The purpose of the following template is to assist you in writing your accessibility statement. Please note that you are responsible for ensuring that your site's statement meets the requirements of the local law in your area or region.
*Note: This page currently has several sections. Once you complete editing the Accessibility Statement below, you need to delete this section.
To learn more about this, check out our article “ Accessibility: Adding an Accessibility Statement to Your Site ”.
Privacy Policy
1. GENERAL PROVISIONS
This website privacy policy is for informational purposes only, meaning it does not impose any obligations on Users. The privacy policy defines the principles for processing personal data by the Administrator on the website, including the legal basis, purposes, and period of personal data storage, as well as the rights of data subjects. It also contains information regarding the use of cookies and analytical tools on the website.
The controller of personal data collected via the website is YELLOW APRICOTS Sp. z o. o. with its registered office in Warsaw (registered address and address for service: ul. Stefana Okrzei, No. 6, apt. 30, 03-720 Warsaw); entered into the Register of Entrepreneurs of the National Court Register under KRS number 0001120342; registry court where the company documentation is kept: District Court in Warsaw, 13th Commercial Division of the National Court Register; Tax Identification Number (NIP): 1133142188; National Business Registry Number (REGON): 52933471100000; e-mail address: ye.apricots@gmail.com; contact telephone number: (+48) 576 561 524 – hereinafter referred to as the "Controller" and being at the same time the Service Provider of the website.
Personal data collected on the website are processed by the Controller in accordance with applicable law, including in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, as well as Directive 95/46/EC (General Data Protection Regulation) – hereinafter referred to as the "GDPR" or the "GDPR Regulation." The full text of the GDPR is available at: http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=CELEX%3A32016R0679
Use of the website is voluntary. Providing personal data by the website user, including through subscription forms or contact inquiries, is voluntary. However, failure to provide the required data will prevent these activities from being completed. The website uses cookies for analytical purposes and to improve the quality of services provided. Details regarding the processing of personal data, including cookies, are included in this privacy policy.
The Administrator ensures the protection of personal data by ensuring that they are: (1) processed in accordance with the law; (2) collected for specific, lawful purposes; (3) correct and adequate for these purposes; (4) stored for the period necessary to achieve the purpose; (5) protected against unauthorized access, loss or destruction using appropriate security measures.
The Controller implements appropriate technical and organizational measures to ensure compliance with the Regulation and to protect personal data against unauthorized access and modification. These measures are regularly reviewed and updated.
2. BASICS OF DATA PROCESSING
2.1 The Controller has the right to process personal data when – and to the extent that – at least one of the following conditions is met: (1) the data subject has consented to their processing for a specific purpose or purposes; (2) processing is necessary to fulfil a legal obligation to which the Controller is subject; (3) processing is necessary to pursue the legitimate interests of the Controller or a third party, unless they override the interests of the data subject, including the protection of his or her fundamental rights and freedoms.
2.2. The processing of personal data by the Administrator requires the existence of at least one of the grounds indicated in point 2.1 of the privacy policy. The detailed grounds for processing the personal data of website Users by the Administrator are specified in the next point of the privacy policy – in relation to the specific purpose of personal data processing.
3. PURPOSE, BASIS AND PERIOD OF DATA PROCESSING ON THE WEBSITE
3.1. The purpose, basis, period and recipients of personal data processed by the Controller depend on the actions taken by a given user or by the Controller on the website.
3.2. The Administrator may process personal data on the website for the following purposes, on the basis and for the periods specified:
3.2.1. Contacting the company (e.g. to ask a question)
Purpose of data processing:
handling inquiries or reports.
Legal basis for data processing:
a contract or actions taken at the User’s request, aimed at concluding it (Article 6, paragraph 1, letter b of the GDPR) – when the inquiry concerns a contract to which we are a party,
our legitimate interest in processing data for the purpose of communication (Article 6, paragraph 1, letter f of the GDPR) – if the inquiry does not concern a contract.
Data storage period:
for the duration of the contract or until the expiry of the claims period if the contract is not concluded,
until the objection to data processing is taken into account.
If the required data is missing, the company will not be able to respond to the inquiry or process the application.
3.2.2. Browser Settings or Other Analytics
Purpose of data processing:
analysis of how the website is used in order to adapt it to the needs of users.
Legal basis for data processing:
our legitimate interest in processing data for analytical purposes (Article 6(1)(f) of the GDPR).
Data storage period:
until cookies used for analytical purposes expire or are deleted.
If you do not provide data, your preferences regarding the use of the website will not be taken into account in its further development.
3.2.3. Consent to receive marketing content
Purpose of data processing:
sending marketing information, including special offers.
Legal basis for data processing:
Your consent to our marketing activities (Article 6(1)(a) GDPR).
Data storage period:
until consent is withdrawn, with the possibility of processing data until its withdrawal.
If you do not provide your data, you will not be able to receive marketing materials, including information about special offers.
3.2.4. Newsletter subscription
Purpose of data processing:
sending a newsletter.
