Privacy and Cookie Policy

Privacy and Cookies Policy

of the Mr.Grill Website

This document governs the Privacy and Cookies Policy of the MrGrill Website, operated through the website available at: https://mrgrill.eu, hereinafter referred to as the “Website”.

The Website is operated by: 

Premier Food EU a limited liability company with its registered office at: 18 Jana Dantyszka Street, 02-054 Warsaw, KRS: 0001170805, NIP: 7011258243, REGON: 541634674, hereinafter referred to as the “ Administrator”. The Administrator may be contacted by telephone at: +48 518 277 194 and by e-mail at: sales@mrgrill.eu

 

Definitions

• Administrator - Premier Food EU a limited liability company with its registered office at: 18 Jana Dantyszka Street, 02-054 Warsaw.   
• GDPR - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119 of 04.05.2016, p. 1, as amended).
• Website – the website operated by the Administrator at https://mrgrill.eu
• Personal Data - personal data within the meaning of Article 4 paragraph 1 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119 of 04.05.2016, p. 1, as amended).
• Processing - processing within the meaning of Article 4 paragraph 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (Official Journal of the European Union L 119 of 04.05.2016, p. 1, as amended).
• Client – an entity visiting the Website to whom, in accordance with this Policy and generally applicable provisions of law, services may be provided and goods may be sold. The provisions of this Policy shall also apply to natural persons who use the Website or contact the Administrator in connection with B2B relationships. 
• Cookies - electronic data, in particular small text files, which are stored on terminal equipment through which the Client uses the Website, or which are read from such equipment in accordance with the rules laid down in the Act – Electronic Communications Law (Prawo komunikacji elektronicznej).

§ 1

Introduction

The MrGrill Website makes every effort to ensure respect for privacy and the protection of personal information provided when using the Website and, for this purpose, takes all necessary measures. 

The use of services provided by the Administrator involves the need to Process Personal Data; therefore, matters concerning security and privacy protection are treated with particular importance. 

The purpose of this document is to assist in understanding how privacy is protected and to provide information on what Personal Data is collected, for what purposes and how it is used. It also contains information on how the exercise of rights arising from Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC, is ensured. 

This document also contains information on the technologies used in connection with the Processing of Personal Data. Examples of such technologies include the use of browser storage, geolocation and pixel tags.

As part of the Cookies Policy, information is provided on the conditions for storing information or gaining access to information already stored in the telecommunications terminal equipment of end users. An end user is understood as a natural or legal person who uses a publicly available telecommunications service or requests the provision of such a service for the purpose of satisfying their own needs.

 

§ 2

Declaration

In pursuing its principal objective of respecting the privacy of Clients, the Administrator  seeks to exercise due care. In implementing this principle, the Administrator complies with the standards and rules arising from generally applicable provisions of law. These include, in particular: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC, and the Act of 12 July 2024 – Electronic Communications Law (Dz. U. 2024/1221).    

In particular, the Administrator endeavours to ensure that Clients’ Personal Data: 

• are Processed lawfully, 
• are collected for the specific and lawful purposes set out in this document,
• are not further Processed in a manner incompatible with the aforementioned purposes,
• are accurate and relevant to the purposes for which they are Processed,
• are appropriately protected against access by unauthorised persons, destruction, disclosure and unlawful use,
• are kept in a form permitting identification of the Data Subjects for no longer than is necessary for the purposes of the Processing and, thereafter, are erased, anonymised or retained solely to the extent required by generally applicable provisions of law or justified by the legitimate interests of the Administrator.

§ 3

Administrator of Personal Data

The Administrator of Personal Data Processed within the Website is Premier Food EU a limited liability company with its registered office at: 18 Jana Dantyszka Street, 02-054 Warsaw.

§ 4

Data Provided by Clients

The data provided by Clients include identification details, such as first name and surname, as well as an e-mail address and other data provided by the Client in a message sent using the forms available on the Website. The purpose of collecting such data is to carry out a preliminary assessment of the Client’s enquiry and to establish contact in order to communicate the results of such assessment and, subject to obtaining the relevant consent, to provide the Client with commercial information.

If the Client gives consent (for example, by subscribing to a newsletter), the Administrator may use the e-mail address provided by the Client for marketing purposes. In the above case, the legal basis for Processing is Article 6 paragraph 1 letter a GDPR – the Data Subject has given consent to the Processing of their Personal Data – as well as Article 6 paragraph 1 letter f GDPR – the legitimate interest of the Administrator consisting in sending the Client information concerning promotions, discounts and products and services provided by the Administrator. Personal Data may be used for marketing communications only to the extent permitted by law, in particular after obtaining any consent required for the use of telecommunications terminal equipment or automated calling systems for marketing purposes, in accordance with Article 398 of the Electronic Communications Law. Irrespective of the foregoing, the Client may withdraw their consent or object to direct marketing at any time.

