Privacy Policy

Privacy Policy

 

Your privacy is our concern and we care deeply about it. Please read carefully our Privacy Police. In case of any questions or doubts please feel free to contact us at hello@kokoworld.eu

1. The Privacy Police defines the principles of collecting or processing personal data obtained via the online store available at www.kokoworld.uk (hereinafter “Shop”, “Website”).

2. The owner of the Online Store and thus the Data Controller is KOKOWORLD Sp. z o.o. headquartered in Krakow, Cystersów 21c/14, 31-553 Krakow, Poland, entered into the Register of Entrepreneurs kept by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the National Court Register under register number (KRS): 0001077118, Tax ID (NIP): 5214050156, REGON: 527257892, with a share capital of PLN: 30.300,00 (fully paid up), (hereinafter “KOKOworld”, “KOKO”, “Data Controller”, “Online Store”).

3. Contact regarding personal data protection with the Data Controller can be made via the following e-mail address: ochronadanych@kokoworld.eu

4. Personal data collected by KOKOworld through Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on free movement such data and repealing Directive 95/46/EC (General Data Protection Regulation), also called the GDPR.

5. The protection of the privacy of Users of Online Store is especially important to us. For this reason, all Customers of Online Store (individuals visiting the Website and using its functionalities) are guaranteed high standards of privacy protection. As the Data Collector we ensure the security of the personal data provided by Users. 

 

 § 1

The type of data processed. Purposes and legal basis

1. KOKOworld collects information about its Customers, who may be:

a) natural persons carrying out legal actions not directly related to their activities;

b) natural persons conducting business or professional activities on their own behalf;

c) natural persons representing legal persons or organizational units which are not legal persons, to whom the law confers legal capacity, hereinafter referred to as including customers.

2. Customers’ personal data is collected in the case of:

a) placing an order in the Online Store, both when placing order without registration and when creating a customer account, for the purpose of performing a sales contract and delivery of the order. Legal basis: Art. 6 (1)(b) of the GDPR;

b) subscription to the Newsletter. The Newsletter is a free, electronic  service that informs subscribed Customers about news, sales, contests, events by periodically sending selected content electronically.  Legal basis: consent of the data subject to perform the provision of the Newsletter service (Art 6 (1)(a)  of the GPDR);

c) handling user inquiries and communication via electronic means, including the Online Store’s contact form, e-mail or phone. Legal basis: Art. 6 (1)(b) of the GDPR or legitimate interest of KOKO (Art. 6 (1)(f) of the GPDR), where the legitimate interest of the Administrator is building relationships and providing services to the Online Store’s Customers;

d) processing personal data for the purpose of fulfilling all obligations arising from legal regulations applicable to the Data Controller, especially tax law provisions. Legal basis: Art. 6 (1)(c) of the GDPR;

e) for analytical and development purposes, for improvements. Legal basis: Art. 6(1)(f) of the GDPR);

f) navigational data may also be collected from Customers, including information about links and references they choose to click on or other actions taken within Website. Legal basis: Art. 6 (1)(f) of the GPDR, consisting in facilitating the use of services provided electronically and improving the functionality of these services;

g) for the purpose of establishing, pursuing and enforcing claims, certain personal data provided by the Customer - such as name, service usage data, and other information necessary to prove a claim - including the extent of any loss - may be processed. Legal basis: Art. 6 (1)(f) of GDPR.

3.  When registering an account in the Online Store, the Customer provides:

a) e-mail address;

b) address details;

c) zip code and city;

d) country;

e) street with house/flat number;

f) name and surname;

g) phone number;

4. In the case of Entrepreneurs, the above range of data is further extended by:

a) the Entrepreneur’s company;

b) tax identification number. 

5. Subscribing to the Newsletter is done by providing an e-mail address in the “Subscribe to Newsletter” field and then confirming the subscription by clicking the activation link sent to the provided e-mail address. The Customer’s consent to receive the free Newsletter is given voluntarily. 

6. When using the Online Store, additional information may be collected, in particular: the IP address assigned to the Customer’s computer or the external IP address of the Internet provider, domain name, browser type, access time and operating system type (including in the form of server logs). 

7. Personal data provided to KOKOworld are submitted by Customers voluntarily, in connection with concluded sales contracts or the provision of services via Website. Providing the data is not mandatory; however, failure to provide the necessary information in the order form will prevent the Customer from placing and processing an order. 

