Privacy Policy

This Privacy Policy contains aggregate information regarding the processing of personal data within the www.menu-catering.pl domain.

  1. General terms of personal data processing
  1. The controller of personal data is Menu Catering Sp. z o.o. with its registered office in Krakow, ul. Ks. Józefa 275, entered into the Register of Entrepreneurs kept by the 11th Commercial Division of the National Court Register of the District Court for Kraków-Śródmieście, under KRS number 0000757698, tax identification number (NIP): 6772439578 (hereinafter referred to as the “Controller”).
  2. The Controller may be contacted in writing at the address indicated in the preceding sentence or by e-mail at: zarzad@przedszkolefairplay.pl 
  3. The processing of personal data by the Controller is carried out in accordance with legal provisions, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as “GDPR”). 
  4. Processing applies to individuals and personal data depending on the purpose for which they are processed (the specific indication of processing purposes is set out in Section II of the Privacy Policy). Data is provided voluntarily, and the consequence of not providing it may be the inability to fulfill a specific purpose, e.g., answering a submitted question. If there is a requirement to provide personal data, the Controller will inform about it directly. 
  5. The Controller may process personal data solely in an automated manner, including profiling, which will produce legal effects concerning the data subject or similarly significantly affect them. / The Controller may process personal data in an automated manner, including in the form of profiling, however, automated processing will not lead to making decisions producing legal effects or similarly significantly affecting the data subject. / The Controller does not process personal data solely in an automated manner, including not using profiling.
  1. Bases and period of personal data processing

Each processing of personal data takes place for specific, explicit, and legally defined purposes, and the Controller ensures that it does not collect or process personal data incompatibly with the purposes specified below.  

  1. The execution of activities related to the conclusion and performance of a contract is based on Art. 6(1)(b) GDPR and specifically concerns: 
  1. provision of services to the extent consistent with the concluded contract;
  2. contacting in matters related to the service provided; 
  3. taking steps prior to entering into a contract, in particular providing an offer at the request of the data subject.  

The data processing period for this purpose covers the duration of the contract. 

  1. Establishing business relationships, including answering questions asked in connection with contact initiated by data subjects, is based on Art. 6(1)(f) GDPR in connection with the implementation of the Controller’s legitimate interests consisting of responding to submitted inquiries. Personal data will be processed until an effective objection to data processing is made, but no longer than until the last day of the calendar year following the expiration of 3 years from the moment of response by the Controller. 
  2. Establishing or securing potential claims and handling complaints takes place based on Art. 6(1)(f) GDPR in connection with the implementation of the Controller’s legitimate interests regarding the protection of the rights of the Controller and data subjects, and the data processing period corresponds to the limitation period of a given claim and begins at the moment of establishing or defending against a specific claim.
  3. Marketing activities for own services or third parties take place on the basis of Art. 6(1)(f) GDPR in connection with the implementation of the Controller’s legitimate interests in taking care of the Controller’s interests, promoting services, and striving to establish cooperation. The period of personal data processing for marketing activities lasts until consent to receive messages or information under the provisions of the Act on the Provision of Electronic Services or Telecommunications Law is withdrawn, or until an effective objection to data processing is lodged, but no longer than […].
  4. Fulfillment of tax and accounting obligations is based on Art. 6(1)(c) GDPR in connection with the relevant tax and accounting regulations. The period of data processing for this purpose is equal to the duration of the legal obligation, where this period is determined by applicable provisions of law.
  1. Rights of data subjects

The person whose personal data is processed by the Controller, provided that the legally specified conditions are met, has the right to:

  1. access the content of their data and obtain a copy,
  2. the right to rectification,
  3. the right to request erasure,
  4. restriction of processing,
  5. data portability,
  6. object on grounds relating to their particular situation to the processing of data based on the Controller’s legitimate interest,
  7. object to processing based on the Controller’s legitimate interest for marketing purposes,
  8. lodge a complaint with a supervisory authority if they consider that the processing of personal data by the Controller violates applicable law (address: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw).
  9. withdraw consent if processing takes place on the basis of consent (withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal).
  1. Recipients of personal data
  1. Personal data may be transferred to entities authorized to receive them under applicable law, including relevant judicial authorities. 
  2. Personal data may also be transferred to trusted recipients such as: carriers and postal service providers, accounting service providers, legal service providers, technical service partners (development and maintenance of IT systems and websites, software or systems supply), and debt collection companies.
  3. The Controller does not transfer personal data outside the European Economic Area (EEA) or to international organizations. / The Controller transfers personal data outside the European Economic Area (EEA) or to international organizations. Transfers outside the EEA take place on the basis of an adequacy decision adopted by the European Commission or on the basis of standard contractual clauses pursuant to a decision of the European Commission or on another legal basis, for example: explicit consent of the data subject. Detailed information on appropriate or suitable safeguards and on the means to obtain a copy of safeguards or where they have been made available can be obtained from the Controller, who can be contacted in the manner specified in Section I.2 of this Policy.
  1. Cookies
  2. General information
  1. The Controller uses cookies or similar technologies (hereinafter referred to collectively as “cookies”), which should be understood as IT data, in particular text files stored on the end devices of persons browsing the pages. 
  2. As part of using cookies, the Controller may process data about the user’s device, location, actions performed on the website (e.g., visit duration), and other data depending on the cookie used (e.g., interest in a selected advertisement). 
  3. Cookies used on the website menu-catering.pl 
  1. The Controller uses “session” and “persistent” cookies based on their storage period. Session cookies are files that remain on the user’s device until leaving the website or logging out, while persistent cookies remain for a specified period (indicated in parameters) or until manual deletion. 
  2. Based on their purpose of use, the Controller uses cookies:  
  1. Necessary – enabling the proper operation of the website. This category cannot be disabled due to proper website functioning.  
  2. Statistical – allowing monitoring of user traffic on the website and verifying choices made, including analyzing the number of visits. 
  3. Marketing – used in connection with displayed advertisements and adjusting them to user preferences. Customization takes place by analyzing individual user behavior on the website. Analysis may also be linked to behavior on other websites, depending on the cookie provider. 
  4. Functional – enabling the retention of choices made on the page, such as preferred site language, content layout, and the region in which the user is located.
  5. The Controller uses first-party and third-party cookies based on their ownership. First-party cookies are sent directly by the website, while third-party cookies are created and managed by external entities.
  6. Cookie management
  1. All cookies, except for necessary ones, require user consent before deployment. The user makes choices regarding the cookies used, and until consent is given, cookies are blocked. At any time, the user can change cookie settings on the Controller’s website by withdrawing consent or objecting to non-essential cookies. 
  2. Cookie settings can also be modified directly in the web browser used. At the browser level, the user can manage cookies by setting notifications whenever cookies are placed on the device or blocking their automatic saving. Depending on the browser, configuration can be carried out according to the information provided below:  
  1. Microsoft Edge https://privacy.microsoft.com/pl-pl/privacystatement  
  2. Chromehttps://support.google.com/chrome/answer/95647?co=GENIE.Platform%3DDesktop&hl=pl 
  3. Opera https://www.opera.com/help/tutorials/security/cookie/  
  4. Mozilla Firefox https://support.mozilla.org/pl/kb/blokowanie-ciasteczek  
  5. Safari https://support.apple.com/pl-pl/HT201265  
  6. In the event of restricting cookies, some features may not function properly.