Thank you for your interest in our online store. Protecting your privacy is very important to us. In this privacy policy, you will find detailed information on how we handle your personal data. Who is the controller of your data?

The controller of your data is:

Good Spirits Co. Spółka z ograniczoną odpowiedzialnością

ul Kormorana 10, 11-034 Tomaszkowo

VAT ID: 7393990812

How do we process your data?

Your personal data is processed for the following purposes: Website usage, account — we process personal data in order to provide services, including registration and managing your account on the www.good-spirits.com website. The legal basis for processing personal data is the performance of a contract for electronic services, in accordance with the Terms and Conditions (Article 6(1)(b) of the GDPR).

Orders

We process personal data to receive your order, conclude the contract, and fulfill the order, including handling payments and shipping products or preparing them for pickup. The legal basis for processing is the performance of pre-contractual steps and contract execution (Article 6(1)(b) of the GDPR), as well as the fulfillment of tax and accounting obligations (Article 6(1)(c) of the GDPR). Providing information about products, services, and promotions If you give your consent, we will process your data to send you emails or SMS messages about our products, services, promotions, and the activities of Good Spirits, as well as to analyze our marketing efforts. Personal data is processed based on our legitimate interest in conducting marketing activities (Article 6(1)(f) of the GDPR).

Advertising

We use your personal data to display advertisements on this website and on other websites, as well as to analyze the effectiveness of our marketing activities. These ads may be unrelated to your preferences, aligned with the topic of the website, or personalized based on your interests and preferences (e.g., based on your activity on this website). The legal basis for data processing in this context is our legitimate interest (Article 6(1)(f) of the GDPR).

Social media platforms

When you visit our pages on social media platforms (e.g., Facebook, Instagram), we process your personal data. We do this to promote our business, communicate with users, and for statistical and analytical purposes. We process user data in accordance with the terms and policies of each platform. This includes: usernames, logins, profile pictures and other public photos, names of users who like or follow our content, as well as any data contained in posts, comments, reviews, reactions, and other user activity on our social media pages. The legal basis for processing is our legitimate interest (Article 6(1)(f) of the GDPR). We inform you that, in the case of Facebook, we act as joint controllers of your data together with Facebook Ireland for statistical purposes. The joint controllership terms can be found at https://www.facebook.com. Our use of Facebook products is subject to Facebook’s terms. More information on page insights is available at https://www.facebook.com. Further details on how Facebook Ireland processes personal data, the legal basis, and your rights can be found in Facebook’s Data Policy: https://www.facebook.com/about/privacy

Competitions

When you participate in a competition organized by us, we use your personal data to manage and settle the competition and to deliver prizes, based on our legitimate interest (Article 6(1)(f) of the GDPR). In the case of winning a prize that involves tax or accounting obligations, your personal data will also be used for compliance with legal obligations (Article 6(1)(c) of the GDPR).

Statistics, analytics, service improvements, user experience optimization, and IT security — we process your personal data for these purposes, including IP address, operating system info, device type, browser, language preferences, unique ID and device ID, as well as activity on the website. The legal basis is our legitimate interest (Article 6(1)(f) of the GDPR).

Cooperation with Contractors

We process personal data for the purpose of cooperation, communication, conclusion, and execution of contracts.

• • • • We process personal data of our contractors who operate as sole proprietors or enter into contracts with us as natural persons based on the necessity to take action before concluding and performing a contract (Art. 6(1)(b) GDPR).
      • We process personal data of contractor representatives, including names, contact information, and other data specified in contracts, powers of attorney, or court registries based on our legitimate interest in conducting cooperation and executing contracts (Art. 6(1)(f) GDPR).
      • We process personal data of employees of contractors, including names, job titles, and work contact details, based on our legitimate interest in cooperating and fulfilling contracts with contractors (Art. 6(1)(f) GDPR).
  • The above personal data are also processed to comply with legal obligations, including tax and accounting regulations (Art. 6(1)(c) GDPR), and for marketing purposes based on our legitimate interest (Art. 6(1)(f) GDPR) in promoting our business, improving our services and products, and building business relationships.
  • Personal data of representatives and employees are usually provided to us by the contractor.

Contact, Response to Inquiries

We process your personal data to respond to inquiries, maintain communication, or take actions related to messages received from you. The legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR).

Claims and Complaints

If you file a complaint, we will process your personal data to review it in accordance with our terms. The basis for data processing is the performance of a contract (Art. 6(1)(b) GDPR). In case of disputes, violations of terms, or other agreements, we may process your data to establish, assert, or defend claims. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). In most cases, providing personal data is voluntary, but failure to do so may result in the inability to complete purchases, send inquiries, or participate in contests. Some data may be required by law, such as those necessary for tax compliance. In such cases, failure to provide the data may prevent us from delivering a contest prize.

Trusted Shops Trustbadge Integration

To display our Trusted Shops quality mark, customer reviews, and available product offers after ordering, our website is integrated with the Trusted Shops Trustbadge. This serves our legitimate interest (Art. 6(1)(f) GDPR) in presenting our offer optimally. The Trustbadge is provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany. When using the Trustbadge, the server automatically stores server logs, such as your IP address, date and time of request, data volume transferred, and requesting internet service provider. These logs are not analyzed and are automatically overwritten within seven days after your visit. Other personal data are only transmitted to Trusted Shops if, after placing an order, you choose to use Trusted Shops products or have already registered to use them. The data processing in such cases is governed by Trusted Shops’ privacy policy and terms.

