Online Store Privacy Policy

Table of Contents:

Definitions 
General Regulations 
Collection, acquisition, scope and purpose of collection of personal data 
Cookie files 
Web Push Notifications 
Administrator's and Users' rights and obligations

§ 1

Definitions:

1. Sklep – Speciality A Group spółka z ograniczoną odpowiedzialnością przy ul. Franciszkańska, nr 3, lok. 35, 00-233, Warszawa; REGON: 522091493, NIP: 5252908730, wpisana do Krajowego Rejestru Sądowgo pod numerem KRS:0000971719, prowadzonego przez Sąd Rejonowy dla M. St. Warszawy w Warszawie, XII Wydział Gospodarczy Krajowego Rejestru Sądowego, za pomocą serwisu https://www.yoco.coffee/

1.2. User - is:

2.1.  a natural person with full legal capacity or a physical person with limited legal capacity,

1.2.2 legal entity,

1.2.3. an organizational unit without legal entity, to which the law grants legal capacity - usingthe website in any way, including in particular in order to read any
content placed on the website of the Internet Store https://www.yoco.coffee/

1.3. a Customer is a physical person, a legal person or an organizational unit that is not a legalentity, to which the law grants legal capacity, for whose benefit - in accordance with the
Regulations and the law - services may be provided electronically or with whom a Sales
Agreement may be concluded. A physical person may be a Customer if:

1.3.1. has full legal capacity; or

1.3.2. obtains the consent of a statutory representative or legal guardian if he or she has limitedlegal capacity; or

1.3.3. is represented by a legal representative or legal guardian in case he/she does not havelegal capacity.

1.4. personal data administrator - Speciality A Group sp. z o.o. at Franciszkańska Street, No.3, premises 35, places, 00-233, Warsaw.

1.5. service providers - legal entities and physical persons to whom, for the purpose ofperforming the concluded contracts, the Customers' data have been entrusted with their
consent based on the relevant contracts of entrustment of personal data

1.6. merchant - "Sp6. merchant - "Speciality A Group" sp. z o.o. przy ul. Franciszkańska, nr 3, lok. 35, miejsc, 00-233, Warszawaecial

1.7. "Cookies" - computer data stored in the User's terminal equipment, intended for use onthe websites. In particular, these are text files containing the name of the website from which
they originate, the time they are stored on the end device and a unique number.

1.8. Rules and Regulations - Rules and Regulations of the Store operated athttps://www.yoco.coffee/

1.9. the Vendor's Office is the place designated for handling returns and complaints, at theaddress: ul. Franciszkańska, nr 3, lok. 35, miejsc, 00-233, Warszawa

1.10. Business Days are weekdays from Monday to Friday, excluding public holidays

1.11. The Supplier is the entity with which the Vendor cooperates in the issuance (delivery) ofthe Goods, including in particular:

1.11.1. InPost Paczkomaty Sp. z o.o. with its registered office in Krakow, Poland, whichprovides Delivery services and operates the post office box system (INPOST).

1.12.2. The Civil Code is the law on this title dated April 23, 1964, in its most current version.

1.13. Consumer is

1.13.1. a physical person making a legal transaction with the Vendor that is not directly relatedto his/her business or professional activity, or

1.13.2. a physical person concluding an agreement directly related to his/her business activity,when the content of this agreement shows that it does not have a professional character for
him/her, arising in particular from the subject of his/her business activity, made available on
the basis of the provisions of the Central Register and Information on Business Activity

1.14. Customer Account is an individual panel for each Customer, set up for his/her benefit bythe Vendor, after the Customer registers and concludes an agreement for the provision of the Customer Account service.

1.15. shopping cart is the functionality of the Online Store, where the Goods selected by theCustomer for purchase are visible, allowing the Customer to enter and modify the order data,
in particular: the number of products, delivery address, method of delivery, a form of
payment, etc.

