Website Privacy Policy of www.dagrasso.pl

§ 1 Definitions

1. As used this Privacy Policy, the following terms shall have the meanings set forth below:
1) "Da Grasso Application (Application)" - the Application for the Android operating system and the Application for the iOS operating system.
2) “Android Application" - computer software for the Android operating system that can be downloaded by the User via the Google Play platform, installed in the memory of the User’s End Device, through which the Service is provided.
3) “iOS Application" - computer software for the iOS operating system that can be downloaded by the User via the App Store platform, installed in the memory of the User’s End Device, through which the Service is provided.
4) "Operator" - owner of the Website and the Application, i.e. the company under the name of "DA GRASSO" sp. z o.o. with its registered office in Warsaw at Al. Jana Pawła II 18 unit 120, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for the Capital City of Warsaw, 12th Commercial Department, under National Court Register number (KRS) 0000270637, tax identification number (NIP) 723-206-64-45, business statistical number (REGON) 100289641.
5) “Meals” - meals, drinks and other foods offered by each Restaurant.
6) “Restaurant” - a food service outlet owned by the Restaurant Keeper.
7) “Restaurant Keeper” - a natural person, corporate or unincorporated body vested with statutory legal capacity and providing services for the delivery of Meals from the Restaurant to Users under the terms and conditions set forth in the Website Terms of Use.
8) “Website" - a website available at URL https://www.dagrasso.pl (including all subpages) through which Services are provided.
9) “Sales Contract" - a contract for the sale of Meals concluded between the Restaurant Keeper and the User with the use of the Website or the Application.
10) “Service” (“Services”) - a service provided by the Operator on the terms set forth in the Terms of Use and through the Website and the Application, which involves the provision of access to a range of functionalities through the Website and the Application, in particular the placement of Orders.
11) “User" - a natural person of at least 13 years of age, with the proviso that where such person is under 18 years of age a consent of the person’s statutory representative is required, or a corporate or unincorporated body vested with legal capacity by specific provisions, placing an Order.
12) “Order" - the User’s declaration of intent leading directly to the conclusion of a Sales Contract for Meals, defining in particular the type and number of Meals. An Order is placed by the User with the Restaurant Keeper through the Website or the Application.

2. This Privacy Policy applies to personal data of Users placing Orders through the Website and other natural persons who use the Website, in particular: natural persons who make single or multiple visits to the Website, persons interested in contact with the Operator for any purpose (queries, comments, etc.).


§ 2 Controllers of Data Collected Through the Website and the Application

1. Personal data transferred by natural persons in connection with the use of electronic services provided through the Website or the Application shall be processed by the Operator who is a controller of the data within the meaning of the GDPR.
2. Personal data transferred by natural persons for the purpose of placing an Order and concluding a Sales Contract shall be processed by the Restaurant Keeper who is a controller of the data within the meaning of the GDPR. The User shall receive detailed data (including contact data) of the Restaurant Keeper who is a controller of the User’s personal data in an email confirming the conclusion of a Sales Contract.

§ 3 Personal Data Processing by the Operator

1. The Operator shall process Users’ personal data for the purpose of performing a Service, pursuing or defending against any claims arising therefrom, and – on grounds of the Operator’s legitimate interests – for analytical and statistical purposes, and to adjust the Website to Users’ needs, and to clarify the circumstances of unauthorized use of services provided via electronic means. Where required by laws and regulations of general application, the Operator shall process Users’ personal data collected through the Website or the Application in order to perform legal obligations binding on the Operator.
2. Personal data of persons using the Website other than Users shall be processed by the Operator – on grounds of the Operator’s legitimate interests – in order to adjust the Website to the needs of the above-mentioned persons, pursue or defend against any claims, clarify the circumstances of unauthorized use of services provided via electronic means, and to create audience statistics for the Website subpages. Where required by laws and regulations of general application, the Operator shall process Users’ personal data of persons using the Website other than Users or the Application in order to perform legal obligations binding on the Operator.
3. If a User or non-User consents to the processing of his/her personal data by the Operator for marketing purposes, the Operator will be able to process the data also for that purpose, based on a voluntary consent of the data subject.
4. Both the User and any other person have the right to revoke consent to the processing of their personal data by the Operator for marketing purposes (which will not affect the legality of any processing made by the Operator pursuant to the consent given before its revocation). Should the User or other person exercise this right, the Operator shall cease the processing of data for such purpose.
5. Both the User and any other person have the right to object to the processing of their personal data by the Operator. If an objection is made to the processing of personal data, the Operator shall cease the processing thereof unless it is able to demonstrate that compelling legitimate grounds with regard to such data exist for the Operator, which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
6. Both the User and any other person shall have the right of access to their personal data, to correct and request the erasure thereof, as well as the right to request restriction of data processing.
7. If a data subject considers that his/her personal data are processed unlawfully, he/she shall have the right to lodge a complaint with a supervisory authority, i.e., in the Republic of Poland, the President of the Office for Personal Data Protection.
8. The Operator shall not sell personal data collected through the Website or the Application, or make them available to other controllers.
9. The recipients of personal data collected by the Operator through the Website or the Application shall be solely authorized employees of the Operator and its subcontractors, e.g. those providing payment handling, IT support, customer service, advertising, telecommunication, and legal services.
10. The Operator shall not transfer personal data collected through the Website or the Application to any third country or any international organization.
11. Personal data shall be processed by the Operator for marketing purposes until the consent thereto given by the person concerned is revoked.
12. Personal data shall be processed by the Operator for purposes other than marketing throughout the period during which the Service is performed, as well as thereafter, i.e. until the end of the period of limitation for any claims as may arise from the Service or tax obligations binding on the Operator, or until an objection is received from the data subject (having regard to the restrictions set forth in subsection 5).
13. The provision of personal data is voluntary, but in specific cases the lack of such data may prevent the provision of services to the User via electronic means or the placing of Orders by the User through the Website.

