Privacy policy

This Privacy Policy contains information concerning the processing of personal data of persons using or representing entities using the services provided by TASTYTASK sp. z o.o., visitors to the websites, in particular the website under the domain tastytask.com or the social profiles maintained, as well as contact persons.

 

I. Personal data administrator

The administrator of the personal data is TASTYTASK spółka z ograniczoną odpowiedzialnością with its registered office in Lublin (20 – 124), ul. Szkolna 15, registered in the register of entrepreneurs kept by the District Court Poznań – Nowe Miasto and Wilda in Poznań, 8th Economic Department of the National Court Register under the number 0000576971, holding NIP: 7773254367 (hereinafter referred to as ‘TastyTask’). TastyTask can be contacted in writing at the address indicated in the preceding sentence or by e-mail at: contact@tastytask.com.

 

II. General conditions for the processing of personal data

The processing of personal data by the Controller shall be carried out in accordance with the provisions of the law and, in particular, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter referred to as ‘RODO’).

The processing concerns persons and personal data depending on the purpose for which they are processed (the exact indication of the purposes of the processing is indicated in III. of the Privacy Policy). Data is provided on a voluntary basis and the consequence of failing to provide such data may be the impossibility of fulfilling a specific purpose, e.g. answering a question. If there is a requirement to provide personal data, the Administrator will inform you directly.

The Administrator attaches great importance to the protection of privacy and confidentiality of personal data and, with due care, selects and applies appropriate technical and organisational measures to ensure the protection of the processed personal data. Only persons duly authorised by the Administrator shall have full access to the databases. The Administrator shall protect personal data from being made available to unauthorised persons, as well as from being processed in violation of applicable laws.

 

III. Podstawowe zasady przetwarzania danych osobowych

Any processing of personal data shall be carried out for specific, explicit and legally defined purposes, and the Controller shall ensure that it does not collect and process personal data in contravention of the purposes indicated below.

1. The performance of activities related to the conclusion and execution of the contract takes place on the basis of Article 6(1)(b) of the RODO and, in particular, concerns:

• the provision of the service to the extent consistent with the contract concluded;
• contacting you to the extent related to the service provided;
• taking action prior to the conclusion of the contract, in particular the provision of an offer at the request of the data subject.

The processing period for this purpose refers to the duration of the contract.

