PRIVACY POLICY AND COOKIES OF THE ONLINE STORE techbite

1. PERSONAL DATA ADMINISTRATOR​

The administrator of your personal data collected through the website www.techbite.eu (including through the use of cookies or similar technologies) or other communication channels is mPTech Sp. z o.o. based in Warsaw (00-511) at ul. Nowogrodzka 31, registered in the National Court Register maintained by the District Court for the capital city of Warsaw in Warsaw, XII Economic Division of the National Court Register under number 0000243245, NIP: 895-18-45-043, REGON 02016725600000, BDO 000010780, with a paid-up share capital of 13,712,500 PLN. You can contact us via email at: bok@techbite.eu, or by phone at 71 717 74 00.

2. FOR WHAT PURPOSE, ON WHAT BASIS AND FOR HOW LONG DO WE PROCESS YOUR DATA?

a. PLACING AN ORDER

a) Processing based on and for the purpose of concluding and fulfilling an order

If you place an order through our store, your personal data is processed, in particular name and surname, e-mail address, delivery address, correspondence address, telephone number, in order to enable the conclusion and subsequent implementation of the sales contract (pursuant to Article 6 section 1 letter b GDPR).

If you place an order as a representative of an organizational unit, we process your data for the same purpose, but on the basis of our legitimate interest in concluding and implementing a contract with the entity you represent (pursuant to Article 6(1)(f) of the GDPR).

The processing of your personal data for the purpose of fulfilling your order means that the data may be used in particular:

· In order to allow you to complete your order on our site, that is, to ensure that your data from the started order is not deleted,

In order to enable you to pay for the ordered products - for this purpose, we may also transfer your data to our Partners who administer payment systems, in accordance with the information contained in point. 3 "Who may be the recipient of your data",

So that we can contact you regarding your order, in particular send you its confirmation and other correspondence related to the order status, as well as answer any questions you may have regarding the order,

· To ensure the proper course of any potential complaint process for the products you purchased.

For this purpose, we use personal data for the time necessary to process and fulfill your order or handle your complaint.

b) Processing based on legitimate interest

If you place an order in our store, we will store your identification data (name and surname) and contact details (e-mail address, telephone number, address), details of your Customer Account (if you have one), as well as details of your orders based on our reasonable interest (Article 6(1)(f) of the GDPR) in order to defend against possible claims or the possibility of pursuing claims by us, as well as to keep our internal records and possible inspections. Our legitimate interests include the protection of our rights and defense against claims, as well as the need to ensure control of the correct execution of orders.

In order to defend our rights and pursue claims related to our business activities and to maintain our internal registers and for the purposes of possible control, we may process data for the limitation period for claims specified by law, in particular the Civil Code, extended by a period of one year after its expiry, taking into account the possibility of a claim against us at the end of the limitation period and the time needed for the relevant authorities to serve us with the lawsuit or other documents. If judicial, administrative or other proceedings are initiated, we will process your personal data to the extent necessary for the entire duration of such proceedings and until the end of the limitation period after the end of the proceedings.

We may also process your order history in order to present you advertisements and personalized discounts tailored to your interests - if at the same time you have previously consented to our processing of cookies for advertising purposes. Our legitimate interest is then the marketing of our products. We may process data about your order history for this purpose for a period of 400 days

c) Processing necessary to fulfill our legal obligations

We are also obliged to process your data under the law. The processing of your data necessary to fulfill our obligations takes place on the basis of Art. 6 section 1 letter c GDPR. Our obligations result in particular from the following provisions:

· Act of April 23, 1964, Civil Code,

· Act of May 30, 2014, on Consumer Rights,

· Act of March 11, 2004, on Goods and Services Tax,

·       Act of September 29, 1994, on Accounting.

For this purpose, we process your identification and contact details as well as order data for a maximum of 6 years.

b. CUSTOMER ACCOUNT

a) Processing on the basis and for the purpose of implementing the contract

If you create a Customer Account in our online store, we will process your personal data, i.e. your name, surname, e-mail address, as well as address data and data about your settings in the Customer Account and your orders (if you place them) pursuant to Art. 6 section 1 letter b GDPR (conclusion and implementation of the contract), in order to provide the service of running and maintaining your Customer Account.

