Privacy policy

Giving personal data and the consent for its processing are not obligatory. Any data given to us is processed only for the scope and aim for which the consent was given to. But, if you decide on refusing to reveal the data necessary to execute the order and refuse to agree for data processing, unfortunately, we will not be able to execute your order. 

Please note that, at any time, you can update or remove your personal data. You can do it yourself or with our support still available for you. 

Our company abides by restrictive personal data protection policy. Your personal data will be safe and we are doing our best to improve the level of protection each year. We believe that acknowledgement of our privacy policy will allow you to feel safe and enjoy shopping in RAK HAFFER (www.rakhaffer.com)

I. Personal Data Controller

The Personal Data Controller of RAK HAFFER (herein under ADO), responsible for protecting your personal data is:

Cereus Wena Adam i Grażyna Witkowscy S.J. ul. Biała 19 87-100 Toruń NIP: 879-017-46-31, REGON: 005741669

II. Protection system of personal data

ADO has implemented technical and organisational means which provide security of processed data according to the requirements determined in the binding law regulations on personal data protection. In particular there are two documents considered: the order of the Minister of Internal Affairs and Administration of the date of 29 April 2004 on the documentation required for processing of personal data and technical and organisational conditions of devices and IT systems engaged into processing of personal data. (Dziennik Ustaw No. 100, item 1024); guidelines of General Inspector of Personal Data Protection; Order of European Parliament and Council (UE) 2016/679 of the date of 27 April 2016 on the protection of physical persons in relation to personal data processing and free movement of such data and the repeal of the directive 95/46/WE.

The most important elements of the applied system of personal data protection are:

  1. SSL certificate, which guarantees that communication between your computer and RAK HAFFER is coded with a 256- bit key.
  2. We collect and process only necessary personal data and for the shortest possible period of time, and for any other actions which are not related to the purchase contract you will be asked to give a separate consent.
  3. The access to your personal data is given only to authorised and trained people knowledgeable of personal data protection, which situation gives you a guarantee of data security. 
  4. IT system applied by RAK HAFFER and in-company procedures fulfil any standards of personal data protection. 

ADO, therefore, fulfils any legally required obligations in the scope of personal data protection. 

III. Personal data, aim and time of storing

A. Registration

During the registration you will be asked to give the data which is necessary to create an account in RAK HAFFER, and therefore you do not have to lose your time by completing an order form while shopping again. Registration saves time and money since registered Clients participate in a loyalty program and receive rebates for previous purchase.

A registered Client after logging-in is able to verify their order and history of performed purchases. A registered and logged-in Client may at any time modify, supplement or remove personal data on their own from RAK HAFFER.

During registration you will be asked for:

  1. Name and surname – necessary for issuing a purchase document and addressing the parcel;
  2. address (street, number of a house/or number of a house and premises, postal code and city) – necessary for addressing the parcel;
  3. e-mail – necessary for logging-in and communication related to shopping at RAK HAFFER;
  4. telephone number – necessary for the choice of certain options of delivery (required by carriers).

The data is stored for the period of 5 years counting from the last logging-in. 

B. Placing an order

While placing an order you will be asked for the data necessary to execute the order, which in case of registered and logged-in Clients is partially taken automatically from the data given during first registration to the system. 

While placing an order you will be asked to give:

  1. name and surname or name of company/institution – necessary for issuing a purchase document and addressing the parcel;
  2. address (street, number of a house/or number of a house and premises, postal code and city) – necessary for addressing the parcel;
  3. e-mail – necessary for communication related to the execution of the order;
  4. a telephone number – necessary for the choice of certain options of delivery (required by carriers).

If, while placing an order, the Client chooses other address than the one given at the registration or submitting an order, we also ask for:

  1. name and surname or name of company/institution – necessary for addressing the parcel;
  2. address (street, number of a house/or number of a house and premises, postal code and city) – necessary for addressing the parcel;
  3. telephone number – necessary for the choice of certain options of delivery (required by carriers).

If, while placing an order, the Client chooses the option of issuing a purchase document for data other than given at registration or submitting an order, we also ask for:

  1. name and surname – necessary for issuing a purchase document 
  2. address (street, number of a house/or number of a house and premises, postal code and city) – necessary for issuing a purchase document;

The data given while placing an order is processed by RAK HAFFER and by the following entities within the scope given below:

Name and surname, address, telephone and email address are given to carrier companies as labels/shipping list which is at the same time an order for delivery of a parcel depending on the chosen option to:

    1. Poczta Polska SA seated in Warsaw (registration no.KRS: 0000334972, taxpayer no. NIP: 525-000-73-13)
    2. UPS Polska Sp. z o.o. seated in Warsaw (registration no. KRS: 0000036680, taxpayer no. NIP: 5221004200)

In case of choosing the payment through an external payment system, any data given at the moment of being directed at the operator’s site is registered only in their database and is not available or stored by RAK HAFFER.