2. The performance of the Newsletter delivery service under the terms of the Newsletter Terms and Conditions is based on Article 6(1)(b) RODO, and in the case of additional personal data, the basis will be the consent of the data subject (Article 6(1)(a) RODO). The period of data processing for this purpose refers to the duration of the contract and, in the case of data processed on the basis of consent, until the consent is withdrawn, but no longer than the duration of the contract.
3. The display of the Administrator’s websites is carried out on the basis of Article 6(1)(f) of the RODO in connection with the fulfilment of the Administrator’s legitimate interests of operating the website, ensuring security and correct use by users. The duration of the processing of personal data for this purpose is different and depends on the cookie or other similar technology (essential cookies – more in VII. Cookie Policy) that applies, and the exact duration for each cookie is specified in the cookie banner displayed on the Administrator’s website. Non-essential cookies are used on the basis of the user’s consent (Article 6(1)(a) RODO), which is given prior to their use. Consent can be revoked at any time. The administrator uses IP addresses collected during Internet connections only for technical purposes related to server administration. In addition, IP addresses are used to collect general, statistical demographic information (e.g. about the region from which the connection is made).
4. The establishment of a business relationship, including the provision of answers to the questions raised in connection with the contact of data subjects, shall take place on the basis of Article 6(1)(f) of the RODO in connection with the exercise of the legitimate interests of the Controller in answering the queries addressed. The personal data will be processed until an effective objection to the processing is made, but no longer than until the last day of the calendar year following the expiry of 3 years after the Administrator’s response.
5. To establish or carry out a relationship of cooperation with a contractor/customer whom, the data subject represents or on whose behalf he/she is contacting within the framework of a concluded contract, on the basis of Article 6(1)(f) RODO in relation to the fulfilment of the legitimate interests of the Controller consisting in the proper performance of the contract. The scope of personal data processed shall include the data indicated in the contract and the retention period shall be until an effective objection is made to the processing of the data, but no longer than until the duration of the contract or the end of the cooperation with the client/contractor.
6. The investigation or safeguarding of possible claims and the handling of complaints is carried out on the basis of Article 6(1)(f) of the RODO in connection with the implementation of the Administrator’s legitimate interests concerning the protection of the rights of the Administrator and the persons whose rights are affected, and the retention period refers to the limitation period of the relevant claim.
7. Marketing activities of the Administrator’s own or third-party services are carried out on the basis of Article 6(1)(f) of the RODO in connection with the exercise of the Administrator’s legitimate interests of looking after the Administrator’s interests and promoting services and seeking to establish cooperation. The duration of the processing of personal data, with regard to marketing activities, is until the moment of withdrawal of consent to receive communications or information under the provisions of the Act on the provision of electronic services or telecommunications law or until an effective objection to the processing is lodged, and in the event of failure to lodge such an objection, the data will not be processed after a maximum of 3 months from the last correspondence. In the case of certain marketing activities, personal data may be obtained from publicly available sources. In this case, the actions taken relate to the contact data that were obtained.
8. The fulfilment of tax and accounting obligations is carried out on the basis of Article 6(1)(c) of the RODO in connection with the applicable tax and accounting legislation. The retention period of the data processed for this purpose is equal to the duration of the legal obligation, where the period is determined by the applicable legislation.
9. Analytical and statistical activities take place on the basis of Article 6(1)(f) of the RODO, i.e. the legitimate interest of the Administrator, which refers to the analysis of activity, the optimisation of the Administrator’s websites, as well as the estimation of interests. The personal data will be processed until the end of the use of the specific service/functionality or until you express an effective objection to the processing of the data, except that no longer than until the last day of the calendar year following the expiry of 3 years from the date of acquisition of the data by the Administrator.
10. Maintaining social profiles and informing through them about the Administrator’s activities, promoting and advertising organised events, promoting the brand, products and services, building and maintaining the community associated with the Administrator, and for the purpose of communication through the available functionalities – is carried out on the basis of Article 6(1)(f) of the RODO in connection with the implementation of the Administrator’s legally justified interests consisting in taking care of the Administrator’s interests and promoting services through social media. The duration of the processing of personal data, in terms of social profiles, is until the use of the social profile that is linked to the Administrator’s profile or until an effective objection to the processing is made.
11. The carrying out of contests/promotional activities, in particular the selection of winners and the issuing of prizes, is carried out on the basis of Article 6(1)(f) of the RODO as the fulfilment of the Administrator’s legitimate interest, which is the fulfilment of the contest/promotional activity. Personal data will be processed until the end of the competition and the fulfilment of all related activities, and with regard to the winners of the competition, personal data will be processed for one month after the end of the competition.

 

IV. Rights of data subjects

The person whose personal data is processed by the Administrator, if the legally indicated conditions are met, has the right to:

1. access to the content of their data and to obtain a copy,
2. the right to rectification,
3. The right to request erasure,
4. restriction of processing,
5. data portability,
6. to object on grounds related to his/her particular situation to data processing based on the legitimate interest of the Administrator,
7. to object to processing based on the legitimate interest of the Administrator, for marketing purposes,
8. lodge a complaint to the supervisory authority if he/she considers that the processing of personal data by TastyTask violates the provisions of the applicable law (address: President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw).
9. to withdraw consent, if processing is based on consent (withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).

Exercise of rights may be exercised in any way, including by sending an appropriate request to the e-mail address: contact@tastytask.com. If the person making the request cannot be identified, the Administrator may request additional data.

 

V. Recipients of personal data

Personal data may be transferred to entities entitled to receive them under applicable laws, including relevant judicial authorities. Personal data may also be transferred to trusted recipients such as: carriers and postal service provider, accounting service provider, legal service providers, partners providing technical services (development and maintenance of IT systems and websites), entities providing software or IT systems, and debt collection companies.

The Administrator transfers personal data outside the European Economic Area (EEA) or to international organizations only in justified cases, when it is necessary for a specific purpose and with respect for an adequate degree of protection. Transfers outside the EEA are made on the basis of an adequacy decision taken by the European Commission or on the basis of standard contractual clauses in accordance with a decision of the European Commission, or on another legal basis for example: the express consent of the data subject. Exact information about the basis for the transfer in terms of individual providers is available from the Administrator, who can be contacted by email at: contact@tastytask.com.

 

VI. Other information on data processing

The Administrator may process personal data by automated means, including profiling, however, automated processing will not lead to a decision that produces legal effects or in a similar manner significantly affect the data subject. This processing may affect the selection of advertisements displayed, or the selection of products, services offered.

 

VII. Cookies

VII.I. General information

The Administrator uses cookies or similar technologies (hereinafter collectively referred to as “cookies”) by which is meant computer data, in particular text files, intended for the use of the Administrator’s websites and stored in the end devices of persons browsing the sites. Information collected using cookies allows customization of services and content to individual needs, as well as users’ preferences, and is also used to compile general statistics on users’ use of the sites. The data collected using cookies is collected solely for the purpose of performing certain functions for the benefit of clients and is encrypted in a way that prevents unauthorized access.