Data collected through forms are collected in accordance with the data minimisation principle prescribed by law, meaning that they are adequate, relevant and limited to what is necessary in relation to the purposes for which they are Processed.

§ 5

Legal Basis for the Processing of Personal Data

The Administrator may Process Personal Data where at least one of the following conditios is met, and only to the extent necessary for the purposes of Processing: the Data Subject has given consent to the Processing of their Personal Data for one or more specified purposes; Processing is necessary for the performance of a contract to which the Data Subject and the Administrator are parties or in order to take steps at the request of the Data Subject prior to entering into a contract; Processing is necessary for compliance with a legal obligation to which the Administrator is subject; or Processing is necessary for the purposes of the legitimate interests pursued by the Administrator or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the Data Subject which require the protection of Personal Data, in particular where the Data Subject is a child. 

Where data concerning contact persons, representatives or employees of contractors and business partners are Processed, the Administrator Processes such data for the purposes of maintaining business relationships, concluding and performing contracts and conducting correspondence.   

Settlement and accounting data are retained for the period prescribed by applicable tax legislation. Data retained for the purpose of pursuing claims are kept until the expiry of the relevant limitation periods or until the completion of the relevant proceedings.

Where the legal basis for Processing is the Client’s consent, the data may be Processed until such consent is withdrawn and, following its withdrawal, until the expiry of the applicable limitation period. 

After the Client ceases to use a service, Personal Data shall no longer be Processed, except where such data are: 

• necessary for settlement of the service and the pursuit of claims relating to payment for use of the service; 
• necessary for advertising, market research and analysis of Clients’ behaviour and preferences, where the results of such research are intended to improve the quality of services provided by the Administrator and the Client has consented to such Processing;
• permitted to be Processed pursuant to separate provisions of law or a contract. 

Data obtained in this manner are Processed pursuant to Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC. 

The Administrator may use profiling for direct marketing purposes; however, decisions taken by the Administrator on the basis thereof do not concern the conclusion of, or refusal to conclude, a Sales Agreement or the possibility of using services through the Website. Profiling may result, for example, in a particular person being granted a discount, being sent a discount code, being reminded of unfinished purchases, being sent an offer that may correspond to that person’s interests or preferences, or being offered more favourable terms than those available under the standard offer. Regardless of profiling, the person concerned independently decides whether they wish to take advantage of the discount or more favourable terms offered in this manner and make a purchase.

Profiling may consist of the automated analysis or prediction of a person’s behaviour on the Website, for example by adding a particular Product to the shopping cart, viewing the page of a particular Product or analysing the person’s previous purchase history. Such profiling is conditional upon the Administrator possessing Personal Data concerning the relevant person so that, for example, a discount code may subsequently be sent to that person.

The Data Subject has the right not to be subject to a decision based solely on automated Processing, including profiling, which produces legal effects concerning that person or similarly significantly affects them.

Irrespective of the foregoing, Personal Data may be Processed where this is necessary for the purposes of legitimate interests pursued by us or by recipients of the data, provided that such Processing does not infringe the rights and freedoms of the Data Subject. Legitimate purposes include, in particular, direct marketing of our products or services and the pursuit of claims arising from our business activities. Data obtained in this manner are Processed pursuant to Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC. 

In other cases, the Administrator requests the voluntary provision of consent to the Processing of Personal Data. Such consent is given, in particular, by ticking the appropriate box (“checkbox”) next to the declaration of consent to the Processing of Personal Data. Consent must be freely given, specific, informed and unambiguous and may be withdrawn at any time as easily as it was given. Data obtained in this manner are Processed pursuant to Article 6 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC, or Article 18(4) of the Act of 18 July 2002 on the Provision of Services by Electronic Means (Dz. U. z 2016 r., Nr 0, poz. 1030 z późn. zm.).

§ 6

Data Sets, Their Scope and Purposes of Personal Data Processing

The Administrator Processes Clients’ Personal Data in organised data sets determined according to the purpose of their Processing. Such data are Processed to the extent necessary to achieve the specified purpose. The list below sets out the data sets, their scope and the purposes of Processing.