RAK HAFFER cooperates with the following payment operators:

Blue Media S.A seated in Sopot (registration no. KRS: 0000320590, taxpayer no. NIP: 585-13-51-185) operator of payment service BlueMedia

PayPal operator of payment service PayPal.

The data is stored for the period of 5 years counting from the end of the calendar year following the year of issuing a purchase document, according to the applicable regulatory provisions in terms of time of storing intended for accounting documents.

C. Marketing

In case of subscribing a newsletter and giving consent for its reception at the moment of registration or placing an order, we only ask for and e-mail address to direct commercial information from RAK HAFFER, which may be resigned from at any time by logging-in onto the personal account in RAK HAFFER, and clicking the link annulling the subscription which is placed in the footer of the newsletter, or by contacting us via e-mail: office@rakhaffer.com.

D. Correspondence

In case we receive your personal data which is not necessary to execute the contract or legal obligation e.g. for correspondence, your data in forms of contract withdrawal, guarantee or warranty will be removed or made anonymous and will not be processed. 

Please do not give any information or personal data which is not necessary and is irrelevant in terms of contract execution or legal obligation. 

IV. Cookies – your personal data which is automatically taken after entering RAK HAFFER

Cookies are IT data, in particular, text files, which is stored in a final device belonging to a Client of RAK HAFFER.

RAK HAFFER uses two basic kinds of cookie files: session cookies and persistent cookies. Session cookies are temporary files which are stored in a final Client’s device till the moment of logging out, leaving the site or switching off the software (internet browser) Persistent cookies are stored in a final Client’s device for a specific time in parameters of cookie files or till the time of their removal by a Client. 

RAK HAFFER uses the following kinds of cookie files:

  1. necessary cookies, enabling use of services available at RAK HAFFER; e.g. authorisation cookies used for authorising certain services;
  2. the cookies used for providing security, e.g. used for discovering misuses in terms of authorisation at RAK HAFFER;
  3. efficiency cookies enabling the collection of information on the manner of use of the RAK HAFFER internet site;
  4. functional cookies, enabling memorisation of the selection made by the Client in terms of settings and personalisation of RAK HAFFER interface;
  5. marketing cookies, enabling provision of advertisements to the Client which are suited for their interests.

In many cases the software used for browsing through internet sites (internet browser) allows for storing of cookies by default. 

If you do not agree to have cookie files on your device, you can block them by certain configuration of your internet browser. The information how to do such an operation is included in help files of your browser. Unfortunately, if you block cookies from RAK HAFFER, we cannot guarantee a proper functioning of the shop.

If you agree to have cookies on your device, but after visiting RAK HAFFER you wish to remove them, then you can do this without any risk and the information how to do so, are included in help files of your Internet browser.

A. RAK HAFFER (server)

IT system which is used by RAK HAFFER collects automatically the data related to the device in logos which is used at the moment of connecting to RAK HAFFER. The data is collected only for statistics and refers to: the type of device, operational system, kind of Internet browser, screen resolution, depth of colours, IP, service provider or an entry address to RAK HAFFER, and the data is used only for the process of improvement of RAK HAFFER in order to provide more comfortable conditions of use.

The data is never combined with the data mentioned in 3rd part, and it only constitutes material for statistical analysis and the mechanisms of correcting system errors. 

RAK HAFFER uses a shop software: Shoplo Sp. Z o.o. seated in Warsaw, registration no. KRS: 0000417586, taxpayer no. NIP: 5213630420. 

The data is stored for 24 months from the last activity.

B. RAK HAFFER (cookies)

RAK HAFFER uses technology of cookies, i.e. text files placed on your device, in order to enable RAK HAFFER to recognise you and facilitate RAK HAFFER to your needs.

RAK HAFFER uses cookies to:

  1. memorise logging -in (session lasts 30 minutes from the last activity, then the cookie is removed);
  2. memorise the content of your basket (session lasts 30 days from the last activity, then the cookie is removed);
  3. memorise your preferences of display at RAK HAFFER (session lasts 30 days from the last activity, then the cookie is removed);
  4. compile statistics and reports of viewing at RAK HAFFER; (session lasts 30 days from the last activity, then the cookie is removed);
  5. personalize the layout of RAK HAFFER by showing the products which are chosen by algorithm as interesting for you on the basis of the products which you bought, put into the basket, searched in the shop and their authors, producers and the category, i.e. similar products, but never combined directly with your personal data (session lasts 30 days from the last activity, then the cookie is removed);

C. Google Analytics (cookies)

Google Analytics uses technology of cookies, i.e. text files placed in your device in order to analyse by RAK HAFFER the source of movement and the manner the visitors use it.

