Introduction!
Last updated: 08.08.2024
If you have landed on this page, it means that the protection of your personal data is important to you. We want to assure you that we care about your privacy and it is important to us. We have implemented not only legal but also technical measures to further strengthen its protection.
In accordance with the GDPR, the rules for dealing with your personal data are presented below. Please read the following questions arising from your personal data, if you have any doubts regarding the Privacy Policy, please contact us via the following address: contact@bakingbuddyweb.com
This policy describes the types of information we may collect from you or that you may provide when you visit the website www.bakingbuddyweb.com (the "Website" or "Website") or download and use the Baking Buddy mobile and desktop applications (referred to as collectively, the Websites and Apps, including all related documentation, are the "Software") and our practices regarding collecting, using, maintaining, protecting and disclosing this information
Privacy Policy
§1 Who is the Administrator of your personal data?
The data administrator is Filip Rękas, running a business under the name Yapps Filip Rekas, NIP: 5130294988, REGON: 528893845, address: ul. Jaśminowa 3A, Masłomiąca. You can contact the Administrator by writing to the following e-mail address: contact@bakingbuddyweb.com
§2 To what end do we collect your data and how long do we store it?
We may process your data for the following purposes:
1. Communication with you, including answering questions submitted via the contact form, e-mail, etc.;
The data will be processed based on the legitimate interest of the Administrator, in the form of communication with the Website Users (Article 6(1)(f) of the GDPR). Your data will be processed no longer than until you raise an objection or the business purpose ceases. Providing this data is voluntary, but at the same time necessary for communication with you. Data may also be processed during the archiving process for internal purposes, based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR), until an objection is raised or the business purpose ceases.
2. Conclusion of the contract and its implementation (placing an order);
3. Establishing, defending and pursuing claims;
4. Fulfillment of legal obligations imposed on the Administrator (including tax and archiving obligations);
The data necessary to conclude and perform the contract will be processed for the duration of the contract, including the period of exercising the rights arising from the contract, such as the right to make a warranty complaint (Article 6(1)(b) and (f) of the GDPR). Providing this data is voluntary, but at the same time necessary for the conclusion and implementation of the contract. Additional data provided for the purpose of, among others: to improve the performance of the contract, will be processed no longer than until you raise an objection or the business purpose ceases, based on the legitimate interest in customer service (Article 6(1)(f) of the GDPR). After this time, the data will be processed during the limitation period for claims, based on the legitimate interest of the Administrator in order to defend against claims, as well as to establish and pursue claims (Article 6(1)(f) of the GDPR). If the data is necessary to fulfill the legal obligations imposed on the Administrator (such as issuing and storing invoices, implementing procedures under the Digital Services Act) - the data will be processed for this purpose for no longer than 6 years (archiving obligations regarding accounting documents), unless the law provides otherwise (Article 6(1)(c) of the GDPR). Data may also be archived for internal and statistical purposes, until you raise an objection or the business purpose ceases, based on the legitimate interest of the Administrator (Article 6(1)(f) of the GDPR).
5. Providing marketing information (including sending newsletters and information about services, products, promotions, free content using other tools, e.g. chatbot, telephone);
The data will be processed based on the legitimate interest of the Administrator, in the form of marketing of the Administrator's products and services (Article 6(1)(f) of the GDPR). The data will be processed no longer than until you raise an objection or the business purpose ceases - whichever comes first. Providing data is voluntary, but necessary to receive marketing/commercial information. Pursuant to Art. 10 of the Act on the provision of electronic services, for the purposes of maintaining commercial and telephone communication, I need your consent. You can withdraw it at any time by clicking the link in the footer of the e-mail or by writing to me at the address provided above.
6. Administration and management of the website and groups on social media platforms (including Facebook (Meta), Instagram), in the case of data processing on social media platforms, including communication and directing marketing content;
This data will be processed only if you decide to: like the page / join the group / select the "Follow" option or otherwise leave your data on the platform managed by me, e.g. by posting an entry or comment. The data will be processed for the duration of the existence of the page/group or until you raise an objection, which may be done by clicking the "Like", "Follow" option, deleting a comment/entry or in another way provided for within the platform/site or by contacting with me . We would like to inform you that the rules relating to the website/fanpage/group are set by the Administrator, while the rules for using the social networking site on which the page/fanpage/group is located are set by the entity managing these portals.