The administrator, as part of the use of cookies, may process data about the user’s device, his location, the activities performed on the website (e.g. the time of the visit) and other data depending on the cookie used (e.g. interest in a selected advertisement). Cookies, as a rule, are not personal data, but by combining them with other information, they can create personal data to some extent.

 

VII.II. Files used on tastytask.com website

1. The administrator uses cookies – because of the storage time – “session” and “permanent” cookies. Session cookies are temporary files that remain on the user’s device until the user logs out, leaves the website or shuts down the software (web browser). Permanent cookies are files that remain on the user’s device for the time specified in the parameters of the cookies or until they are manually deleted by the user.
2. The administrator – due to the purpose of their use – uses cookies:

• Necessary – Cookies and similar technologies that enable the site to function. This category cannot be disabled for the proper operation of the site.
• Statistical – Cookies that allow the website owner to monitor user traffic on the site and verify the choices made, including studying the number of visits. Statistical cookies allow us to build anonymous statistics to help develop and improve the site.
• Marketing – Cookies that are used in terms of the advertisements displayed and customization to the user’s preferences. Customization is done by analyzing the behavior of individual users on the website. The analysis can also be linked to behavior on other sites, depending on the cookie provider.
• Functional – Cookies that make it possible to remember choices made on the site, for example: the preferred language of the site, the arrangement of content and the region where the user is located.

3. The administrator uses cookies – due to the owner – own and third-party cookies. Own cookies are sent directly by the website, and third-party cookies are created by external entities and administered by these entities.

The third parties mentioned above are:

1. Google Inc. 1600 Amphitheatre Pkwy, Mountain View, CA 94043, United States, through: Google Ads (marketing cookies that guide and evaluate advertising campaigns); Google Analytics (statistical files that study user behavior). More information: https://support.google.com/analytics/topic/2919631?hl=pl&ref_topic=1008008; Google Tag Manager (marketing cookies that control advertising campaigns). More information: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy  reCAPTCHA (cookies necessary to ensure security, for example to protect against the mass addition of comments); YouTube, whose widgets are embedded on the website and which allow a specific video to be played, of which Google is informed, which allows the analysis, optimization and correct operation of YouTube with the widget, as well as personalization of advertising. If the user is logged into a Google account, information about the playback of a specific video on the website is linked to the logged-in account. For more information: https://policies.google.com/privacy and https://www.youtube.com/t/terms For more information about Google LLC: https://policies.google.com/privacy?hl.
2. Wistia, Inc., 120 Brookline Street, Cambridge, Massachusetts, 02139 USA, whose widgets are embedded on the website, and which allow the playback of videos uploaded by the Administrator. As part of the video playback, the IP address and viewing time are identified. The Administrator, through the tool, can combine the downloaded data with the data he already has. For more information: https://wistia.com/privacy.
3. HubSpot, Inc., Two Canal Park, Cambridge, MA 02141, United States, which provides tools to verify how users use the website, particularly with regard to the forms posted on the site. For more information: https://legal.hubspot.com/privacy-policy.
4. Microsoft Corporation, One Microsoft Way Redmond, WA 98052-6399, United States (marketing cookies), which provides Bing Ads technology to display specific ads that are based on analyzed user behavior, including from other websites. Cookies from this provider also analyze conversions in terms of the ads displayed (statistical cookies). For more information: https://privacy.microsoft.com/de-de/privacystatement.

 

VII.III. Cookie management

All cookies indicated, except for the essential ones, require the user’s consent before they are used. The user makes a choice against the cookies used (exceptions remain necessary), and until explicit consent is given – acceptance and selection through a button – cookies are blocked.  At any time, the user can change the cookie settings on the Administrator’s website, by withdrawing consent or objecting, to cookies that are not essential.

The cookie settings can also be changed directly in the web browser used. At the browser level, the user can manage cookies by setting each time a cookie is placed on the device or blocking it from being automatically stored. Depending on the browser, the configuration can be done according to the information below:

• Microsoft Edge https://privacy.microsoft.com/pl-pl/privacystatement 
• Chrome https://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl
• Opera https://www.opera.com/help/tutorials/security/cookie/ 
• Mozilla Firefox https://support.mozilla.org/pl/kb/blokowanie-ciasteczek 
• Safari https://support.apple.com/pl-pl/HT201265  

If you restrict cookies, some of the functionality, may not work properly.