Privacy Policy

1. Data Administrator

The administrator of your personal data is Cinematic Studio Adam Olejniczak, Zachodnia 7/29, 99-100 Łęczyca. Contact with the administrator is possible via e-mail at This email address is being protected from spambots. You need JavaScript enabled to view it..

2. Purposes of Data Processing

Personal data are processed for the purpose of implementing sales agreements for agricultural products from organic farming, providing access to the offer of products from local producers and customer service. In addition, we process data for the purpose of handling complaints, returns and direct marketing, including sending the newsletter. We also conduct analyses and statistics to better understand the needs of our customers and ensure the security of services provided electronically.

3. Basis for Data Processing

The basis for the processing of personal data is art. 6 sec. 1 letter b of the GDPR, which refers to the necessity of processing for the performance of the contract to which the data subject is a party. Additionally, data are processed on the basis of art. 6 sec. 1 letter b. c GDPR, in the event that processing is necessary to fulfill a legal obligation incumbent on the administrator. In certain situations, processing is also carried out on the basis of art. 6 sec. 1 letter f GDPR, i.e. the legitimate interest of the administrator, or art. 6 sec. 1 letter a GDPR, based on the consent of the data subject.

4. Types of Data Processed

We process the following categories of personal data: identification data (such as name, surname), contact data (e-mail address, telephone number, residential address) and financial data (bank account number, payment data). We also process data regarding purchases, including order history and purchase preferences, as well as technical data such as IP address and login data. This data is necessary to provide services at the highest level and ensure the security of our users.

5. Recipients of Data

Personal data may be made available to entities processing data on behalf of the administrator, such as IT service providers, courier and postal companies and other entities providing services to the administrator. The recipients of data may also be entities authorized under the provisions of law, such as tax offices or law enforcement agencies. Each of these entities processes personal data in accordance with the data processing agreement and only to the extent necessary to provide services.

6. Transfer of Data to Third Countries

We do not transfer personal data outside the European Economic Area, unless it is absolutely necessary to perform the agreement. In such a case, we ensure an adequate level of data protection by using standard data protection clauses adopted by the European Commission. We inform about such transfer and applied security measures each time before starting processing.

7. Data Storage Period

Personal data is stored for the period necessary to perform the agreement and in accordance with legal requirements, such as tax law. After the completion of the contract, the data may be stored for the limitation period of claims arising from the agreement and for the period required to fulfill the legal obligations of the administrator. In the event of consent to data processing, the data will be stored until the data subject withdraws consent.

8. Rights of Data Subjects

You have the following rights: the right to access your data, which means the possibility of obtaining information on whether and what data we process. You also have the right to rectify data that is incorrect or incomplete, and to delete data if it is no longer necessary for the purposes for which it was collected. Additionally, you may request the restriction of data processing and transfer of data to another administrator.

9. Right to File a Complaint

If you believe that the processing of personal data violates the provisions of the GDPR, you have the right to lodge a complaint with the supervisory authority. In Poland, the supervisory authority is the President of the Office for Personal Data Protection. You can submit complaints directly to the supervisory authority or by contacting us to clarify any doubts regarding the processing of personal data.

10. Automated Decision-Making

We inform you that your personal data is not processed in an automated manner, including through profiling. This means that we do not make decisions solely based on automated data processing that could produce legal effects or significantly affect you in a similar way. All decisions regarding the processing of personal data are made by our employees.

11. Data Security

Cinematic Studio implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, destruction or change. We use security measures such as data encryption, access control and regular security audits. Our IT systems are protected against external and internal attacks to ensure the highest level of security of processed data.

12. Cookies

Our website uses cookies to ensure proper operation and traffic analysis on the site. Cookies also allow us to personalize marketing content and improve the comfort of using our site. Users have the option of managing cookies through web browser settings.

13. Managing Cookies

You can manage cookies through web browser settings, including blocking or deleting cookies. However, please remember that not accepting cookies may limit the functionality of our site and affect the comfort of using it. Information on managing cookies is available in your browser settings and on our website.

14. Changes to the Privacy Policy

The privacy policy may be updated to comply with applicable laws and our internal processes. Any changes to the privacy policy will be published on our website along with appropriate information for users. We encourage you to regularly check our privacy policy to stay up to date with any changes.

15. Contacting the Administrator

In matters related to the processing of personal data, you can contact us by e-mail or by post. Our team is available to answer any questions and concerns regarding the protection of personal data. Contact details can be found at the beginning of the privacy policy and on our website.

16. Account Registration

When registering an account, we collect data such as first name, last name, e-mail address, telephone number and home address. This data is necessary to set up an account and ensure the full functionality of our services. Account registration also allows you to track your order history and quickly place new orders.

17. Order Fulfillment

In order to fulfill orders, we process data necessary for delivery, including the delivery address and contact details. This data is shared with courier companies that carry out deliveries on our behalf. In addition, we process payment data to enable financial transactions.

18. Payment Services

We process financial data, such as bank account number, to process payments for ordered products. We cooperate with trusted payment operators to ensure transaction security. This data is processed solely for the purpose of payment processing and is not shared with other entities.

19. Complaints and Returns

In the case of complaints and returns, we process the data necessary to handle these processes, such as contact details and information about the order. The complaint and return process aims to ensure a high standard of customer service and quick resolution of problems. This data is processed in accordance with applicable laws and internal company procedures.

20. Direct Marketing

We may send marketing information electronically if you have given your consent. This information may include promotional offers, new products and other information related to our activities. Users have the option to withdraw their consent to receive marketing messages at any time.