 

 § 2

Who is the data shared or entrusted to and how long is it stored?

1. The Customer’s personal data is provided to service providers that KOKOworld uses when running the Online Store. Service providers to whom personal data are transferred, depending on contractual arrangements and circumstances, or are subject to KOKOworld’s instructions as to the purposes and methods of processing this data (processing entities) or define the purposes and methods of their processing (administrators).

a) processing entities: especially providers offering hosting services, accounting services, providing marketing services, systems for analyzing traffic in the Online Store, consultants, e-mail and other IT service providers;

b) administrators: especially providers of electronic payment and banking services, courier companies and legal service providers;

c) other recipients of personal data: especially authorities or public entities entitled to obtain data under applicable law, such as courts. law enforcement agencies or state institutions, when they make a request based on a relevant legal basis. 

2. Service providers are mainly based in countries of the European Economic Area (EEA). However, it may happen that some providers are located outside of the EEA.  In such cases, we make every effort to ensure that the level of protection of Customers’ data remains secure. We use secure cloud computing solutions. 

3. Customers’ personal data are stored:

a) If the basis for the processing of personal data is consent, then the Customer’s personal data is processed by KOKOworld until the consent is revoked, and after the withdrawal of consent for a period of time corresponding to the limitation period of claims that KOKOworld may raise and which may be raised against KOKOworld;

b) If the basis for data processing is the performance of the contract, then the Customer's personal data is processed by KOKOworld as long as it is necessary to perform the contract, and after that time for a period corresponding to the period of limitation of claims;

c) If the basis for data processing is the legitimate interest of the Data Controller, personal data will be retained until the interest is fulfilled or an effective objection to the processing is submitted;

d) If the basis for processing is a legal provision to comply with statutory obligations, personal data will be retained until the expiration of the time limits set by law.

4. Once the purpose of processing has been achieved, KOKOworld will delete or anonymize personal data. If the data are to be processed for analytical purposes, they will be pseudonymized to allow use only to the extent adequate and necessary for the specific processing purposes, in a manner that prevents the identification of the data subjects. 

5. KOKOworld, upon receiving a request, provides personal data to authorized state authorities. 

6. If the Customer selects  courier delivery, their data will be transferred to a recognized courier company for the purpose of fulfilling the delivery. 

7. If the Customer makes an online payment, it is processed by mBank and the entity providing online payment services: Paypro S.A., headquartered in Poznań, Pastelowa 8, 60-198 Poznań, KRS: 0000347935, NIP: 7792369887, REGON: 30134506800000.

 

§ 3 

COOKIES POLICY

1. The Shop collects automatically no information other than information in cookies files.

2. The cookie files (so-called „cookies”) are data, especially text files, stored on the Shop User`s device and are used to browse websites of the Shop. Cookies usually contain their website name, device store time and a unique number.

3. Cookies are generated on User`s device by the Shop operator. The Shop operator has an access to cookies.

4. Cookies files are used for:

a) adjusting Shop websites content to a User`s preferences in order to help a User navigate between pages more efficiently. Cookies remember User`s device ID and display Shop content relevant to a User`s preferences;

b) generating statistic enabling to understand how a Shop Users use website in order to improve overall experience on the site.

5. The Shop uses two types of cookies: session cookies and persistent cookies. Session cookies are temporary and remain on a User `s device until leaving the website or closing the Internet browser. Persistent cookies remain on a User`s device for a set of time specified in the cookie or until User deletes them.

6. The Shops uses following categories of cookies plików:

a) „strictly necessary” cookies, are essential to navigate around the Shop websites and use its features, i.e enable to verify services that are essential to be verified; cookies used for security purposes, i.e. to trace violations during verification process;

b) „performance” cookies, collecting data on how visitors use Shope website;

c) „funcionality” cookies, allow „remembering” specified settings and customising them for a User, i.e. language and region preferences;

d) „advertising” cookies, are used to deliver advertisements tailored to User`s interests.

7. Most Internet browsers allow defaulted cookies storage on a User`s device. Cookies setting changes are available to be made any time. Those changes include blocking automatic cookie service or providing information on cookies upon placing them on a device. Further information is available in Internet browser settings. 

8. The Shop operator informs that cookie restriction may limit Shop content displayed.

9. Cookie files placed on User`s devices may be also used by cooperating with the Shop operator advertisers and partners.