Legal basis for data processing:
contract for the provision of newsletter sending services (Article 6, paragraph 1, letter b of the GDPR).
Data storage period:
until you unsubscribe from the newsletter.
If you do not provide your data, you will not be able to receive information about the website and the services offered.
4. RECIPIENTS OF DATA IN THE ONLINE STORE
To ensure the proper functioning of the website and the execution of contracts, the Administrator uses the services of external providers. It only cooperates with entities that provide appropriate technical and organizational measures to protect personal data.
Personal data may be transferred by the Controller to a third country, but the Controller ensures that such transfer takes place only to countries that ensure an adequate level of data protection, in accordance with the requirements of the GDPR. In the case of other countries, data will be transferred based on standard data protection clauses. The Controller ensures that data subjects have the right to obtain a copy of their data. The Controller transfers personal data only when and to the extent necessary to achieve the data processing purpose, in accordance with this privacy policy.
Data is transferred by the Controller only when it is necessary to achieve the purpose of data processing and to the extent necessary to achieve it.
Personal data of website users and customers may be transferred to the following recipients or categories of recipients:
Survey system providers – if the customer consents to the evaluation of the concluded sales contract, the Administrator transfers the collected personal data of the customer to the selected survey system provider, enabling the evaluation of the contract on behalf of the Administrator, to the extent necessary to enable the customer to express an opinion.
Providers of technical, IT and organizational services supporting the Controller's activities, including website management and the provision of electronic services (e.g. website software providers, email and hosting providers, company management software providers, technical support providers, and SEO and SEM agencies) - the Controller transfers the user's personal data to a selected provider acting on its behalf only when it is necessary to achieve a specific purpose of data processing, in accordance with the provisions of this privacy policy.
5. RIGHTS OF THE DATA SUBJECT
5.1. Right of access, rectification, restriction, erasure, or portability – The User has the right to request from the Controller access to their personal data, rectification, erasure ("right to be forgotten"), or restriction of processing, as well as to object to processing, and to transfer their data. Detailed conditions for the exercise of these rights are specified in Articles 15-21 of the GDPR.
5.2. The right to withdraw consent at any time – a user whose data is processed by the Controller on the basis of expressed consent (Article 6 paragraph 1 letter a) or Article 9 paragraph 2 letter a) of the GDPR Regulation) has the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
5.3. Right to lodge a complaint with a supervisory authority – the user has the right to lodge a complaint with a supervisory authority in accordance with the provisions of the GDPR and national law, including the Personal Data Protection Act. The supervisory authority in Poland is the President of the Office for Personal Data Protection.
5.4. Right to object – the user has the right to object at any time – for reasons relating to their particular situation – to the processing of their personal data under Article 6(1)(e) (public interest) or (f) (legitimate interest of the Controller), including profiling based on these provisions. In such a case, the Controller may no longer process the data unless it demonstrates compelling legal grounds for processing that override the user's interests, rights and freedoms or serve the establishment, exercise or defense of legal claims.
5.5. Right to object to direct marketing – if personal data are processed for direct marketing purposes, the user has the right to object at any time to the processing of their data for the purposes of such marketing, including profiling, to the extent that the processing is related to direct marketing.
5.6. In order to exercise the above rights, the User may contact the Administrator by sending a written or e-mail message to the Administrator's address provided at the beginning of the privacy policy, or by using the contact form available on the website.
6. COOKIES NA STRONIE INTERNETOWEJ I ANALITYKA
6.1 Pliki Cookies (ciasteczka) to małe pliki tekstowe wysyłane przez serwer i zapisywane na urządzeniu użytkownika odwiedzającego stronę (np. na dysku twardym komputera, laptopa czy karcie pamięci smartfona – zależnie od używanego urządzenia). Szczegółowe informacje dotyczące plików Cookies oraz ich historii można znaleźć m.in. tutaj: https://pl.wikipedia.org/wiki/HTTP_cookie.
6.2 Pliki Cookies wykorzystywane na stronie internetowej mogą być podzielone według następujących kryteriów:
Ze względu na dostawcę:
-
własne (tworzone przez Administratora strony),
-
zewnętrzne (pochodzące od innych podmiotów).
Ze względu na czas przechowywania na urządzeniu użytkownika:
-
sesyjne (przechowywane do momentu wylogowania lub zamknięcia przeglądarki),
-
stałe (przechowywane przez określony czas, do ręcznego usunięcia).
Ze względu na cel ich stosowania:
-
niezbędne (umożliwiające prawidłowe działanie strony),
-
funkcjonalne/preferencyjne (dostosowujące stronę do preferencji użytkownika),
-
analityczne (zbierające dane o sposobie korzystania ze strony),
-
marketingowe (służące do wyświetlania spersonalizowanych reklam).