1.16. Entrepreneur is a physical person, a physical person or an organizational unit that is nota legal entity, to which the law grants legal capacity, conducting business or professional
activities in its own name and performing a legal action directly related to its business or
professional activities.

1.17.  Sklep Internetowy to punkt prowadzenia handlu elektronicznego przez Sprzedawcę, w domenie internetowej https://www.yoco.coffee/

1.18.  Sklep Stacjonarny to każde miejsce przeznaczone do dokonywania odbiorów osobistych, zamieszczone na zaktualizowanej liście dostępnej na stronie https://www.yoco.coffee/

1.19. Merchandise is a product displayed by the Vendor in the Online Store, which may be thesubject of a Sales Contract.

1.20. a Persistent Carrier is a material or tool that allows the Customer or the Vendor to storeinformation in a way that allows future access to it for a period of time appropriate to the purposes for which the information is used; a Persistent Carrier allows the stored information to be reconstructed unchanged.

§ 2

General Regulations

2.1. Privacy Policy sets out the principles for the processing and protection of personal data ofUsers using the Store, as well as the use of cookies.

2.2. The privacy policy of the Store has an informative character.

2.3. General provisions. Speciality A Group limited liability company at Franciszkańska Street,No. 3, premises 35, 00-233, Warsaw; REGON: 522091493, NIP: 5252908730, entered in the
National Court Register under KRS:0000971719, held by the District Court for the Capital
City of Warsaw in Warsaw, XII Commercial Department of the National Court Register, using
the website https://www.yoco.coffee

("Administrator", "we") is the administrator of the personal data processed within the
framework of the website located on the domain (the "Service"),
including the Online Store operating there. You may contact the Administrator regarding your
(whether as a customer or customer's representative or as another user of the Service)
personal data at the following email address: [email protected];https://www.yoco.coffee/

2.3.1. Your personal data is processed in accordance with the provisions of Regulation (EU)2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection
of physical persons with regard to the processing of personal data and on the free
movement of such data and repealing Directive 95/46/EC ("RODO") and other data
protection laws. Terms in the area of data protection, such as "controller" or "personal data,"
are to be understood in accordance with their definitions in the RODO.

2.3.2. We exercise diligence to protect the interests of data subjects, and in particular ensurethat the data we collect is:

2.3.2.1. processed in accordance with the law;

2.3.2.2. collected for designated legitimate purposes and not subjected to further processingthat would be incompatible with those purposes;

2.3.2.3. substantively correct and adequate in relation to the purposes for which they areprocessed; and

2.3.2.4. kept in a form that makes it possible to identify the individuals to whom they relate forno longer than is necessary to achieve the purpose of the processing.

2.4. This Privacy Policy shall be governed by Polish law, in accordance with the Personal DataProtection Act of August 29, 1997 (i.e. Journal of Laws of 2002, No. 101, item 926, as
amended), with certain provisions of the Policy being effective as of May 25, 2018, due to
the entry into force by Regulation 2016/679 of the EU Parliament and Council of April 27,
2016. These have been marked with (*).

§ 3 

Collection, acquisition, scope and purpose of personal data
collection

3.1. The Administrator informs that in connection with the possibility of registering with theStore and creating an Account, Customers creating an Account may be required to provide
certain data, such as name, surname, date of birth, company name, address of residence,
address of registered office, contact telephone number, e-mail address, login (e-mail) and
password. Providing the data specified during the registration process is necessary to set up
an Account.
3.2. The Administrator within the scope of the Store may store information necessary to enable
contact with the Customer, sending messages or related to payments.

3.3. The Administrator as part of the Store may collect the personal data of Customers andUsers who contact the Administrator as part of customer service, and which personal data
are necessary to carry out a given request of a Customer or User and contact him/her to
respond. Contact will also be possible through the use of data placed for this purpose in the
Account of the User or Customer.