We use the data associated with the Customer Account until your account is deactivated. Remember that you can always change its settings or delete them.

We may also process your name, surname, e-mail address, as well as data about your orders and products added to the wish list related to the Customer Account in order to provide you with the Newsletter service - if you wish to receive tailored offers and personalized proposals related to your e-mail address. with your order history and the products you have placed on your wish list.

In order to inform you about our offer and current promotions, we may process your personal data until you unsubscribe from receiving such messages from us. You can always disable this function by unsubscribing from the Newsletter by clicking the appropriate link in one of the messages you receive from us.

b) Processing based on legitimate interest

If you create a Customer Account in our store, we will save your name and surname and e-mail address based on our legitimate interest in order to defend against possible claims or the possibility of pursuing claims by us, as well as to keep our internal records and for the purposes of possible inspections. Our legitimate interests include the protection of our rights and defense against claims, as well as the need to ensure control of the correct execution of orders.

In order to defend our rights and pursue claims related to our business activities and to maintain our internal registers and for the purposes of possible control, we may process data for the limitation period for claims specified by law, in particular the Civil Code, extended by a period of one year after its expiry, taking into account the possibility of a claim against us at the end of the limitation period and the time needed for the relevant authorities to serve us with the lawsuit or other documents. If judicial, administrative or other proceedings are initiated, we will process your personal data to the extent necessary for the entire duration of such proceedings and until the end of the limitation period after the end of the proceedings.

c. VISITING OUR ONLINE STORE (COOKIES AND SIMILAR TECHNOLOGIES)

When you visit our website, we store and then access small files called cookies on your device. A cookie is a small set of letters and numbers that we store in your web browser or on your computer's hard drive. In addition, we use pixel tags, which are small images with a function similar to cookies. Unlike cookies that are stored on your computer's hard drive, pixel tags are a permanent part of a website. For simplicity, we will refer to all these technologies as cookies in this document.

Storing and obtaining information using cookies, except when necessary to ensure the proper operation of our store and the implementation of its basic functions (which is to provide you with a service provided electronically at your request), is possible only on the basis of your consent. You can provide appropriate consent primarily during your first visit to our store through the cookie banner, which allows you to select the scope of use of cookies and express appropriate consent.

Depending on the scope of use of cookie technology you consent to, cookies collect various types of information which, as a rule, does not constitute personal data - it does not allow your identification. Some information contained in cookies, depending on their content and method of use, may, however, be associated with a specific person, e.g. by combining them with the data provided when registering the Customer Account - and thus be considered personal data. This applies in particular to cookies, the use of which you consent to when using the store.

We can also supplement the information stored in cookies with the following data:

· The IP address of your device (the address of your device that you use to communicate with other devices on the Internet);

· The operating system of your device, its version, and language settings;

· The browser you are using on your device, its version, and language settings;

· The website address (URL) from which you are visiting our website.

To the extent that cookies and other above-mentioned the above-mentioned data may contain personal data, the basis for their processing is:

a) Processing based on legitimate interest

Some cookies are saved by our website directly on your device based on our legitimate interest (Article 6(1)(f) of the GDPR) as necessary to use our website to help us in particular:​

prevent attacks on our website and violations of its functionality and the security of your data, as well as identify you when you switch between subpages of our website and when you visit us again, for example so that we can remember the login and password for your customer account so as not to ask you this at all times - our legitimate interest is the smooth operation of our services for you and the security of your data;

·       to register, investigate, and eliminate failures and non-functional elements of our site – our legitimate interest is to improve our services for you.

The above cookies and similar technologies are necessary for the functioning of our website. If you disable your browser's consent to save and read cookies by websites, our website may not function properly and we may not be able to provide our services to you.

Detailed information about necessary cookies, their suppliers who are the recipients of the data contained therein, and the period of their processing:

b) Processing based on your consent

If you consent to this by clicking "I accept all cookies" on our cookie notification or by selecting the appropriate sliders when you first visit the website, or if you give appropriate consent in the privacy settings on your device based on your consent (Article 6(1) point (a) of the GDPR), we save and have access to cookies that - in accordance with the consent given:

·       If you consent to preference cookies (functional) – the cookies will allow us to remember information that changes the appearance or functionality of the site, such as the preferred language or region in which the user is located.