6.3. Administrator przetwarza dane zawarte w plikach Cookies w następujących celach:
-
identyfikacja użytkowników jako zalogowanych na stronie (pliki Cookies niezbędne),
-
zapamiętywanie produktów dodanych do koszyka w celu złożenia zamówienia (pliki Cookies niezbędne),
-
zapamiętywanie danych w formularzach zamówienia, ankietach lub danych logowania (pliki Cookies niezbędne lub funkcjonalne),
-
personalizacja zawartości strony zgodnie z preferencjami użytkownika (pliki Cookies funkcjonalne),
-
gromadzenie anonimowych statystyk dotyczących korzystania ze strony (pliki Cookies analityczne),
-
remarketing (dostarczanie dopasowanych reklam na podstawie działań użytkownika) (pliki Cookies marketingowe).
6.4. Sprawdzanie plików Cookies w popularnych przeglądarkach:
-
Chrome: Kliknij ikonę kłódki w pasku adresu i przejdź do zakładki „Pliki cookie”.
-
Firefox: Kliknij ikonę tarczy w pasku adresu, przejdź do zakładki „Dopuszczone” lub „Zablokowane”.
-
Internet Explorer: W menu „Narzędzia” przejdź do „Opcji internetowych” i „Ustawienia”, aby wyświetlić pliki.
-
Opera: Kliknij ikonę kłódki w pasku adresu i przejdź do zakładki „Pliki cookie”.
-
Safari: W menu „Preferencje” przejdź do zakładki „Prywatność” i kliknij „Zarządzaj danymi witryn”.
6.5. Większość przeglądarek internetowych automatycznie akceptuje pliki Cookies. Użytkownicy mają możliwość dostosowania ustawień dotyczących plików Cookies, w tym ich tymczasowego ograniczenia lub całkowitego wyłączenia. Należy jednak pamiętać, że wyłączenie Cookies może wpłynąć na działanie strony, np. na brak zapamiętywania produktów w koszyku.
6.6. Ustawienia dotyczące plików Cookies w przeglądarce są kluczowe, ponieważ wyrażenie zgody na ich używanie może być również dokonane przez odpowiednią konfigurację przeglądarki. Aby dowiedzieć się, jak zmienić te ustawienia lub usunąć pliki Cookies, warto zapoznać się z pomocą dostępną w przeglądarkach lub odwiedzić strony takie jak cookie-checker.com.
6.7. Administrator może korzystać z usług Google Analytics oraz Universal Analytics świadczonych przez Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Irlandia) w celu monitorowania i analizowania ruchu na stronie internetowej. Usługi te pozwalają na zbieranie danych, które są następnie przetwarzane w celu tworzenia statystyk, pomagających w zarządzaniu stroną i analizie jej odwiedzalności. Zbierane dane mają charakter ogólny i obejmują takie informacje, jak źródła i medium pozyskania odwiedzających, ich zachowanie na stronie, szczegóły dotyczące urządzeń i przeglądarek, z których korzystają, dane IP i domeny, informacje geograficzne oraz dane demograficzne, takie jak wiek, płeć i zainteresowania.
6.8. Osoba odwiedzająca stronę może łatwo zablokować udostępnianie swoich danych do Google Analytics, instalując specjalny dodatek do przeglądarki, który jest dostępny na stronie Google Ireland Ltd. pod tym linkiem: https://tools.google.com/dlpage/gaoptout?hl=pl.
6.9. Gromadzenie, pozyskiwanie, zakres i cel zbierania danych osobowych
Administrator informuje Użytkowników, że powierza przetwarzanie danych osobowych następującym podmiotom:
-
Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197 – w celu korzystania z systemu mailingowego edrone.me, służącego do przesyłania newslettera,
-
Edrone Sp. z o.o., ul. Lekarska 1, 31-203 Kraków, NIP: 676-248-20-64, KRS: 0000537197: – w celach marketingowych tylko i wyłącznie na potrzeby kampanii emali, sms, social media uruchomionej lub wskazanej przez Administratora za pomocą systemu edrone,
Administrator informuje, że stosuje następujące technologie śledzące działania podejmowane przez użytkownika/Klienta w ramach strony internetowej Sklepu:
-
kody śledzenia edrone – w celu analizy statystyk strony internetowej Sklepu, a także w celach marketingowych tylko i wyłącznie na potrzeby kampanii e-mali, sms, social media uruchomionej lub wskazanej przez Administratora za pomocą systemu edrone.
7. FINAL PROVISIONS
The website may contain links to other websites. The Administrator recommends that you review their privacy policies after visiting these websites. This privacy policy applies solely to the Administrator's website.
Accessibility adjustments on this site
We have adapted this site in accordance with WCAG [2.0 / 2.1 / 2.2 - select relevant option] guidelines, and have made the site accessible to the level of [A / AA / AAA - select relevant option] . This site's contents have been adapted to work with assistive technologies, such as screen readers and keyboard use. As part of this effort, we have also [remove irrelevant information] :
Used the Accessibility Wizard to find and fix potential accessibility issues
Set the language of the site
Set the content order of the site's pages
Defined clear heading structures on all of the site's pages
Added alternative text to images
Implemented color combinations that meet the required color contrast
Reduced the use of motion on the site
Ensured all videos, audio, and files on the site are accessible