Privacy policy

In accordance with Article 13 of the General Data Protection Regulation of 27 April 2016 (OJ EU L 119 of 04.05.2016), I hereby inform that:

1. The controller of the Customer’s personal data is eFresh Sp. z o.o. with its registered office in 60-813 Poznań, ul. Zwierzyniecka 3, registered under KRS number 0000320792, NIP: 779 234 85 08.

2. The Customer’s personal data will be processed by eFresh Sp. z o.o. in accordance with generally applicable provisions (including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC – hereinafter referred to as GDPR) – for the period of activities aimed at achieving the purposes for which they were collected.

3. eFresh Sp. z o.o. processes personal data of Customers for the purpose of:
a) performance of contracts for the provision of services by electronic means, sales contracts or other contracts concluded on the principles specified in these Regulations – in particular in connection with the registration of an Account or placing orders. The basis for processing in such a case is the performance of the contract with the Customer or taking action at the request of the Customer before concluding the contract (Article 6, paragraph 1, letter b of the GDPR).
b) performance of legal obligations incumbent on eFresh Sp. z o.o., in particular in the scope of maintaining proper accounting documentation (Article 6, paragraph 1, letter c of the GDPR).
c) promotion of own goods or services, as well as creation of summaries, analyses and statistics and pursuing claims. The basis for processing in such a case is the legitimate interest of eFresh Sp. z o.o. (Article 6, paragraph 1, letter f of the GDPR).

4. Within the limits indicated above, eFresh Sp. z o.o. may process data using profiling techniques that assume automated decision-making. The purpose of such profiling will be to best match the content provided to the Customer, including displayed advertisements, to the needs and interests of that Customer – based on available demographic and behavioral data. In the event that an automated decision produces legal effects for the Customer or significantly affects it in a similar manner, eFresh Sp. z o.o. will process data only with the Customer’s consent (Article 6, Section 1, Letter a of the GDPR).

5. In each case, the Customer’s disclosure of personal data is voluntary – provided that some data is necessary for eFresh Sp. z o.o. to perform the sales agreement concluded via the platform.

6. The Customer’s personal data may be made available to third parties only for the purpose when eFresh Sp. z o.o. is authorized or obliged to do so under the provisions of law. The recipients of the data may include in particular: persons operating the infrastructure or IT systems, subcontractors, persons providing services related to the execution or improvement of the sales process (e.g. payment intermediaries, banks, advertising agencies, couriers or carriers), as well as advisors (e.g. in the field of accounting or legal services) or auditors.

7. The Client has the right to access their personal data, rectify it, delete it or limit its processing and the right to object to the processing, as well as the right to transfer data. The Client has the right to object, especially in the event that there is no basis for processing the data or when the data is processed for the purposes of direct marketing.

8. If the processing is carried out in violation of the law, the Customer has the right to lodge a complaint with the supervisory authority.