21. Newsletter

If you have subscribed to the newsletter, we will process your e-mail address in order to send commercial information. The newsletter contains information about new products, promotions and events related to our offer. Users can unsubscribe from the newsletter at any time by clicking the appropriate link in the message received.

22. Analysis and Statistics

Personal data may be processed for analysis and statistics purposes in order to better understand the needs of our customers and adapt the offer to their expectations. These analyses help us to optimize business processes and improve the quality of the services provided. Data used for analytical purposes is anonymized to ensure maximum security of personal data.

23. Transaction Security

In order to ensure the security of transactions, we use appropriate technical and organizational measures, such as data encryption and monitoring of IT systems. Thanks to this, we minimize the risk of unauthorized access to data and financial fraud. We regularly conduct security audits to ensure the highest level of protection of our customers' data.

24. Consent to Data Processing

Providing personal data is voluntary, however, failure to provide the data necessary to perform the contract may result in the inability to perform it. Before starting to process personal data, we obtain your consent to process data, if it is required. Consent may be withdrawn at any time, which does not affect the lawfulness of the processing carried out before its withdrawal.

25. Children's Personal Data

Our services are not intended for persons under 18 years of age, therefore we do not knowingly process children's personal data. In the event of obtaining information about the processing of children's personal data, we will immediately take action to delete such data. We encourage parents and guardians to monitor children's activity on the Internet in order to protect their privacy.

26. Processing of Sensitive Data

We do not process sensitive data, such as data concerning health, political views, religious denomination, etc. In the event of the need to process such data, we will obtain your express consent to its processing. We always ensure the highest level of protection of personal data, including sensitive data.

27. Changes to the Profile

Users have the option of changing their personal data through the user panel on the website. Thanks to this, you can update your data on an ongoing basis so that it is always up to date and correct. These changes may include, among others, contact details, address or shopping preferences.

28. Purchase History

We store your purchase history to provide you with access to previous orders and for analytical purposes. Purchase history allows us to better understand your preferences and adapt our offer to your needs. Thanks to this, we can also quickly and effectively solve any problems related to the execution of orders.

29. Surveys and Opinions

We may process personal data as part of surveys and opinions to improve our services. Participation in surveys is voluntary, and the data collected is used only for analytical purposes and to improve the quality of our products and services. Customer opinions and suggestions are very valuable to us and help us to continuously improve our offer.

30. Use of Tracking Technologies

Tracking technologies, such as cookies, may be used on our website to monitor user activity and personalize content. These technologies allow us to better understand how users use our website and what content is most interesting to them. This allows us to adapt our services to the needs of users and provide them with a better online experience.

31. Consent to Cookies

By continuing to use our website, you agree to the use of cookies in accordance with our cookie policy. Cookies are used to improve the functionality of the website and analyze traffic on the website. Users have the ability to manage cookies through their web browser settings.

32. Data Storage on Servers

Personal data is stored on servers located in Poland and secured in accordance with applicable security standards. Servers are monitored and protected against unauthorized access to ensure the highest level of data protection. We cooperate with trusted hosting service providers who meet high data security requirements.

33. Employee Rights

The privacy policy also covers personal data of employees processed for HR and payroll purposes. This data is processed in accordance with applicable labor law and internal company regulations. Employees have the right to access their data, rectify it and delete it if it is no longer necessary for the purposes for which it was collected.

34. Data Protection Training

Cinematic Studio employees regularly participate in personal data protection training. The aim of these trainings is to raise awareness and knowledge of employees about data protection regulations and applied security procedures. In this way, we ensure that personal data is processed in accordance with the highest standards of security and compliance with the law.

35. Security Incidents

In the event of security incidents, we take appropriate steps to minimize the risk and inform data subjects and relevant supervisory authorities. We apply incident management procedures that include identification, assessment and response to security incidents. Our goal is to manage incidents quickly and effectively to ensure the security of personal data and minimize their effects.

36. Data Retention Policy

We have a data retention policy specifying the retention periods for individual categories of personal data. These periods are determined in accordance with applicable law and the internal needs of the company. After the specified periods, the data is deleted or anonymized to ensure compliance with personal data protection regulations.

37. Anonymization and Pseudonymization of Data

Whenever possible, we use anonymization and pseudonymization of personal data to increase their protection. Anonymization consists in removing identifying elements, which makes it impossible to assign data to a specific person. Pseudonymization consists in replacing identifiers with other characters, which makes it difficult to identify the data subject without additional information.

38. Use of Consents

Consents to the processing of personal data are given voluntarily and may be withdrawn at any time without affecting the lawfulness of the processing carried out on the basis of consent before its withdrawal. Before starting to process data, we inform you about the purpose and scope of processing and ask for your consent. You can withdraw your consent by contacting the data controller.

39. Monitoring and Auditing

We regularly monitor and audit our personal data protection procedures to ensure their compliance with applicable regulations. These audits include an assessment of the technical and organizational measures we use to protect personal data. This allows us to continuously improve our processes and ensure the highest level of data security.

40. Cooperation with Law Enforcement Authorities

If we receive appropriate requests, we cooperate with law enforcement authorities in the transfer of personal data in accordance with applicable law. Data is transferred only on the basis of formal requests and in accordance with security procedures that ensure the protection of processed data. Our goal is to ensure compliance with legal regulations while protecting the privacy of our customers.

41. Additional Information

Additional information regarding the processing of personal data may be available on our website or provided upon request by the data controller. If necessary, we will provide assistance and provide detailed information regarding data processing. We invite you to contact us to obtain any necessary information regarding the protection of personal data.