Privacy Policy

Definitions

1. Personal Data Controller / Website Administrator – MEEST POST sp. z o.o. with its registered office in Warsaw, ul. Obrzeżna 7, 02-691 Warszawa, entered in the National Court Register by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0001027880, NIP (tax ID): 5252949574, REGON: 524857982, share capital: PLN 10,000.00.
2. Personal data – any information relating to an identified or identifiable natural person.
3. Website / Service – the website located at the internet domain pl.meest.com.
4. User – a natural person with full legal capacity, a natural person conducting business activity, a legal person or an organisational unit without legal personality that uses the Services provided on the Website;
5. Services – services provided electronically by the Website Administrator to Website Users within the meaning of the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended);
6. Act on the provision of electronic services – the Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended);
7. Carrier – an entity professionally engaged in the carriage and delivery of goods, providing services in its own name and on its own behalf in accordance with the Carrier’s terms of service that it applies;

General information

This document sets out the rules of the Privacy Policy of the website www.pl.meest.com. The Website Administrator is MEEST POST sp. z o.o. with its registered office in Warsaw, ul. Obrzeżna 7, 02-691 Warszawa, entered in the National Court Register by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register, under KRS number 0001027880, NIP (tax ID): 5252949574, REGON: 524857982, share capital: PLN 10,000.00. The Website Administrator is also the Personal Data Controller.

Personal data collected by the Website Administrator is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, p. 1), hereinafter: GDPR.

The Personal Data Controller takes particular care to protect the privacy of, and the information provided to it about, users of the Website. With due diligence, the Controller selects and applies appropriate technical measures, including software and organisational measures, to protect the data processed, and in particular protects the data against disclosure to unauthorised persons, release, loss and destruction, unauthorised modification, as well as against processing in breach of applicable law.

The services available on the website are not addressed to children under 16 years of age. The Personal Data Controller does not intend to collect data concerning children under 16 years of age.

Personal data

Purposes and legal grounds for processing personal data

The Personal Data Controller processes your personal data for the following purposes and to the following extent:

• to provide the services available on the Website, i.e. browsing the Website pages, the content search engine, the form for estimating the cost of carriage and delivery of a shipment and the shipment order form, we process the information and data you voluntarily enter in the Website forms and personal data relating to your activity on the Website, i.e. data on the content or services you view, data on your device session, operating system, browser, location and unique ID, and your IP address;
• to compile statistics on the use of individual features of the Website and data provided in the enquiry form, to make the Website easier to use and to ensure the IT security of the Website, we process personal data relating to your activity on the Website and the amount of time spent on each of its subpages, your search history, location, IP address, device ID, and data on your web browser and operating system. Providing certain data is a condition for using particular Services and features (mandatory data). Our system marks mandatory data automatically. If this data is not provided, we will be unable to provide certain Services and features. Apart from the data marked as mandatory, providing other personal data is voluntary;
• to establish, pursue and enforce claims and to defend against claims in court proceedings and before other enforcement authorities, we may process the personal data you provided when ordering services and other data necessary to prove the existence of a claim or required by law, a court order or another legal procedure;
• to handle complaints, grievances and requests and to answer Users’ questions, we process the personal data you provide in complaints, grievances and requests, or in order to answer questions submitted in another form, and certain personal data provided by you, as well as data on the Services we provided that gave rise to the complaint, grievance or request, and data contained in documents attached to complaints, grievances and requests;
• to send by electronic means a promotional newsletter about news, promotions and offers of the Website, other Meest websites and business partners of the Website Administrator, we use the personal data you provided when giving your consent to receive the newsletter on the Website;
• to market our Services and the services of our partners, including remarketing, we process data on your activity on the Website, including activity recorded and stored by means of cookies, in particular your activity history, services ordered, search history, clicks on the Website, and your history and activity related to our communication with you. For remarketing, we use data about your activity to reach you with our marketing messages outside the Website, and we use the services of external providers for this purpose. These services consist of displaying our messages on websites other than the Website. You will find details in the provisions on Cookies;
• to organise competitions and loyalty programmes, i.e. notifications of points collected, notifications of prizes won and advertising of our offer, we use the personal data you provided when registering for the competition or loyalty programme. Detailed information is provided each time in the terms of participation of the given competition or loyalty programme;
• for market and opinion research carried out by us or our partners, i.e. information about services, your data provided while using the services, and your e-mail address. Data collected as part of market and opinion research is not used by us for advertising purposes. Detailed guidance is provided in the information about the given survey or in the place where you enter your data.

