PRIVACY POLICY

OF THE TUFTUF.PL ONLINE STORE

This privacy policy sets out the rules for the processing of personal data and cookies obtained by Global Pet's Food Sp. z o. o., with its registered office in Góreczki (Tax ID: 6211837525) via the online store operating at www.tuftuf.pl

CONCEPTS
Administrator – Global Pet's Food Sp. z o. o.
Personal data – all information about a natural person identified or identifiable by a specific factor determining identity, including the IP of the device, location data, information collected through so-called cookies.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
Store – an online store operated by the Administrator at www.tuftuf.pl.
User – any natural person visiting the Store.

PROCESSING OF PERSONAL DATA
The Personal Data Administrator is Global Pet's Food Sp. z o. o. with its registered office in Góreczki, identified by Tax ID 6211837525.
Personal data is processed for the purpose of fulfilling orders placed in the Store, handling any complaints, and providing electronic services in the scope of maintaining an account for the person using the Store, and, with additional consent, also for sending commercial information by electronic means.

RULES FOR DATA PROCESSING BY THE STORE
Lawfulness, fairness, transparency
Personal data obtained by the Store are processed lawfully, fairly, and in a transparent manner for the data subject.
Purpose limitation
Personal data obtained by the Store are collected for specific, explicit, and legitimate purposes, i.e., fulfilling orders placed in the Store, handling any complaints, and providing electronic services in the scope of maintaining an account for the person using the Store, and, with additional consent, also for sending commercial information by electronic means.
Data minimization
Personal data obtained by the Store are adequate, relevant, and limited to what is necessary – their scope does not exceed the content necessary for the purposes indicated in point 2.
Accuracy
The Store takes all measures to ensure that the collected data are accurate and, if necessary, updated.
Storage limitation
Data are stored for no longer than is necessary for the operation of the Store.
Integrity and confidentiality
Personal data obtained by the Store are processed in a manner ensuring appropriate security of personal data, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical or organizational measures.

USER RIGHTS UNDER PERSONAL DATA PROTECTION
Right to information about data processing
Upon request, the Administrator will provide information about the processing of personal data, the purposes and legal bases of such processing, the entities to whom personal data are disclosed, and the planned date of their deletion.
Right to obtain a copy of data
Upon request of the authorized person, the Administrator provides a copy of personal data relating to the requesting User.
Right to rectification
The Administrator removes any inconsistencies and errors regarding personal data processing and supplements or updates them if they have changed or are incomplete.
Right to erasure of data
The processing of data is deleted when it is no longer necessary for the purposes for which they were collected.
Right to restriction of processing
The Administrator ceases to perform operations on personal data, with the exception of operations consented to by the data subject.
Right to data portability
To the extent that data are processed in connection with a contract or with expressed consent.
Right to object to other purposes of data processing for marketing purposes
The User may object to the processing of personal data for marketing purposes at any time, without having to justify such objection.
Right to object to other purposes of data processing
The User may object to the processing of personal data concerning them at any time.
Right to withdraw consent
In the case of data processed on the basis of consent – the User may withdraw such consent at any time, which, however, does not affect the lawfulness of processing carried out before the withdrawal of this consent.
Right to lodge a complaint
If the User considers that the processing of personal data violates GDPR provisions, they have the right to lodge a complaint with the supervisory authority.

A request concerning the exercise of data subject rights can be submitted:
In writing
To the address: Góreczki 1, 63-720 Koźmin Wielkopolski
By email
To the address: kontakt@bult.dog
The request should specify the purpose of the request in detail and precisely, and also include the email address of the requester – the answer will be provided electronically. It will be provided immediately.

INFORMATION ACQUISITION FUNCTIONS
The functions of acquiring information about users and their behavior are implemented as follows:
Information voluntarily entered in forms,
Saving cookies (so-called "cookies") on end-user devices.

COOKIES
These are IT data, in particular text files, stored on the end-user device of the Store User and intended for using the Store's websites. Cookies usually contain the name of the website they come from, their storage time on the end-user device, and a unique number. The entity placing cookies on the end-user device of the Store User and accessing them is the Store operator.

Cookies are used for the following purposes:
Creating statistics that help understand how Users use websites, which allows for improving their structure and content;
Maintaining the User's session after logging in, so that they do not have to re-enter their login and password on each subpage of the Store;
Defining a user profile to display tailored advertising content in advertising networks, especially the Google network.

Within the Store's website, two main types of cookies are used:
Session cookies – these are temporary files that are stored on the User's end device until logging out, leaving the website, or turning off the software (web browser);
Persistent cookies – these are stored on the User's end device for a period specified in the cookie parameters or until they are deleted by the User.
Web browsing software (web browser) usually allows the storage of cookies on the User's end device by default. Store Users can change these settings. The web browser allows the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this subject is available in the help or documentation of the web browser. Restrictions on the use of cookies may affect some functionalities available on the Store's websites.

VOLUNTARINESS
The data provided by you in the form are obtained solely through their voluntary disclosure by you. For the operation of the Store, the service may also record information about connection parameters (e.g., time spent on the website).
Personal data of users visiting the Store are processed for the purpose of:
Based on Art. 6 sec. 1 lit. b GDPR (necessity of processing for contract performance):
Providing electronic services;
Handling purchases made without registration in the Store;
Fulfilling the placed order;
Handling complaints.
Based on Art. 6 sec. 1 lit. f GDPR (legitimate interest of the Administrator):
Analytical and statistical analyses – conducting analyses of User activity and their preferences to improve implemented functionalities and provided services;
Possible establishment and assertion of claims or defense against them.

PERIOD OF PERSONAL DATA PROCESSING
In the case of data processing based on a legitimate interest, data are processed for a period that enables its realization. If this processing is based on consent, the data are processed until it is withdrawn. This period may be extended if processing is necessary for the establishment, assertion, or defense against potential claims, and after this period – only if and to the extent required by law.

PERSONAL DATA SECURITY
The Administrator continuously conducts risk analysis to ensure that the data you provide are completely secure – only authorized persons have access to them, and only to the extent necessary. Particular emphasis is placed on the requirement that all operations on personal data are registered and performed only by authorized employees and associates.

CHANGES TO THE PRIVACY POLICY
The policy is continuously reviewed and, if justified, updated.

How to change cookie settings or delete them?
If you use web browsers such as Firefox, Google Chrome, Internet Explorer, Opera, or Safari, please find below links on how to manage cookies on your end device.
Firefox 
Google Chrome 
Internet Explorer 
Opera
Safari