Detailed information about cookies regarding preferences, their suppliers who are the recipients of the data contained therein, and the period of their processing:

If you agree to statistics cookies - cookies will allow us to understand how different users behave on the website by creating statistics and reporting anonymous information, in particular by tracking traffic on our website, individual subpages and measuring the effectiveness of user acquisition;

Detailed information about statistical cookies, their suppliers who are the recipients of the data contained therein, and the period of their processing:

· If you consent to advertising cookies, these cookies will allow us and our partners (as indicated in the table below) to tailor the content displayed – on our website and beyond – to your needs and interests, present advertisements and promotions tailored to your interests, with the aim of these actions not being to produce legal effects or significantly influence your decisions. Thanks to these cookies, the advertisements and other content that will be displayed to you will be relevant and interesting to you.

Detailed information about advertising statistics cookies, their suppliers who are recipients of the data contained therein, and the period of their processing:

Remember that you can change all cookie settings from your web browser. When using browser settings, the method of blocking and deleting cookies varies depending on the web browser used. Information on how to delete cookies should be available in the "Help" tab of the selected web browser. For example, in the Google Chrome browser, cookies can be managed through the Website Data settings on the device in the Privacy and security tab. In Firefox, select the Tools tab, then Options and Privacy. In Microsoft Edge, select Settings and then Cookies & Site Permissions.

d. COMPLAINT FORM

a) Processing necessary to fulfill the legal obligation imposed on the Administrator

The personal data provided by you in the Complaint Form in connection with submitting a complaint and collected in any further communication may be processed by us for the purpose of considering your complaint, keeping accounting records and settling settlements for resolved complaints. The basis for processing is Art. 6 section 1 letter c GDPR, i.e. necessary to fulfill the legal obligation imposed on the Administrator.

b) Legitimate interest

Your data provided in the complaint procedure may also be processed for the purpose of determining and defending against possible claims or the possibility of pursuing claims by us, as well as for the purpose of maintaining our internal records and possible inspections - based on our legitimate interests (Article 6(1) 1 letter f of the GDPR), which is the defense against claims and ensuring the possibility of pursuing them.

In order to defend our rights and pursue claims related to our business activities and to maintain our internal registers and for possible audit purposes, we may process data for the period required by tax law (maximum 6 years), including the limitation period for claims specified in civil law provisions, extended by a period of one year after its expiration, taking into account the possibility of a claim against us at the end of the limitation period and the time needed for the relevant authorities to serve us with a lawsuit or other documents. If judicial, administrative or other proceedings are initiated, we will process your personal data to the extent necessary for the entire duration of such proceedings and until the end of the limitation period after the end of the proceedings.

e. NEWSLETTER

a) Processing on the basis and for the purpose of implementing the contract

Your e-mail address provided in connection with subscribing to the Newsletter by completing the Newsletter subscription form located at the bottom of our website or by clicking the check-box with subscription to the Newsletter in the ordering process will be processed for the purpose of implementing the contract for the provision of the Newsletter service, i.e. . based on Article. 6 section 1 letter b GDPR - to send you electronic messages regarding our products and promotions.

In order to inform you about our offer and current promotions, we may process your personal data until you unsubscribe from receiving such messages from us. You can always disable this function by unsubscribing from the Newsletter by clicking the appropriate link in one of the messages you receive from us.

b) Legitimate interest

If you subscribe to our Newsletter, we will save your e-mail address based on our legitimate interest in order to defend against possible claims or the possibility of pursuing claims by us, as well as to keep our internal records and for the purposes of possible inspections (Article 6 section 1 letter f of the GDPR). Our legitimate interests include the protection of our rights and defense against claims, as well as the need to ensure control of the correct execution of orders.

