technical support for applications, computer programs, information systems and the Website, partners of the Controller, as well as marketing and advertising agencies, entities providing IT solutions used in the process of collecting and handling cookies, and, in justified cases, also entities supporting the Controller in the investigation of or defence against claims.

   Additional information on the rules of processing personal data of users in connection with the use of cookies, including in particular information about rights and contact options, can be found in Section V of this Privacy Policy.

III. Recipients of personal data

In order to ensure the proper functioning of the Website, your personal data may be transferred to third parties acting on behalf of the Controller, i.e. in particular, IT service providers, marketing services, entities related to the Controller, as well as entities authorised to receive them, including the competent state authorities. We would like to inform you that your personal data will not be shared by the Controller outside the European Economic Area or to an international organisation.

IV. Profiling, voluntary provision of personal data

The personal data processed by us will not be subject to automated decision-making. Personal data in the form of marketing cookies may be subject to profiling in order to present you with personalised marketing content in terms of behaviour on our Website. The provision of personal data is voluntary; only the provision of date of birth is mandatory.

V. Rights of data subjects

1. 1. Any person whose personal data are processed by the Controller within the framework of the use of the Website has the right:
   1. to access their personal data,
   2. to rectify their personal data,
   3. to request deletion of their personal data,
   4. to restrict the processing of their personal data,
   5. to data portability.
2. You have the right to object to the processing of your personal data at any time on grounds relating to your particular situation.
3. In order to exercise the above rights, please contact the Data Protection Officer as indicated in point I of this policy.
4. In the event that you believe that we are violating your rights or that there has been a breach of personal data security, you have the right to lodge a complaint with the authority supervising the processing of personal data, i.e. the president of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw

VI. Final provisions

1. The Controller reserves the right to change the Privacy Policy in the event of a change in business conditions or in order to adapt to changes in law.
2. Any questions regarding the Privacy Policy and the protection of personal data should be addressed to the email address: iod@cedc.com or sent by traditional mail to: CEDC International sp. z o.o., ul. Kowanowska 48, 64-600 Oborniki, with the annotation “personal data”.