Categories of personal data concerned

The Personal Data Controller processes the following categories of personal data:

• contact details;
• data on activity on the Website;
• data on orders placed on the Website;
• data on complaints, grievances and requests;
• data on marketing services.

Voluntary provision of personal data

Providing the required personal data is voluntary and is a condition for the provision of services by the Personal Data Controller through the Website.

Data processing period

Personal data will be processed for the period necessary to fulfil orders, services, marketing activities and other services performed for the User. Personal data will be deleted in the following cases:

• when the data subject requests its deletion or withdraws the consent given;
• when the data subject has not taken any action for more than 10 years (inactive contact);
• upon receiving information that the stored data is out of date or inaccurate.

Certain data, namely the e-mail address and first and last name, may be stored for a further 3 years for evidential purposes and for handling complaints, grievances and claims related to the services provided by the Website – this data will not be used for marketing purposes.

Data on orders for paid services, competitions and loyalty programmes will be stored for 5 years from the date the order was delivered.

We store data about Users for a period corresponding to the life cycle of the cookies saved on their devices, or until the User deletes them from their device.

Your personal data concerning preferences, behaviour and choice of marketing content may be used as the basis for automated decision-making in order to determine the sales opportunities of the Website.

Recipients of personal data

We transfer your personal data to the following categories of recipients:

• carriers – these entities determine the purposes and means of processing this data independently and are not subject to our instructions in this respect. Having received Users’ personal data from the Personal Data Controller, the Carrier is obliged to fulfil all obligations towards them arising from the GDPR,
• state authorities, e.g. the public prosecutor’s office, the Police, the President of UODO, the President of UOKiK, if they request it from us,
• service providers we use to run the Website, e.g. to fulfil an order.

Rights of the data subject

Under the GDPR you have the right to:

• request access to your personal data;
• request rectification of your personal data;
• request erasure of your personal data;
• request restriction of the processing of your personal data;
• object to the processing of your personal data;
• request the portability of your personal data.

The Personal Data Controller will provide you with information on the action taken on your request without undue delay, and in any event within one month of receiving the request. Where necessary, this one-month period may be extended by a further two months, taking into account the complexity and number of requests.

In any case, the Personal Data Controller will inform you of any such extension within one month of receiving the request, together with the reasons for the delay.

Right of access to personal data (Article 15 GDPR)

You have the right to obtain from the Personal Data Controller confirmation as to whether your personal data is being processed.

If the Controller processes your personal data, you have the right to:

• access your personal data;
• obtain information on the purposes of processing, the categories of personal data processed, the recipients or categories of recipients of the data, the envisaged period for which your data will be stored or the criteria used to determine that period, your rights under the GDPR and the right to lodge a complaint with a supervisory authority, the source of the data, automated decision-making including profiling, and the safeguards applied in connection with the transfer of the data outside the European Union;
• obtain a copy of your personal data.

If you wish to request access to your personal data, send your request to: [email protected].

Right to rectification of personal data (Article 16 GDPR)

If your personal data is inaccurate, you have the right to request that the Controller rectify it without delay.

You also have the right to request that the Controller complete your personal data.

If you wish to request the rectification or completion of your personal data, send your request to: [email protected].

Right to erasure of personal data, the so-called “right to be forgotten” (Article 17 GDPR)

You have the right to request that the Personal Data Controller erase your personal data where:

• your personal data is no longer necessary for the purposes for which it was collected or otherwise processed;
• you have withdrawn a specific consent, to the extent that the personal data was processed on the basis of your consent;
• your personal data has been processed unlawfully;
• you have objected to the processing of your personal data for direct marketing purposes, including profiling, to the extent that the processing is related to direct marketing;
• you have objected to the processing of your personal data in connection with processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party.