In order to defend our rights and pursue claims related to our business activities and to maintain our internal registers and for the purposes of possible control, we may process data for the limitation period for claims specified by law, in particular the Civil Code, extended by a period of one year after its expiry, taking into account the possibility of a claim against us at the end of the limitation period and the time needed for the relevant authorities to serve us with the lawsuit or other documents. If judicial, administrative or other proceedings are initiated, we will process your personal data to the extent necessary for the entire duration of such proceedings and until the end of the limitation period after the end of the proceedings.

f. OUR SOCIAL MEDIA PROFILES

Your personal data that you leave when visiting our social media profiles, such as comments, likes, online identifiers, may be processed on the basis of the legitimate interest of the administrator (Article 6(1)(f) of the GDPR), which is to enable you to be active on our profile, as well as effectively maintaining our profile by presenting you with information about our products and services. Our legitimate interest, for which we may also process your data left on our social media profiles, is also to defend our rights and protect against claims arising from our business activities.

This data may be processed for the period necessary to implement the above-mentioned. purposes or until you effectively raise an objection, as well as for the time resulting from their storage in the event of possible claims, for the limitation period specified by law, in particular the Civil Code.

g. VIRTUAL ADVISOR

Your personal data that you provide while engaging in a text conversation with us in the form of a chat (e.g., using the virtual advisor available on our Service) is or may be processed for the following purposes:

a) handling inquiries via chat – legal basis: art. 6 sec. 1 lit. f. GDPR, i.e., a legitimate interest pursued by the Administrator;

b) depending on the content of the communication, taking action at your request before entering into the relevant agreement – legal basis: Article 6(1)(b) of the GDPR, i.e., necessity to take action before entering into the agreement;

c) depending on the content of your messages, marketing, analytical, and statistical activities of the Administrator or other so-called third parties with whom we cooperate – legal basis: Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Administrator or a third party;

Our virtual advisor collects various information that does not essentially constitute Personal Data (it does not allow for your identification). However, in some cases, due to the information you provide while using this functionality, your identification may indeed be possible. The owner of this functionality and the administrator of your Personal Data in connection with its use is the Administrator and KODA Sp. z o.o. based in Wrocław, ul. Gen. Sikorskiego 26, 53-659 Wrocław (KRS: 0000549232, NIP: 7252084336 REGON: 36095119100000).

Your data will generally be processed until the communication with you is concluded, and in the case of marketing activities – until you raise an objection, unless the law requires us to process this data for a longer period or we need to retain it longer in case of potential claims, for the duration of the limitation period specified by law, particularly the civil code. In any case, the longer retention period for Personal Data will prevail.

3. WHO MAY BE THE RECIPIENT OF YOUR DATA?

When processing your personal data as an administrator, we also use the services of processors who process personal data only in accordance with our instructions and for the purposes described in point. 2 above. Such processors include:

a) cloud service providers and other IT and technical service providers such as: Microsoft Ireland Operations Limited based in Dublin, Ireland (reg. no. 256796), Google Ireland Limited based in Dublin, Ireland (reg. no.: 368047) and Meta Platforms Technologies Ireland Limited based in Dublin, Ireland (reg. no.: 550858), KODA sp. z o.o. based in Wrocław (REGON: 360951191), Manychat, Inc., 8605 Santa Monica Blvd, #64372 West Hollywood, CA 90069.

We may also transfer your personal data to other entities that act as administrators, i.e.:

a) partners operating payment systems in order to make payments, especially in connection with card payments, in particular PayU S.A. based in Poznań (KRS 0000274399) – PayU's privacy policy is available here:  https://poland.payu.com/nota-o-prywatnosci-payu/;

b) to courier and postal companies, according to the delivery method you have chosen for the goods ordered in our Store, in particular InPost Sp. z o.o. based in Krakow (KRS 0000543759), the InPost privacy policy is available here: https://inpost.pl/polityka-prywatnosci; DPD Polska Sp. z o.o. based in Warsaw (KRS 0000028368), the DPD privacy policy is available here: https://www.dpd.com/pl/pl/o-dpd/ochrona-danych-osobowych/DHL eCommerce (Poland) sp. z o.o. based in Warsaw (KRS: 0000631916), the DHL privacy policy is available here: https://www.dhl.com/pl-pl/ecommerce/o-dhl-ecommerce/polityka-prywatnosci.html;

c) public authorities entitled to receive personal data on the basis of legal provisions, about public authorities entitled to receive personal data on the basis of legal provisions.