Google collects on its servers the data received by placing cookie files and uses the information to make reports and provide other services related to the movement and use of the Internet. 

Google may transfer the information to third parties if it is required by legal regulations or in case of the persons who process the data on behalf of Google.

The data is never combined with the data mentioned in 3rd part and it only constitutes material for statistical analysis and the mechanisms of correcting system errors. 

The data is processed for the period of 12 months from the last activity, but then the cookie is removed.

D. Google AdWords (cookies)

Google AdWords uses technology of cookies, i.e. text files placed in your device in order to analyse by RAK HAFFER the assessment of proper and efficient advertising activity with the use of AdWords.

Google collects on its servers the data received by placing cookies in the devices and uses the information in order to make reports and provide other services related to the movement and use of the Internet.

Google may transfer the information to third parties if it is required by legal regulations or in case of the persons who process the data on behalf of Google.

The data is never combined with the data mentioned in 3rd part and it only constitutes material for statistical analysis and the mechanisms of correcting system errors. 

The data is processed for the period of 12 months from the last activity, but then the cookie is removed.

E. Cookies coming from servers of our partners

RAK HAFFER uses scripts and elements of software which are delivered by and located in the serves belonging to business partners.  Cookies may include data which is necessary for the partner to perform service for  RAK HAFFER or including data other than mentioned in a privacy policy. 

RAK HAFFER carefully selects their business partners, however is not responsible for their policy in terms of cookies. Therefore, we recommend verification of each of our partners on your own and deciding whether accept their cookies. 

V. Security of privacy policy of RAK HAFFER partners

RAK HAFFER carefully selects their business partners and carefully verifies links to other internet sites placed in RAK HAFFER. RAK HAFFER is not responsible for the standard and privacy policy used by the owners, operators or controllers of these sites. Therefore, we recommend verification of each of our partners on your own and deciding on the delivery of personal data to them.


Instagram - www.instagram.com

VI. Transfer of your personal data

In certain cases, binding law regulations require that Personal Data Controller transfers the collected data to state authorities and RAK HAFFER is obliged to do so. 

Except for these situations, Your personal data in the range permitted by law on the grounds of separate contracts of data transfer, will be given to certain entities only and in relation to the necessity to execute contractual or legal obligation of Personal Data Controller. Such entities include: advertising agencies, banks, accounting offices, IT service providers, delivery companies, logistic companies, payment institutions and carriers. 

In case of such a transfer, Personal Data Controller concludes certain contracts with these entities which guarantee the highest standard of protection and keeping secrecy and security of personal data and its use only for the execution of contractual or legal obligation by Personal Data Controller. 

VII. Modification of Privacy Policy at RAK HAFFER

RAK HAFFER reserves the right to change the privacy policy, unless it is required by binding law and the change will refer to technological aspects of operation of RAK HAFFER or the change will implement a higher standard than the one required by law.

Such a change will be communicated by RAK HAFFER via e-mail (to the address given at registration). 

Current text of privacy policy will be always placed at http://pl.rakhaffer.com/strona/polityka_prywatnosci.

VIII. Your rights

According to the binding law, in terms of your personal data you are entitled to:

  1. refuse or limit personal data processing;
  2. oppose to personal data processing;
  3. access to personal data;
  4. update or remove personal data;
  5. transfer of personal data;
  6. withdraw your consent for personal data processing;
  7. complain to supervisory body – President of Personal Data Protection Office.

These rights are non-transferable and must not be limited. We are always ready to help and inform you, and a part of the mentioned rights may be exercised on your own.

IX. Contact data

RAK HAFFER contacts you with the use of the given e-mail address, and only in specific situations we contact you with a telephone number. In case of any questions or doubts in terms of privacy and protection policy related to your personal data, we encourage you to direct enquires to office@rakhaffer.com.

If you wish to update or remove your personal data, unless you cannot or do not want to do it yourself, please direct enquiries to office@rakhaffer.com.

For the abovementioned issues you may also contact:

Cereus Wena Adam i Grażyna Witkowscy S.J. ul. Biała 19 87-100 Toruń taxpayer no. NIP: 879-017-46-31, registration no. REGON: 005741669