§ 7

Entrustment of Processing and Disclosure of Personal Data

The Administrator is entitled to entrust the Processing of Clients’ Personal Data to other entities. Examples of such entities include hosting service providers, accounting or legal service providers, payment operators or other entities with which we cooperate for the purpose of properly providing services. The entrustment of Personal Data Processing is always carried out on the basis of a written data processing agreement. An up-to-date list of entities entrusted with the Processing of data is available to all Clients at all times. In order to obtain access to this list, it is sufficient to contact the Administrator with an appropriate request, for example by sending an e-mail. The legal basis for entrusting the Processing of Personal Data is Article 28 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the Processing of Personal Data and on the free movement of such data, and repealing Directive 95/46/EC. 

The Administrator may transfer Processed data outside the European Economic Area. The laws governing the Processing of Personal Data applicable in such countries may provide a lower level of protection than the laws applicable in the Republic of Poland. Accordingly, where data are transferred, the Administrator shall, in particular, ensure compliance with the Processing conditions set out in this document. One of the methods used to ensure such protection is the application of standard contractual clauses approved by the European Commission.

The Administrator does not disclose collected Personal Data to third parties, except where this is required under generally applicable provisions of law, i.e. at the request of an authority or court authorised to make such a request, or where the Client has consented thereto. 

§ 8

Client’s Rights

Clients whose Personal Data are Processed have rights relating to such Processing. The applicability of the rights set out below depends on the legal basis for the Processing of Personal Data: 

1. Article. 15 RODO right of access to Personal Data: 

The Data Subject has the right to obtain from us confirmation as to whether or not Personal Data concerning them are being Processed and, where that is the case, access to such Personal Data and additional information, including, in particular, the purposes of Processing, categories of data, recipients, retention periods, applicable rights and the source of the data. 

2. Article. 16 RODO right to rectification:

The Data Subject has the right to obtain from us without undue delay the rectification of inaccurate Personal Data concerning them. Taking into account the purposes of the Processing, the Data Subject has the right to have incomplete Personal Data completed, including by means of providing a supplementary statement. 

3. Article. 17 RODO right to erasure of Personal Data (“right to be forgotten”):

The Data Subject has the right to obtain from us the erasure of Personal Data concerning them without undue delay. In such a case, we are obliged to erase Personal Data without undue delay where one of the following grounds applies: 

• consent to the Processing of Personal Data has been withdrawn and there is no other legal ground for the Processing, 
• a valid objection to the Processing has been submitted, 
• the Personal Data have been unlawfully Processed,
• the Personal Data must be erased for compliance with a legal obligation,
• the data have been collected in relation to the offer of information society services.

4. art.18 RODO right to obtain restriction of Processing of Personal Data from the Administrator, subject to the cases referred to in Article 18 paragraph 2 GDPR:

The Data Subject has the right to obtain restriction of Processing from us where: 

• the accuracy of the Personal Data is contested by the Data Subject – for a period enabling us to verify the accuracy of the Personal Data;
• the Processing is unlawful and the Data Subject opposes the erasure of the Personal Data and requests the restriction of their use instead;
• we no longer need the Personal Data for the purposes of the Processing, but they are required by the Data Subject for the establishment, exercise or defence of legal claims; 
• the Data Subject has objected to Processing pursuant to Article 21(1) GDPR – pending verification as to whether the legitimate grounds of the Administrator override those of the Data Subject.

5. art. 20 RODO right to transfer Personal Data:

The Data Subject has the right to receive the Personal Data concerning them which they have provided to the Administrator in a structured, commonly used and machine-readable format and has the right to transmit those Personal Data to another Administrator without hindrance from the Administrator to which the Personal Data were provided.

In exercising the right to data portability, the Data Subject has the right to have the Personal Data transmitted directly from one Administrator to another, where technically feasible.

6. art. 21 RODO right to object to the Processing of Personal Data: 

The Data Subject has the right to object at any time, on grounds relating to their particular situation, to the Processing of Personal Data concerning them based on Article 6 paragraph 1 letter f GDPR (legitimate interests of the Administrator). In such a case, we shall no longer Process the Personal Data unless we demonstrate compelling legitimate grounds for the Processing which override the interests, rights and freedoms of the Data Subject or grounds for the establishment, exercise or defence of legal claims. 

7. The Data Subject has the right to object at any time, on grounds relating to their particular situation, to the Processing of Personal Data concerning them based on Article 6 paragraph 1 letter f GDPR (legitimate interests of the Administrator). In such a case, we shall no longer Process the Personal Data unless we demonstrate compelling legitimate grounds for the Processing which override the interests, rights and freedoms of the Data Subject or grounds for the establishment, exercise or defence of legal claims.   