The recipients of your data may also be service providers in the field of research, analysis and statistics, entities organizing marketing campaigns, operators of marketing tools, processing your data contained in cookies and similar technologies, who help us optimize the website and personalize content and offers for you (if you express your consent). consent to this) - in accordance with the description contained in point 2 letter c above. Under the same principles, other entities from the TelForceOne Capital Group may also be recipients of your data. The TelForceOne Capital Group includes: TelForceOne S.A. based in Wrocław, mPTech Sp. z o. o. based in Warsaw, Telcon sp. z o.o. based in Łódź, Teletorium sp. z o.o. based in Wrocław, R2 Invest sp. z o.o. based in Wrocław, Telforceone Forcelight sp. z o.o. based in Wrocław, TFO Distribution sp. z o.o. based in Warsaw, FF sp. z o.o. based in Wrocław, Moby.pl Sp. z o. o. based in Wrocław, CPA Czechy Sro based in Pardubice (Czech Republic), CPA Slovakia based in Bratislava (Slovakia).

In addition, the recipients of your data may be service providers who provide us with technical and organizational solutions as well as providers of legal and advisory services and support us in pursuing due claims and defending our rights (in particular law and tax firms and debt collection companies).

We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the  Oświadczeniu o ochronie prywatności firmy Microsoft.

4. CAN YOUR DATA BE TRANSFERRED OUTSIDE THE EUROPEAN ECONOMIC AREA?

As part of our use of tools supporting our ongoing operations, provided, for example, by Google, your personal data may be transferred to countries outside the European Economic Area in which entities cooperating with us maintain tools for processing personal data. Data may be transferred outside the European Economic Area based on appropriate legal safeguards, which are standard contractual clauses approved by the European Commission.

5. VOLUNTARY PROVIDING OF PERSONAL DATA

We do not oblige you to provide us with your personal data. You donate it voluntarily. Remember, however, that this is necessary so that we can process your order, maintain your Customer Account, respond to your complaint, and - if you wish - to send our Newsletter or enable you to leave a comment or like on our social media profiles.

In turn, in the case of cookies whose purpose is to facilitate or improve the use of our store, limiting their use in a given device may affect the functioning of the store - for example, it may involve the inability to maintain a login session, and in some cases it may also significantly impede the use of store.

6. PROFILING AND AUTOMATION

We may process data from cookies to which you have given your consent in an automated manner, including in the form of profiling. Similarly, the advertisements and discounts presented to you may be adapted to your purchase history in our store. This means that the information we show you on our website and in the advertisements displayed may be related to how you use our website and your order history. Thanks to this, we will be able to better tailor the content of our services provided electronically to your preferences, needs and interests, but binding decisions will not be automated. It will also not produce any legal effects for you or similarly significantly affect your situation.

Other data provided by you as part of the order processing will not be processed in an automated manner, including profiling.

Moreover, if you use a Customer Account and subscribe to our Newsletter, data about your previous orders and goods added to the wish list may be processed in the form of profiling in order to adjust the content sent to you as part of the Newsletter to your preferences, needs and interests.

7. WHAT ARE YOUR RIGHTS?

At any time, you have the right to withdraw consent to the processing of personal data (if the processing is based on the expressed consent), access to personal data and request their rectification, deletion, limitation of processing, transfer of data to another administrator, and not to be subject to a decision based solely on automated processing, including profiling, objecting to their processing based on the justified interest of the data controller (Article 6(1)(f) of the GDPR) or for statistical purposes (Article 89(1) of the GDPR) for reasons related to your particular situation , as well as against processing for direct marketing purposes.

In case of any matters related to the processing of personal data, you can contact us by writing to sklep@mptech.eu. We will consider your request without undue delay and within a maximum of 30 days. In exceptional circumstances, especially due to the complexity of your application, we have the right to extend this period by a further two months, of which we will inform you.

You also have the right to lodge a complaint with the supervisory authority responsible for the protection of personal data - the President of the Office for Personal Data Protection - if you believe that the processing of data by the Administrator is contrary to the GDPR. A complaint regarding our processing of personal data may be submitted to the President of the Office for Personal Data Protection, based in Warsaw at ul. Stawki 2, 00-193 Warsaw.