10. Further information on cookies are available in a browser section „Help”.

 

§ 4

Web analytics tools used 

1. Google Analytics

The Website uses Google (Universal Analytics), a web analytics service provided by Google Inc.  Google (Universal) Analytics employs methods that enable an analysis of the use of the website by User, such as so-called “:cookies”, text files that are stored on your computer. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. By enabling IP anonymization on this website, the IP address is truncated before being transmitted within the member states of the European Union or in other Contracting States to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymized IP address transmitted from your browser within the scope of Google Analytics is not merged with other data from Google. 

You can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en. 

Alternatively, you can click this link to prevent Google Analytics from collecting data on this website in the future. An opt-out cookie will be placed on your device. If you delete your cookies, you must click the link again. 

 

2. Google Ads

The Website uses Google Ads advertising program, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA,  to conduct advertising campaigns, including remarketing campaigns. These activities are carried out based on our legitimate interest in marketing our own products or services, as well as with your consent. During visits to the Website, a Google remarketing cookie is placed on the User’s device, which, using a pseudonymous identifier (ID) and based on the pages visited by the User, enables the display of interest-based advertisements. Further processing of information occurs only if the User has given consent to Google for linking browsing and app usage history with the User’s account and for using information from the Use’s Google account to personalize ads displayed on websites. 

KOKO emphasizes that the Controller, when using Google Ads. does not collect any data that would allow the identification of the User. Any combination of data that results in personal data may be carried out by Google - in this respect, we do not bear responsibility, as Google performsthese actions based on an agreement concluded with the User of Google services. The Controller, using Google Ads, may define target audience groups for its advertisements.  

From our side, using the cookie management mechanism, you can disable these cookies by turning off the “marketing” option. 

Users can manage ad settings directly on Google’s side here: https://adssettings.google.com/. If the User is interested in details regarding data processing within Google Ads, we encourage reviewing Google’s Privacy Policy: https://policies.google.com/privacy.

 

§ 5

Rights of data subjects 

1. The User of the Online Store is entitled to the following rights in relation to the personal data processed by KOKO:

a) the right of access to data. Legal basis: Art.15 of the GPDR;

b) the right to rectify data, once the data is incorrect or incomplete.  Legal basis: Art. 16 of the GDPR;

c) the right to delete data (“the right to be forgotten”) in cases provided for by law.  Legal basis: Notwithstanding a request to erasure personal data, in connection with raising an objection or withdrawing consent, KOKO may retain certain data to the extent that processing is necessary to establish, assert or defend claims, as well as to fulfill a legal obligation to which KOKO is subject. This applies in particular to data such as: name, surname, e-mail address, residential address and order number. Legal basis: Art. 17 of the  GDPR;

d) the right to object to data processing. The right to object applies when the processing of data by KOKO is based on the KOKO’s legitimate interest, especially for profiling data for marketing purposes. KOKO shall cease processing the data for such purposes unless there are compelling, legitimate grounds for the processing which override the interests, rights of the User, or the data are necessary for the establishment or defence of legal claims. Legal basis: Art. 21 of the GDPR;

e) the right to withdraw consent. The User may withdraw their consent to further data processing at any time. Consent may be withdrawn at any time by contacting KOKO at the e-mail address hereby provided in section 1 of this Privacy Policy Withdrawal of consent has effect from the moment of withdrawal of consent. Withdrawal of consent does not affect the lawfulness of any processing carried out by KOKO in accordance with the law before its withdrawal. Withdrawal of consent does not entail any negative consequences for the User, however it may prevent further use of services or functionalities which, according to the law of KOKO, it can only provide with consent;

      a) the right to data portability. Legal basis: Art. 20 of GDPR;

      b) the right to limit data processing. Legal basis: Art. 18 of GDPR;

      c) the right to lodge a complaint to the President of the Office for Personal Data Protection regarding the violation of his rights to the protection of personal data or other rights granted under the GDPR.

2. User has the right to submit to KOKO complaints, queries and requests regarding the Privacy Policy and the processing of his personal data and the exercise of his rights, provided that they are submitted electronically using the e-mail address: hello@kokoworld.eu The following information must be provided: name and surname, e-mail address, residential address and eventually other data necessary to verify the User’s identity.

3. In the situation where the User exercises any of the rights described above, KOKO fulfills the request or refuses to comply with it immediately, but no later than within 30 days  after receiving it.  Responses are provided in Polish or English.