How Long Do We Store Your Personal Data?

We process your personal data for as long as necessary to achieve the purposes of processing. If your personal data are no longer needed for the purposes described in this Privacy Policy, we will delete them promptly. In particular:

• • • • when data are processed for the performance of a contract and service provision, they will be stored until the contract is fulfilled and then for the limitation period of claims resulting from the contract, usually 3 or 6 years, but in special cases defined by law it may be longer
      • when we have legal obligations, including tax and accounting obligations, we will store personal data for the period required by specific laws
      • when data are processed based on consent, we will process them no longer than until the consent is withdrawn
      • when data are processed based on legitimate interest, we will process them until the objection to processing is considered valid
      • in the case of contests, we will process the data for the duration of the contest, the period needed to issue prizes, and handle complaints
      • to establish, assert, or defend against claims, we will process your data for the limitation period of claims, usually 3 or 6 years, though it may be longer in specific legal cases.

Who Do We Share Your Personal Data With?

To operate our website properly, we require the support of external service providers. These providers, in order to provide their services, will have access to personal data to the necessary extent. We can divide them into two groups:

• • • • Service providers to whom we transfer personal data and who act on our instructions regarding the purposes and methods of processing these data (so-called processors): hosting and website maintenance providers, IT and application service providers, analytics tools providers, marketing agencies, accounting firms, and providers of personalized marketing campaign tools.

• • • • Service providers who determine the purposes and methods of personal data processing independently (controllers): advertising network operators, law firms, auditors, consultants, postal operators, courier companies, telecommunications operators, payment operators, including deferred payment services.

Additionally, we disclose personal data when required by applicable law, especially upon request from the prosecutor’s office, police, or other government authorities.

We generally do not transfer personal data outside the European Economic Area (EEA). However, if we do, we ensure that the transfer complies with the law and appropriate safeguards are in place. This includes the use of Standard Contractual Clauses approved by the European Commission. To receive a copy of these clauses, please contact us.

Your Rights

In connection with the processing of your data, you have the right to request:

• • • • access to your personal data
      • deletion of your data
      • correction of personal data
      • restriction of data processing
      • data portability to another entity.

You also have the right to:

• • • object, for reasons related to your particular situation, to the processing of your personal data based on our legitimate interests (if such objection is valid and there is no other legal basis, we will delete those data), and to object to the processing of your personal data for direct marketing purposes, including profiling
    • withdraw your consent to the use of personal data at any time; withdrawal does not affect the legality of data processing based on consent before its withdrawal
    • lodge a complaint with a data protection authority. In Poland, this is the President of the Personal Data Protection Office.

How to Contact Us

If you have any questions regarding this Privacy Policy or wish to exercise your rights, please contact us at info@good-spirits.com or the mailing address provided above.

Cookies

Cookies are small text files stored on your devices while browsing websites. Cookies usually contain the name of the website, storage time on your device, and a unique number. We and our advertising partners store cookies on your devices if you consent. This does not apply to cookies necessary for service delivery. By changing your browser settings, you can delete already stored cookies (including browsing history and cached files) or block the storage of new cookies. Depending on your settings, you may block or delete all or some cookies. You can also use private browsing mode, which limits the data transmitted. For browser-specific information, visit the provider’s website. Below are links for popular browsers:

Internet Explorer™: support.microsoft.com Safari™: safari.helpmax.net Chrome™: support.google Firefox™: support.mozilla.org Opera™: help.opera.com

If you do not agree to the use of cookies, some website functionality may be limited. We use cookies for the following purposes:

• • • • providing electronic services. These cookies are essential for the proper functioning of the site and its features, such as making purchases, security, and fraud prevention
      • performance analysis, site usage statistics, and analytics. Data collected through these cookies help us improve and analyze site performance
      • marketing activities. These data allow us to select and deliver ads and measure their performance both on our site and on other websites and applications. We may share information such as encrypted email address or device details and customer ID with third parties (e.g., Facebook or Google) to present relevant ads on other sites and apps. We also collect data on ad interactions, such as clicks and resulting purchases. We cooperate with external partners to manage campaigns and reach users across the web and apps.

For performance, statistics, and analytics of our site usage, we use Google Analytics technology. You can block data collection via browser settings. You can also prevent sharing of your activity with Google Analytics by using the tool available at: https://tools.google.com/dlpage/gaoptout We also use Matomo technology (https://matomo.org) provided by InnoCraft Ltd. to analyze website usage. While visiting our website, data are automatically collected and stored to create user profiles using pseudonyms. This serves our legitimate interest in presenting our offer optimally. Cookies may be used for this purpose.

Data processing in connection with the above web analytics is carried out on our servers. You may object to future data collection and storage at any time.

Privacy Policy Updates

This Privacy Policy may be updated periodically. We will post information about any significant changes on our website and indicate the date of the last update at the top of this document.