1. INTRODUCTORY PROVISIONS

1.1. This privacy policy defines the principles of processing and methods of protecting data, including personal data of individuals using the website available at: https://yummyreview.io (hereinafter referred to as the “Website”).

1.2. The Website is operated by Yummy Concepts S.A., a joint-stock company based in Krakow (30-392) at ul. Piltza 19/LU1, registered in the National Court Register kept by the District Court for Krakow-Śródmieście in Krakow, XI Economic Division of the National Court Register under number: 0000706584, with NIP: 6762535760, REGON: 368200432, email address: support@yummyreview.io (hereinafter referred to as the “Administrator”).

1.3. In the course of the Website’s operation, data of Website users (hereinafter referred to as “Users”), including personal data, may be collected, processed, and used.

1.4. User data may be collected through voluntary disclosure by Users (e.g., when placing an order) and through the use of cookies. Additionally, information about the User’s IP address, the time of query arrival and response sending, the address of the website from which the User was redirected to the Website, and the type of software used by the User may be collected. This information is used for Website administration purposes, as well as for creating statistics and analyses.

2. PERSONAL DATA

2.1. The administrator of personal data is Yummy Concepts S.A., based in Krakow (30-392) at ul. Piltza 19/LU1, registered in the National Court Register kept by the District Court for Krakow-Śródmieście in Krakow, XI Economic Division of the National Court Register under number: 0000706584, with NIP: 6762535760, REGON: 368200432, email address: support@yummyreview.io.

2.2. The processing of personal data within the operation of the Website includes personal data in the form of User’s name, company address, phone number, and email address.

3. PURPOSE AND DURATION OF DATA PROCESSING

3.1. The Administrator may collect and process personal data through the Website for purposes such as:

3.1.1. proper execution of an order placed by the User, constituting the performance of a contract concluded with the Administrator by the User (Art. 6(1)(b) GDPR);

3.1.2. conducting statistics and analysis of User behavior on the Website, constituting the legitimate interest of the Administrator (Art. 6(1)(f) GDPR);

3.1.3. Administrator’s own marketing, constituting the legitimate interest of the Administrator (Art. 6(1)(f) GDPR).

3.2. Personal data processed for:

3.2.1. the execution of contracts specified in the Regulations will be stored for the time necessary to assert its own claims or defend against claims made against the Administrator in connection with the executed contract;

3.2.2. conducting statistics and analysis of User behavior on the Website will be stored by the Administrator for a period of 3 years from the collection of this data;

3.2.3. conducting marketing by the Administrator will be processed until the person whose data it concerns objects or withdraws consent to receive commercial information.

4. DATA TRANSFER

4.1. The Administrator may share User data with its subcontractors (entities providing services it uses for processing), such as providers of IT services and solutions, and other Users to the extent necessary to fulfill contracts specified in the Regulations.

4.2. The Administrator may use IT service providers based in the USA, therefore outside the European Economic Area. Consequently, User data may be transferred there. The Administrator uses entities that process personal data based on the Standard Contractual Clauses adopted by the European Commission, as referred to in Art. 46 GDPR, concluded between the Administrator and that entity.

5. USER RIGHTS

5.1. The User, whose data is concerned, has the following rights:

5.1.1. the right to access the provided personal data and the right to receive a copy of it;

5.1.2. the right to rectify personal data;

5.1.3. the right to erase personal data;

5.1.4. the right to request the restriction of personal data processing;

5.1.5. the right to data portability;

5.1.6. the right to object to the processing of provided personal data;

5.1.7. the right to lodge a complaint with a supervisory authority.

5.2. In order to exercise any of the rights mentioned above, the person whose data is concerned should contact the Administrator.

5.3. Providing personal data is voluntary, but without it, it will not be possible to contact the Administrator.

5.4. The Administrator ensures the protection of processed personal data. In particular, the Administrator applies appropriate technical and organizational security measures to protect processed personal data, appropriate to the threats and categories of data covered by protection. In particular, it secures data against unauthorized access, taking by an unauthorized person, processing in violation of the law, and change, loss, damage, or destruction.

6. COOKIES

6.1. Within the operation of the Website, cookies are used and stored on Users’ end devices. By using cookies, it should be understood that they are stored and accessed by the Administrator.

6.2. Cookies are computer data, in particular text files, which are stored on the User’s end device and are intended for using websites. Cookies typically contain the name of the originating website, the time they are stored on the end device, the content (e.g., action identifiers), and a unique number.

6.3. Due to the time for which cookies are installed on the User’s end device, cookies used within the Website are divided into two main types:

6.3.1. session cookies – are temporary files that are stored on the User’s end device until the session expires (e.g., leaving the Website, deleting them by the User, or turning off the software);

6.3.2. persistent cookies – are stored on the User’s end device for a period specified in the parameters of the cookies or until they are deleted by the User.

6.4. Depending on the purpose for which they are used, cookies are divided into:

6.4.1. essential – enable the use of basic functions of the Website, such as user login and account management. Without essential cookies, proper use of the Website is not possible; essential cookies do not store any data allowing the identification of a person;

6.4.2. functional – help perform certain functions, such as sharing website content on social media platforms, collecting feedback, and other third-party website functions;

6.4.3. analytical – serve to understand how Users interact with the Website. These cookies help provide information about metrics such as the number of visitors, bounce rate, traffic source, etc.;

6.4.4. advertising – serve to deliver personalized ads to Users based on pages they have visited before and to analyze the effectiveness of an advertising campaign;

6.4.5. uncategorized – cookies that are still being analyzed and have not yet been classified into any category.

6.5. The Administrator, within the Website, uses the following cookies, including so-called third-party cookies:

ESSENTIAL COOKIES

FUNCTIONAL COOKIES

ANALYTICAL COOKIES

ADVERTISING COOKIES

UNCATEGORIZED COOKIES

6.6. Default settings of internet browsers usually allow the storage of essential cookies on users’ end devices when visiting websites. However, users can change these settings.

6.7. Personal data will be processed in connection with the use of performance and analytical cookies only after obtaining the user’s consent while using the Website to apply the aforementioned cookies. Consent to their use can be withdrawn at any time by selecting the appropriate option in the cookie settings available on the Website.

6.8. Regardless of the above, the user has the ability to specify the conditions for the use of cookies through the settings of the software (internet browser) installed on their end device. The change may involve partially or completely restricting the ability to store cookies on the user’s end device, which may simultaneously result in improper display of the Website’s content.

6.9. The use of cookies does not result in configuration changes to the user’s end device and the software installed on it.

6.10. Detailed information on changing browser settings regarding cookies and their removal can be obtained on the official website of a specific browser. In particular, the above information can be found at the following website addresses:

6.10.1. Firefox browser;

6.10.2. Chrome browser;

6.10.3. Microsoft Edge browser;

6.10.4. Opera browser;

6.10.5. Safari browser.