Notwithstanding a request for erasure, the Personal Data Controller may continue to process your data in order to establish, pursue or defend claims, of which you will be informed.

If you wish to request the erasure of your personal data, send your request to: [email protected].

Right to request restriction of processing of personal data (Article 18 GDPR)

You have the right to request restriction of the processing of your personal data where:

• you contest the accuracy of your personal data – the Personal Data Controller will restrict the processing of your personal data for a period enabling it to verify the accuracy of the data;
• the processing of your data is unlawful and, instead of erasure, you request restriction of the processing of your personal data;
• your personal data is no longer needed for the purposes of processing, but you need it to establish, pursue or defend your claims;
• you have objected to the processing of your personal data – pending verification of whether the legitimate grounds of the Personal Data Controller override the grounds given in your objection.

If you wish to request restriction of the processing of your personal data, send your request to: [email protected].

Right to object to the processing of personal data (Article 21 GDPR)

You have the right to object at any time to the processing of your personal data, including profiling, in connection with:

• processing necessary for the performance of a task carried out in the public interest or processing necessary for the purposes of the legitimate interests pursued by the Personal Data Controller or a third party;
• processing for direct marketing purposes.

If you wish to object to the processing of your personal data, send your request to: [email protected].

Right to data portability (Article 20 GDPR)

You have the right to receive your personal data from the Personal Data Controller in a structured, commonly used and machine-readable format and to transmit it to another controller.

You may also request that the Personal Data Controller transmit your personal data directly to another controller (where technically feasible).

If you wish to request the transfer of your personal data, send your request to: [email protected].

Right to withdraw consent

You may withdraw your consent to the processing of your personal data at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of your consent before its withdrawal.

If you wish to withdraw your consent to the processing of your personal data, send your request to: [email protected].

Complaint to the supervisory authority

If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.

In Poland, the supervisory authority within the meaning of the GDPR is the President of the Personal Data Protection Office (PUODO).

Cookies

General information

When you browse the pages of the Website, “cookies” (hereinafter: Cookies) are used, i.e. small pieces of text information stored on your terminal device in connection with your use of the Website. They are used to ensure that the Website pages work correctly.

These files make it possible to identify the software you use and to tailor the Website to your individual needs.

Cookies usually contain the name of the domain they come from, how long they are stored on the device and an assigned value.

Security

The cookies we use are safe for your devices. In particular, viruses or other unwanted or malicious software cannot reach your devices through cookies.

Types of cookies

We use two types of cookies:

• Session cookies: they are stored on your device and remain there until the browser session ends. The stored information is then permanently deleted from your device’s memory. The session cookie mechanism does not allow any personal data or confidential information to be retrieved from your device.
• Persistent cookies: they are stored on your device and remain there until they are deleted. Ending the browser session or switching off the device does not remove them from your device. The persistent cookie mechanism does not allow any personal data or confidential information to be retrieved from your device.

Purposes

We also use cookies of third parties for the following purposes:

• presenting the Certificate of Compliance – via the solidnyregulamin.pl website – by GP Kancelaria Poniatowska-Maj Strzelec-Gwóźdź sp. p., based in Kraków,
• creating statistics – which help us understand how Users use the Website, allowing us to improve its structure and content, by means of the Google Analytics tools – by Google Inc., based in the USA.

To learn the rules on the use of Cookies, we recommend reading the privacy policies of the companies listed above.

Cookies may be used by advertising networks, in particular the Google network, to display ads tailored to your preferences. For this purpose, information about how you navigate the web or how long you use the website may be stored.

To view and edit information about your preferences collected by the Google advertising network, you can use the tool available at https://www.google.com/ads/preferences/.

Using your web browser settings or the service configuration, you can change your Cookie settings yourself at any time, specifying the conditions under which Cookies are stored and access your device. You can change these settings to block the automatic handling of Cookies in your web browser or to be notified each time they are placed on your device. Detailed information about the options and ways of handling Cookies is available in the settings of your software (web browser).