§ 4 Personal Data Processing by the Restaurant Keeper

1. Users’ personal data shall be processed by each Restaurant Keeper being party to Sales Contracts concluded through the Website or the Application for the performance of the Sales Contract and the establishment, exercise or defence of any related legal claims. Where required by laws and regulations of general application, the Restaurant Keeper shall process personal data collected through the Website or the Application in order to perform legal obligations binding on the Restaurant Keeper.
2. The User shall have the right to object, at any time, to the processing of his/her personal data by the Restaurant Keeper. If an objection is made by the User to the processing of his/her personal data, the Restaurant Keeper shall cease the processing thereof unless it is able to demonstrate that compelling legitimate grounds with regard to such data exist for the Restaurant Keeper, which override the interests, rights and freedoms of the User or such data are necessary for the Restaurant Keeper to establish, exercise or defend any legal claims.
3. The User shall have the right of access to his/her personal data, to correct and request the erasure thereof, as well as the right to request restriction of data processing.
4. If a User considers that his/her personal data are processed unlawfully, he/she shall have the right to lodge a complaint with a supervisory authority, i.e., in the Republic of Poland, the President of the Office for Personal Data Protection.
5. The Restaurant Keeper shall not sell personal data collected through the Website or the Application, or make them available to other controllers.
6. The recipients of personal data collected by the Restaurant Keeper through the Website or the Application shall be solely authorized employees of the Restaurant Keeper and its subcontractors, e.g. those providing pizza delivery or IT support services.
7. The Restaurant Keeper shall not transfer personal data collected through the Website or the Application to any third country or any international organization.
8. Users’ personal data shall be processed by the Restaurant Keeper throughout the period during which the Sales Contract is performed, and thereafter until the end of the period of limitation for any claims as may arise from the Sales Contract or tax obligations binding on the Restaurant Keeper, or until an objection is received from the data subject (having regard to the restrictions set forth in subsection 2).
9. The provision of personal data is voluntary, but the lack of such data may prevent the conclusion of a Sales Contract by the User with the Restaurant Keeper.

§ Cookies and Other Technologies

1. The Website and the Application use cookies, or small text information saved by the server to a computer or other device by persons using the Website or the Application. The information can be read by the server on reconnection to the Server or the Application from a given computer or other device.
2. The Website and the Application use cookies for the following purposes:
a. to adjust the content of the Website pages and the Application to users’ preferences and to optimize the use of website pages; in particular, the files make it possible to recognize a device of a person using the Website or the Application and to display the content adjusted to his/her individual needs;
b. to adjust some of the information displayed through the Website or the Application to a given person’s interests;
c. to create audience statistics for the Website and the Application that help to understand how people use the Website and the Application, which allows their structure and content to be improved.
3. Cookies are harmless to a computer or other user device and data. The operator informs that it is possible to configure the web browser so as to prevent the saving of cookies to a computer or other user device. As a result of such a configuration, however, access to some of the Website and Application services will be lost or they will be prevented from being used.
4. The Operator informs that it is also possible to delete cookies after a given session is closed.
5. Information contained in system logs in connection with the general rules for call completion over the Internet is used by the hosting provider supporting the Website and the Application only for technical and statistical purposes.
6. The Operator shall register the IP number of the computer through which the Website is accessed.

§ 6 Contact on the Rules of Personal Data Protection

All questions or doubts about privacy protection of persons using the Website and the Application as well as other matters related to personal data protection can be submitted by email at ado@dagrasso.pl