3.4. The Administrator processes the personal data of the Customers necessary for the properimplementation of the services available in the Store and is authorized to use the data
collected and stored within the Store for the following purposes:

3.4.1. placing an order in the Store,

3.4.2. conclusion and execution of a Sales Agreement or an Agreement for the provision ofelectronic services,

3.4.3. direct marketing of own products or services,

3.4.4. providing full service to the User, including setting up and managing the User's Account,resolving technical problems and providing relevant functions,

3.4.5. customizing the offer to the needs of Users, including for marketing purposes of theStore;

3.4.6. to monitor the activity of all and specific Users,

3.4.7. to contact Users, in particular for purposes related to the provision of services, service toUsers, authorized marketing and advertising activities,

3.4.8. to conduct research and analysis in order to improve the quality of services provided bythe Store

3.4.9. to enforce compliance with the Rules and Regulations of the Online Store,

3.5. The Administrator is authorized to store the data collected and tracked in the Store only tothe extent of achieving the purposes described in paragraph 4. The Administrator reserves
the right to filter and block messages sent through the internal messaging system, in
particular, if they are spam, contain prohibited content or otherwise threaten the security of
users of the Online Store.

3.6. The Administrator shall be entitled to automatically obtain and record data transmitted tothe server by web browsers or Users' devices, e.g. IP address, software and hardware
parameters, pages viewed, mobile device identification number and other data on devices
and use of systems.

3.7. The Administrator collects, processes and stores the following Customer data:

3.8. The Vendor declares that the provision of data by the Customer, to the extent indicatedabove, is voluntary. However, their provision may be necessary for the conclusion and
performance of a Sales Agreement or an Electronic Service Agreement in the Store. The
scope of data required to conclude a contract is previously indicated on the website of the
Online Store and in the Regulations of the Online Store.

3.9. example recipients of personal data of the Store's Customers:

3.9.1. in the case of a Customer who uses the method of delivery in the Store by mail or
courier, the Administrator entrusts the collected personal data of the Customer to a selected
carrier or intermediary performing shipments on behalf of the Administrator,

3.9.2. in the case of a Customer who uses an electronic or credit card payment method in theStore, the Administrator entrusts the collected personal data of the Customer to a selected
operator of electronic payments in the Store.

3.10. The Administrator may share anonymized data with other entities, including the Store's partners, in order to identify the attractiveness of advertisements and services to Customers,
 to improve the quality and efficiency of services provided by the Online Store or the
aforementioned entities, or to participate in scientific research.

3.11. The online store processes your personal data for the following purposes:

3.11.1. transferring your personal data to PKO Bank Polski S.A. ("Bank") in connection with:

3.11.1.1. provision by the Bank to the Online Store of the service of making available the infrastructure for handling payments over the Internet (legal basis: Article 6(1)(f) of the
Regulation)

3.11.1.2. handling and settlement by the Bank of payments made by customers of the OnlineStore over the Internet using payment instruments (legal basis: Article 6(1)(f) of the
Regulation).

3.11.1.3 in order for the Bank to verify the proper execution of the agreements concluded withthe Online Store, in particular, to ensure the protection of the interests of the payers in
connection with their complaints (legal basis: Article 6(1)(f) of the Regulation).

3.11.1.3. in order for the Bank to verify the proper execution of the agreements concluded with the Online Store, in particular, to ensure the protection of the interests of the payers in
connection with their complaints (legal basis: Article 6(1)(f) of the Regulation).

3.12.1. PKO Bank Polski S.A

3.13. If you provide your personal data in order to conclude a contract with the Online Store, providing your personal data is a condition for concluding this Agreement. Providing
personal data in this situation is voluntary, but the consequence of not providing such data
will be the inability to conclude a contract with the Online Store.

If you provide your personal data in order to transfer your personal data to PKO Bank PolskiS.A. prior to the conclusion of a contract of sale of goods (or services) purchased in the
 Online Store, the transfer of these data is a condition for the conclusion of a contract of sale
in connection with the business model of conducting business adopted by the Online Store.