7. Analytical and Statistical Purposes
Data processing for analytical and statistical purposes involves analyzing data automatically collected while using the website, including cookies. Data is processed based on the legitimate interest of the Administrator, specifically for adapting the content of the Website to the User's preferences and optimizing the use of the Website; creating statistics to understand how Users use the Website, which helps improve its structure and content (Art. 6(1)(f) GDPR). Data may also be archived for internal and statistical purposes, based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR), until you object or the business purpose ceases.
8. Promotion and Marketing
When you provide us with your data, especially in the form of feedback on a product or service, including data about your image, it will be processed based on the legitimate interest of the Administrator for marketing purposes, aiming to improve the quality of services and products, and to promote the Administrator’s services and products. This data will be processed for the period necessary to achieve business purposes or until you object. Providing data is voluntary.
9. Collection of Sensitive Data
Sensitive data is collected for the purpose of fulfilling and properly executing the contract – based on your informed and voluntary consent (Art. 9(2)(a) GDPR) – until the business purpose ceases or consent is withdrawn. Providing data is voluntary but necessary for the proper execution of the contract.
10. Collection of Data Necessary for the Functioning of the Website
We collect various types of information from and about users of our Software, including:
- Information that can identify you, e.g., name, postal address, email address, phone number, or other identifier used to contact you online or offline ("personal data");
- Data about you that does not individually identify you, e.g., user data entered into the Software;
- Information about your internet connection, the hardware used to access the Software, and usage details.
We collect this information directly from you when you provide it.
The information we collect through our Software or via it may include:
- Information you enter directly into our Software, such as recipes, shopping lists, meal plans, menus, bookmarks, and other data.
- Information you provide when registering an account, such as email address and password.
- Information you provide when reporting an issue with our Software, such as crash logs or screenshots.
- Records and copies of your correspondence (including emails) if you contact us.
- Details of transactions carried out through our Website and order fulfillment. Providing financial information may be required before placing an order through our Website. We do not store financial information after processing an order. Payment processing is handled by PayPal.
You may also provide information to other users of the Software or third parties (collectively referred to as "User Contributions"). Your User Contributions are published and transmitted to others at your own risk. Furthermore, we cannot control the actions of third parties to whom you may disclose your user contribution. Therefore, we cannot and do not guarantee that your User Contributions will not be viewed by unauthorized persons.
11. How We Use Your Data
We use the information we collect about you or that you provide to us, including any personal data:
- To present our Software and its content.
- To provide information, products, or services.
- To fulfill any other purpose for which you provide it.
- To deliver notifications related to your account.
- To meet our obligations and enforce our rights arising from any contracts between you and us, including in relation to billing and collection.
- To notify you of changes in our Software or any products or services we offer or provide through it.
- For any other purpose with your consent.
12. Accessing and Correcting Your Data
You can view and change your personal data by logging into the Software and visiting your account profile page. You can also send us an email at contact@bakingbuddyweb.com to request access to the personal data you have provided, to correct or delete it. We cannot delete your personal data unless we also delete your user account. We may not honor a request to change information if we believe the change would violate any law or legal requirement or result in incorrect information.
§3 Who Can We Share Your Data With?
We share your data with other entities only when necessary to achieve the processing purposes mentioned in §2 and only to the extent necessary to achieve that purpose. As a rule, we collect and process only the data you provide, except for data collected automatically (cookies). More about cookies can be found in §7. If necessary, your data may be shared with entities we cooperate with to achieve the above-mentioned purposes, including hosting companies, IT firms / website managers, accounting service providers, invoice software providers, newsletter service providers, cloud service providers, marketing service providers, administrative service providers, consulting service providers, subcontractors, lawyers, couriers or postal operators, training platforms, social media platforms, customer service platforms, appointment scheduling platforms, product sharing or service platforms, and other entities supporting the Administrator in achieving processing purposes. As a rule, data will not be transferred outside the EEA, except for situations described below. In other cases, when data is transferred outside the EEA, this will be based on your consent, standard contractual clauses, or other safeguards provided under the GDPR, subject to fulfilling, among other things, the information obligation. Services provided by Google or Facebook (META) are generally performed by entities based in the European Union. However, due to the global nature of these entities, your data may be transferred to the USA due to storage on American servers (in whole or in part). Nonetheless, Google and Facebook have implemented safeguards in accordance with GDPR requirements to protect personal data through the use of standard contractual clauses. More information about data processing rules by these providers can be found in the privacy policies of each entity. Your data (if it results from the purpose of processing) may also be transferred outside the EEA to the following entities: Active Campaign LLC, 1 N Dearborn St., 5th Floor, Chicago, Illinois 60602; Asana, Inc., 1550 Bryant Street, 2nd Floor San Francisco, California 94103.
