Privacy policy

Privacy and Cookie Policy

This English translation is provided for convenience. In case of any discrepancy, the Polish version prevails.

This policy is in force from the date on which the shop at aglie.pl was launched.

We respect your privacy. Below we explain in plain language what data we collect, why, who we pass it to and what rights you have.

1. Who is the controller of your data

The controller of your personal data is Mateusz Przybysławski, carrying on business under the business name MATEUSZ PRZYBYSŁAWSKI MANUFAKTURA BURGERÓW PPHU "AGLIE", address: ul. Górnośląska 2/1, 62-800 Kalisz, NIP: 6182153562, REGON: 364854639, who runs the Aglie online shop at https://aglie.pl (hereinafter: "we").

For matters concerning personal data, write to us at: kontakt@aglie.pl or call: 513 140 174. We have not appointed a data protection officer.

2. What data we collect

Order data: first name and surname, email address, phone number, delivery address or the chosen Paczkomat (parcel locker), billing address and, when purchasing on behalf of a business, also the company name and NIP.
Payment data: information about the payment method and payment status. We do not see your full card details; they are processed by the payment provider.
Account data: email address, order history, saved addresses.
Correspondence: the content of the messages you send us (email, contact form, complaints, withdrawals from the contract).
Newsletter: email address and information about your consent.
Technical data: IP address, device and browser type, approximate location, pages visited, cart contents, information from cookies (see section 9).

Providing your data is voluntary, but without the order data we cannot conclude and perform the contract, and without an email address we will not send you the newsletter.

3. Why and on what legal basis we process data

Concluding and performing the sales contract (accepting the order, payment, shipping, contacting you about the order) and maintaining the Account: Art. 6(1)(b) GDPR.
Legal obligations (invoices and accounting, taxes, handling complaints and withdrawals from the contract): Art. 6(1)(c) GDPR.
Replying to messages and customer service, where they are not related to a contract: our legitimate interest, Art. 6(1)(f) GDPR.
Establishing, exercising or defending claims, as well as the security of the shop and fraud prevention: Art. 6(1)(f) GDPR.
Newsletter and other marketing messages by email: your consent, Art. 6(1)(a) GDPR, and the consent required by Article 398 of the Electronic Communications Law (Prawo komunikacji elektronicznej). You may withdraw your consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
Shop statistics and measuring the effectiveness of marketing activities (statistical and marketing cookies): your consent, Art. 6(1)(a) GDPR and Article 399 of the Electronic Communications Law.

We do not make decisions about you that produce legal effects based solely on automated processing. Shopify and the payment provider may automatically assess the risk of fraud and decline a payment that looks suspicious. In that case you can pay another way or write to us. It is we who decide whether an order that has been placed is cancelled.

4. Who we pass your data to

We pass data only to those entities that are needed to run the shop:

Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland), which provides the shop platform, hosting, checkout, the sending of email notifications and the newsletter sending tool (Shopify Messaging). Shopify processes data on our behalf (as a processor).
Payment providers: Shopify Payments (Shopify International Limited) and payment providers working with Shopify, in particular Stripe Payments Europe, Ltd. (Ireland). Shopify publishes the current list of providers for shops in Poland: shopify.com/legal/processor-list.
Carriers: InPost sp. z o.o. (InPost Paczkomat parcel lockers) and the courier company that delivers parcels sent by courier.
Providers of shop apps: Progus sp. z o.o. (Radomsko), the provider of the InPost by Progus app, through which we handle InPost shipments.
The entity that keeps our accounts, to the extent of the data contained in invoices and sales documents.
The provider of email services and hosting for the aglie.pl domain, through which we correspond with you.
Public authorities, where required by law.

If you pay with Shop Pay or use the Shop app, Shopify processes some of your data as a separate controller, in accordance with its privacy policy for consumers (www.shopify.com/legal/privacy/consumers).

Our shop runs on the Shopify platform, so Shopify processes your data when you visit the shop and make purchases. Shopify may also use this data together with data from other shops to provide so-called enhanced services, e.g. fraud protection and, with your consent, also advertising tailored to your activity in our shop, in other shops and on Shopify. Data may be transferred to Shopify and to other entities, including in other countries. The rules are described in Shopify's privacy policy for consumers (www.shopify.com/legal/privacy/consumers). In Shopify's privacy portal (privacy.shopify.com) you can withdraw your consent or object to the processing of your data by Shopify for this purpose.

5. Transfers of data outside the European Economic Area

Shopify and the payment providers may also process data outside the EEA, among others in Canada, in respect of which the European Commission has found an adequate level of data protection, and in other countries, including the USA, on the basis of European Commission decisions finding an adequate level of protection, binding corporate rules or standard contractual clauses approved by the European Commission. You can obtain a copy of the safeguards by writing to us.

6. How long we keep data

Order data: for the duration of the performance of the contract, and then until the limitation periods for claims expire.
Invoices and accounting documents: for the period required by tax law, as a rule 5 years from the end of the calendar year in which the deadline for paying the tax expired.
Account data: until the Account is deleted.
Newsletter: until you withdraw your consent, and the information about consent being given and withdrawn for as long as necessary to demonstrate that it existed.
Correspondence: until the matter has been dealt with, and then until the limitation period for any claims expires.
Cookies: for the period stated in section 9 or until you delete them in your browser.

7. Your rights

You have the right to: access your data, have it rectified or erased, restrict its processing, data portability, object to processing based on our legitimate interest (including, always, to direct marketing) and withdraw your consent at any time. To exercise these rights, write to us at the address given in section 1.

You also have the right to lodge a complaint with the UODO (President of the Personal Data Protection Office), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

8. Newsletter

By subscribing to the newsletter, you agree to receive information from us by email about new arrivals, promotions and discount codes. After you subscribe, we will send you an email with a link to confirm your address; we only send the newsletter once you have confirmed it. The newsletter consent at checkout is not ticked by default and is not a condition of placing an order. You can unsubscribe from the newsletter with one click on the link in the footer of every message.

9. Cookies

Cookies are small files saved on your device. We use essential cookies without consent, because the shop will not work without them (e.g. the cart and checkout). We save other cookies (statistical and marketing) only after you have given your consent in the cookie banner. You can change your choice at any time via the "Cookie preferences" link in the shop's footer or in your browser settings.

Type	Purpose	Examples	Consent
Essential	operation of the shop, cart, checkout and discount codes, choice of country and currency, security, remembering your choice in the banner	_shopify_essential, cart, localization, discount_code, shopify_pay (Shopify)	not required
Statistical	counting visits and sales, improving the shop	_shopify_analytics (Shopify)	required
Marketing	measuring the effectiveness of marketing activities	_shopify_marketing (Shopify)	required

Most Shopify cookies last up to 1 year, and the cart cookie up to 2 weeks. You can find the current list of Shopify cookies at shopify.com/legal/cookies.

10. Changes to this policy

We may update this policy, e.g. when we change our tools or when the law changes. The current version is always available on this page, with its effective date at the top.