In the case of the transfer of your personal data to the Bank in connection with the processing and settlement of payments made by you to the Online Store via the Internet
using payment instruments, the provision of data is required in order to process the payment
and provide confirmation of its execution by the Bank to the Online Store.

In the case of the transfer of your personal data to the Bank in order for the Bank to verify the proper performance of the agreements concluded with the Online Shop, in particular, to
ensure the protection of the interests of the payers in connection with their complaints, the
provision of such data is required to enable the execution of the agreement concluded
 between the Online Shop and the Bank.

Right to file a complaint

If you believe that your personal data is being processed in violation of applicable law, youmay file a complaint with the President of the Office for Personal Data Protection.

§ 4

Cookie file

4.1. Cookies are computer data, in particular text files, stored on the user's terminalequipment, intended for the use of the Internet Store (hereinafter, also, "Website" or
"Service"). These files allow recognizing the user's device, displaying the Website tailored to
the user's individual preferences, maintaining a session, etc. Cookies usually contain the
name of the Website from which they originate, the time they are stored on the end device
and a unique number.

4.2. Cookies are used to adapt the content of the Website to the user's preferences and tooptimize the use of the Website. They are also used to create anonymous, aggregate
statistics that help to understand how the user uses the Website - which allows for improving
their structure and content, excluding personal identification of the user.

4.3. We use four types of cookies:

4.3.1. "session" - temporary files that remain on the user's device until the user logs out of the
website or shuts down the software (web browser);

4.3.2. "permanent" - files that remain on the user's device for the time specified in the
parameters of the Cookie files or until they are manually deleted by the user;

4.3.3. "external" - files from external websites, used to collect statistical data on how the user
uses the Website - for this purpose we use the following tools:

4.3.3.1. GOOGLE ANALYTICS - a tool used to count visits to the Service, their length, and to
determine which functionalities of the Service or which parts of the Service are most
frequently used or visited and how they are used by individual users - which allows us to
analyze the performance of the Services and to determine directions for the development of
new functionalities and services;

4.3.3.2. HOTJAR - a tool that uses cookies and other technologies to collect data about: (a)
users' behaviour on the Service (e.g., time spent on specific pages, most frequently used
links, difficulties encountered - which allows us to create and maintain the Service in
accordance with users' preferences); and (b) users' devices (e.g., device IP address, device
screen size, device type, browser information, geographic location, preferred language used
to display the website);

4.3.3.3. SYNERISE - a tool to support activities aimed at automating marketing and sales
processes, including the processing of marketing and sales data and its complex analytics in
a multi-channel model, by collecting information about the behaviour of visitors to the
Website;

4.3.3.4. GOOGLE ADS - GOOGLE's advertising system, which enables the emission of text,
graphic, and video ads and the display of sponsored links in the search results of the
GOOGLE search engine and on sites cooperating under the GOOGLE ADSENSE program;

4.3.3.5. FACEBOOK ADS - the FACEBOOK advertising system, which allows the creation,
purchase and management of ads within the FACEBOOK social network, INSTAGRAM,
MESSENGER and AUDIENCE NETWORK.

4.3.4. "advertising" - files responsible for displaying ads tailored to the user's preferences.

4.4. The User may opt out of the anonymous recording of activities performed on the Website
in analytical cookies by:

http://www.adobe.com/privacy/opt-out.html;

http://www.google.com/analytics/learn/privacy.html;

https://www.hotjar.com/legal/compliance/opt-out; andhttps://www.hotjar.com/legal/policies/privacy.

4.5. By default, your web browsing software allows cookies to be placed on your terminal
device. These settings can be changed in such a way as to block the automatic handling of
cookies in the settings of your web browser or inform you each time they are sent to your
device. Detailed information about the possibility and methods of handling cookies is
available in the settings of your software (web browser). Restricting the use of cookies may
affect some of the functionality available on the Website.