In addition, persons whose Personal Data are Processed have the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the Processing of their Personal Data infringes the GDPR or generally applicable provisions of law. 

The Administrator may provide system functionalities enabling the exercise of these rights. If you wish to exercise any of the above rights, please contact us in accordance with the instructions set out in this Privacy and Cookies Policy.

§ 9

Server Logs

Server logs are internal records of events occurring on the Website server which automatically record page requests sent by Clients while using the Website. Such logs contain the page request sent by the Client, IP address, browser type, browser language, operating system, date and time of the request and at least one “cookie” file which may uniquely identify the Client’s browser, as well as information concerning errors or security events. 

Data collected in server logs are Processed by us for the purposes of ensuring the proper operation and security of, and managing, the Website. Such data are retained no longer than necessary to fulfil those purposes, unless longer retention is necessary to investigate an incident, pursue claims or comply with applicable provisions of law. Such data are not disclosed to third parties except in the circumstances described in this document.

§ 10

Cache Memory

When providing services to Clients, the Administrator may automatically use the cache memory of the Client’s browser, application or device. Such use consists in storing data in the memory of the browser installed on the Client’s device. Local storage may allow data to be retained between sessions, i.e. between successive Client sessions. The purpose of using cache memory is to improve the speed of use of the Website by avoiding situations in which the same data would have to be repeatedly downloaded from the Website, thereby placing an additional load on the Client’s internet connection. Where a particular technology is not necessary for the provision of a service requested by the Client, its use requires consent in accordance with the provisions of the Electronic Communications Law.

§ 11

Geolocation

The Administrator or third parties, through Cookies administered by them, may use geolocation functionality involving the collection and Processing of information concerning the Client’s location. For this purpose, data such as the IP address and data obtained from a GPS sensor, Wi-Fi access point or mobile network base stations may be Processed.

§ 12

Pixel Tag

The Administrator or third parties, through Cookies administered by them, may use pixel tag functionality. Pixel tags are elements embedded in digital content which enable information to be recorded, for example information concerning the Client’s activity on the Website. 

§ 13

Cookies – Introduction

In the course of providing services to Clients, the Administrator uses professional technologies for collecting and storing information, such as Cookies. Cookies contain information necessary for the proper use of the Website. They are commonly used small files containing a string of characters which are sent to and stored on terminal equipment (e.g. a computer, laptop, tablet or smartphone) used by the Client when visiting the Website. Such information is transmitted to the storage area of the browser being used, which sends it back during subsequent visits to the Website. Cookies most commonly contain the name of the website from which they originate, the period for which they are stored on the terminal equipment and a unique identifier. Cookies and similar technologies are used, in particular, to ensure the operation of the Website, maintain sessions, remember settings, compile statistics, conduct analytics and measure the effectiveness of marketing activities. Data contained in Cookies may also be accessed by external entities listed in § 17 of this Privacy and Cookies Policy. 

§ 14

Legal Basis for Processing Cookies

Cookies are Processed pursuant to Article 399 of the Act of 12 July 2024 – Electronic Communications Law (Dz. U. 2024/1221).

In order to use services offered electronically through the Website, the Administrator asks Clients to voluntarily consent to the Processing of Cookies, which means storing information or gaining access to information already stored on their terminal equipment for technical, statistical and marketing purposes. 

The Client may consent to the Processing of Cookies by clicking the appropriate button or by making an appropriate selection in the consent management panel. Failure to take any action, continued use of the Website or boxes selected by default shall not constitute valid consent. The Client has the right to withdraw such consent at any time and free of charge in accordance with the instructions set out in the section concerning the management of Cookies. Withdrawal of consent shall not affect the lawfulness of actions carried out prior to its withdrawal.

§ 15

Cookies Used by the Administrator

When the Website is visited, commonly used Cookies are stored on the Client’s terminal equipment (e.g. computer, laptop, tablet or smartphone). These are small files containing a string of characters, and the information contained therein is stored in the memory of the browser being used and sent back during subsequent visits to the Website. The Administrator may categorise Cookies using three different classification methods.

With regard to their purposes, Cookies are divided into several categories:

• necessary Cookies – these Cookies enable the Website and its functionalities to operate properly, e.g. authentication or security Cookies; they do not require consent where they meet the conditions laid down in Article 399 paragraph 3 of the Electronic Communications Law.
• functional Cookies – Cookies enabling the settings selected by the Client to be remembered and adapted to the Client’s needs and preferences, for example with regard to the selected language, font size or appearance of the Website.
• analytical and marketing Cookies – this category includes, for example, advertising Cookies. They enable advertisements displayed on or outside the Website to be tailored to the Client’s preferences and are used to measure traffic, compile statistics and assess the effectiveness of advertising campaigns.