§4 What Rights Do You Have?
Under the GDPR, you have the right to access your personal data, rectify personal data, delete personal data, restrict the processing of personal data, object to the processing of personal data, transfer personal data, withdraw consent to data processing; withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. Detailed information about these rights is provided in the GDPR, i.e., Regulation (EU) 2016/679 of the European Parliament and Council of April 27, 2016, on the protection of individuals concerning the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). If you believe your personal data is processed unlawfully, you have the right to file a complaint with the President of the Personal Data Protection Office. However, I encourage you to contact me first to clarify any doubts.
§5 Are Your Data Profiled?
The Administrator analyzes personal data in an automated manner using tools provided by software vendors (e.g., using statistics, history), only to the extent that it does not have legal effects on you or significantly affect your situation, including guaranteed rights and freedoms. The purpose of automated data processing is to understand User preferences (more information on analysis is available in §7 Cookie Policy).
§6 Applicable Law on Personal Data
In matters not regulated, applicable law, including European law (e.g., GDPR), applies.
§7 Cookie Policy
When you download, access, use, or navigate through our Software and interact with it, we may use automatic data collection technologies to collect certain information about your device, browsing actions, and patterns, including:
- Details of your interactions with our Software, including traffic data, logs, and other communication data, as well as resources you access and use in the Software.
- Crash logs are generated automatically in the event of software crashes.
- The Software may also access metadata and other information related to other files stored on your device, such as photos, with your permission.
- The Software does not collect real-time location information from your device.
The information we collect automatically includes only statistical data and snapshots; it does not include personal data, but we may store or link it with personal data collected in other ways or obtained from third parties. It helps us improve our Software and provide better and more personalized services, including allowing us to:
- Store information about your preferences, so we can tailor our Software to your individual interests.
- Recognize you when you return to our Software.
This data is collected in a way that does not identify the User, so-called anonymous data. Cookies (so-called "cookies") are IT data, specifically text files, that are stored on the User's end device and used to access the Website. Cookies typically contain the name of the website from which they originate, the time they are stored on the end device, and a unique number. Cookies are used to adapt the content of the Website to the User's preferences and to optimize the use of the Website, as well as to create statistics that help understand how Users use the Website, which allows for the improvement of its structure and content. You can independently change cookie settings. In many cases, the web browser by default allows cookies to be stored on the User's end device. Detailed information about cookie handling options is available in the software settings (web browser). Not consenting to cookies may limit some functionalities on the Website.
The Administrator uses technologies to monitor actions taken by the User on the Website:
- Google tools, including Google Analytics provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Data collected through this tool is used to analyze Website statistics. Google Analytics uses its own cookies to analyze User actions and behaviors on the Website. These cookies help store information, e.g., from which site the User arrived at the current website. They help improve the Website. This data is processed based on the legitimate interest of the Administrator (Art. 6(1)(f) GDPR). Detailed information about Google Analytics can be found on the Google tools usage page.
- PayPal cookies related to performance, functionality, and essentials. We use these cookies to enable the operation of our site (PayPal payment service). For example, essential cookies allow you to log in and browse our site securely. They help us protect your account and prevent fraud, as well as securely process payments.
- Baking Buddy cookies ensure the security and smooth operation of our site, allow the download of the mobile application from our site, remember user login data for up to 7 days, and user cookie preferences.
§8 Social Media Plugins
The Website uses plugins, widgets, and other social media tools provided by portals such as Facebook (Meta), Instagram, YouTube, LinkedIn. Rules regarding personal data processing are described directly on the websites of these Service Providers.
§9 Co-Administration
The Administrator processes data based on the legitimate interest of the Administrator in conducting activity analyses, as well as User preferences, to improve the functionalities used and the services provided. In matters related to personal data, you can contact both the Administrator and Co-Administrator.
When using the Application or its content, some third parties may use automatic data collection technologies to collect information about you or your device. Third parties may include:
- Analytical companies.
- Automated crash reporting services.