§ 5

Web push notifications

5.1. Za Twoją zgodą możemy dostarczać Ci notyfikacje Web Push, przez które rozumie się krótkie komunikaty wyświetlane na ekranie Twojego urządzenia, informujące o naszych towarach i usługach, w tym o nowościach, obiektach i aktywnościach sezonowych, akcjach, konkursach lub wydarzeniach.

5.2. Once you have given your consent, we collect the following data, namely:

5.2.1. date and time of signing up for Web Push notifications;

5.2.2. location related to your browser settings;

5.2.3. type and ID (i.e. randomly assigned number) of your browser, operating system, and
type of device (tablet, mobile, desktop);

5.2.4. actions taken by you on the Online Store, including pages visited, clicks on links, etc.

5.3. Web Push Notifications are a tool of a marketing nature to support communication with
you. The data, including, where applicable, personal data, is processed by us for the
purpose of marketing the goods and services of the Vendor and cooperating entities. Data is
processed in an automated manner, including subject to profiling. Based on the profiles, we
are able to tailor communications to your expectations and preferences. For profiling, we use
information about the activities you undertake in the Online Store, as well as information
about your location if provided.

5.4. Nie podejmujemy wobec Ciebie decyzji, które opierałyby się wyłącznie na zautomatyzowanym przetwarzaniu, w tym profilowaniu, informacji o Tobie i które wywoływałyby skutki prawne lub w podobny sposób istotnie wpływały na Ciebie.

5.5. You can revoke your consent at any time by changing the settings of your web browser,
and thus opt out of receiving Web Push notifications. The data referred to in sec. 5.2 are
processed until you withdraw your consent to receive Web Push notifications.

5.6. Recipients of the data referred to in para. 5.2 are our authorized employees and
associates and the entity providing the platform for sending Web Push notifications. The
data is not transferred outside the European Economic Area. More about your rights in
clause 4 of the Privacy Policy.

§ 6

Administrator's and Users' rights and obligations

6.1. The Administrator has the right, as well as a statutory obligation to provide selected or all
information concerning the Store's Customers to public authorities or third parties who make
such a request for information under the applicable provisions of Polish law.

6.2. The Administrator does not entrust data processing and does not make the collected
personal data of the Customers available to unrelated entities without the consent of those
concerned unless the following circumstances occur:

6.2.1. The Administrator may use the support of Service Providers to provide the services it
makes available, but these entities are not authorized to independently use the personal
data processed on behalf of the Store, and all their actions are subject to the provisions of
the Privacy Policy of the Online Store,

6.2.2. The Administrator retains the right to share data with public authorities in conducting
proceedings for possible violations of the law or in combating possible violations of the
Regulations of the Online Store.

6.3. The Customer shall have the right to access his/her personal data collected by the
Administrator at any time. This right includes the possibility of verification, modification,
supplementation, deletion, or discontinuation of processing of the Customer's personal data
and shall be granted without giving any reason.

6.4. Customers have the right to inspect, edit and delete the data they have provided. The
Customer shall ensure that the data he provides or publishes in the Store is truthful.

6.5. In order to exercise their rights, the Customer may at any time send an appropriate
declaration of intent to the Administrator's address or via e-mail.

6.6. Usunięcie danych osobowych lub zaprzestanie ich przetwarzania przez Administratora może skutkować brakiem możliwości realizacji usług świadczonych za pośrednictwem Sklepu lub poważnym ograniczeniem możliwości korzystania z funkcjonalności Sklepu.

6.7. the Online Store offer will be expanded in the future. This means that the Administrator
will be obliged or authorized to make changes to the Privacy Policy.

6.8. new versions of the Privacy Policy will appear on the website of the Online Store with an
appropriate announcement.

6.9. Any change to the Privacy Policy will be effective as of the date of notification of the
change by posting it on the website of the Online Store. Any changes will be appropriately
highlighted for a period of one month from the date of introduction of changes to the Privacy
Policy.