With regard to their duration, two categories of Cookies are distinguished:

• session Cookies, which exist only until the end of a given Client session,
• persistent Cookies, which remain on the Client’s terminal equipment after the end of the session.

With regard to the entities administering Cookies, the following are distinguished:

• the Administrator’s Cookies,
• third-party Cookies.

§ 16

Administrator’s Cookies

The Administrator’s Cookies enable the Client’s device to be recognised and the Website to be displayed in a manner tailored to the Client’s individual expectations, thereby making its functionalities easier and more convenient to use. By storing such files on the Client’s device, it is possible, for example, to remember login details, maintain a session after login, remember selected goods or services, or adapt the Website to the Client’s preferences, such as the arrangement of content, language or colour scheme. 

§ 17

Third-Party Cookies

The Administrator may use Cookies employed by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States of America, as part of the following services:

• Google Adwords - these Cookies enable advertising campaigns conducted using the Google Adwords service to be carried out and their effectiveness to be assessed,
• Google Analytics – these Cookies enable the effectiveness of advertising campaigns conducted using the Google Adwords service to be assessed, as well as Clients’ behaviour and traffic to be analysed and traffic statistics to be compiled, 
• Google Maps – these Cookies enable information concerning the Client to be stored in order to use map functionalities available as part of the Google Maps service. Google Inc. may track the Client’s location,
• YouTube – these Cookies enable information concerning the Client to be stored in order to use the functionalities of the YouTube service. Google Inc. may track videos played by the Client.   

The Administrator may use Cookies employed by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, United States of America. These Cookies may be used to link the user’s account on the external Facebook social networking service with an account on the Website, provided that the Administrator makes such functionality available. These Cookies may also be used to Process, within Facebook, actions performed by the Client using the “Share” or “Like” buttons. The Processing of such actions may be public.

The use of third-party Cookies is subject to the privacy and cookie policies applied by such entities. We recommend reviewing the Personal Data Processing rules and privacy policies of the entities which most frequently and extensively Process our data:

• Google Privacy Policy
• Facebook Cookies Policy
• Instagram Cookies Policy

§ 18

Management of Cookies and Other Information

Browser settings generally permit Cookies and other information to be stored on terminal equipment by default. If the Client does not agree to the storage of such files, the settings of the web browser must be changed accordingly. It is possible to disable their storage for all connections made through a given browser or for a specific website, as well as to delete them. The method of managing Cookies depends on the software used. Current rules for managing Cookies can be found in the settings of the relevant web browser. 

In order to manage Cookie settings, select the relevant web browser/system from the list below and follow the applicable instructions: 

1. Edge
2. Chrome
3. Safari
4. Firefox
5. Opera
6. Android
7. Safari (iOS)

For browsers not listed above, the current rules governing Cookie management can be found in the settings of the relevant web browser. 

With regard to information concerning user preferences collected by Google’s advertising network, the user may view and edit information derived from Cookies using the Google Ads Preferences tool. Information concerning the management of Cookies on a mobile telephone can be found in the User Manual for the relevant device.  

Consent to the Processing of Cookies is voluntary. It should, however, be borne in mind that restricting their use may affect the convenience of using certain Website functionalities or may even prevent such functionalities from being used.

§ 19

Links to Other Websites or Software

The Website may contain links to other websites or software. The Administrator shall not be responsible for the privacy policies or Cookie Processing rules applicable to such websites or software. It is recommended that the privacy and cookie policies of such websites or software be reviewed after accessing them or before installing the relevant software.

§ 20

Changes to the Privacy and Cookies Policy

The Administrator reserves the right to amend the Privacy and Cookies Policy. In the event of any changes to the Privacy and Cookies Policy, the Administrator shall publish an updated version in this location.   

§ 21

Contact and Notifications

The Administrator continuously makes every effort to Process Clients’ Personal Data and Cookies in accordance with the highest standards. If any threats or infringements are identified, we encourage you to contact us immediately using the contact details provided below:

Tel: + 48 518 277 194

E-mail address: sales@mrgrill.eu

Premier Food EU LLC

18 Jana Dantyszka Street, 02-054 Warsaw, Poland

 

We welcome all feedback. If you have any questions, requests or concerns relating to the Processing of Personal Data or Cookies, please contact us. 

§ 22

Final Provisions

To the extent that this Privacy Policy does not regulate a particular matter, the applicable provisions of law concerning the Processing of Personal Data shall apply, including the GDPR and the Electronic Communications Law.