+48 729 357 547
Privacy Policy
PRIVACY POLICY
EXOTIC CITY ONLINE STORE
(effective as of 20.06.2025)
Data Controller
The controller of personal data is:
Dinner Safari African Restaurant Sp. z o.o.
ul. Krowoderska 46/LU1
31-158 Kraków
NIP (Tax ID): 9452245785
REGON: 389353151
E-mail: exotic.city.poland@gmail.com
The Controller processes personal data in accordance with:
Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
the Polish Personal Data Protection Act,
the Act on Providing Services by Electronic Means,
the Polish Telecommunications Law.
Scope and Purpose of Data Processing
Personal data is processed for the following purposes:
fulfillment of orders placed in the online store,
conclusion and performance of sales agreements,
payment processing,
delivery of goods,
handling complaints and returns,
issuing invoices and accounting purposes,
contacting Customers,
sending newsletters (with consent),
ensuring the security and proper functioning of the website.
Legal bases for processing:
Article 6(1)(b) GDPR – performance of a contract,
Article 6(1)(c) GDPR – legal obligation (accounting, taxation),
Article 6(1)(f) GDPR – legitimate interest of the Controller,
Article 6(1)(a) GDPR – consent (newsletter, marketing).
Scope of Processed Data
Depending on the purpose, we may process:
first and last name,
company name,
Tax ID number (for businesses),
delivery address,
phone number,
e-mail address,
IP address,
order details,
data included in correspondence.
Providing data is voluntary, but necessary for order fulfillment.
Data Recipients
Personal data may be transferred to entities cooperating with the Controller, in particular:
the payment operator eService,
banks processing payments,
courier companies,
parcel locker operators,
accounting office,
hosting and IT service providers.
Personal data is not sold to third parties.
Data may be disclosed to public authorities only where required by law.
Data Retention Period
Personal data is stored:
for the duration of the contract and until the limitation period for claims expires,
accounting data – for 5 years (in accordance with tax regulations),
marketing data – until consent is withdrawn,
technical data (cookies) – in accordance with the lifecycle of cookies.
After the indicated periods, data is deleted or anonymized.
Newsletter
If you subscribe to the newsletter:
we process your e-mail address,
we send marketing and promotional information,
you may withdraw your consent at any time via the unsubscribe link in the e-mail or by contacting the Controller.
Payments
In the case of online payments, data is transferred to the payment operator eService.
The Controller does not store credit or debit card details.
Cookies
The website uses cookies in order to:
ensure proper functioning of the website,
operate the shopping cart,
remember user settings,
analyze website traffic (e.g., Google Analytics),
conduct marketing activities (e.g., Facebook Ads, Google Ads).
Types of cookies:
necessary (technical),
analytical,
marketing,
functional.
During the first visit, the user may consent to selected types of cookies.
Users may change cookie settings at any time in their browser.
Limiting the use of cookies may affect website functionality.
External Tools
The website may use:
Google Analytics,
Google Ads,
Google Tag Manager,
Facebook Pixel,
Meta marketing tools (Facebook/Instagram),
YouTube (embedded videos).
These providers may process data as independent controllers.
User Rights
Every data subject has the right to:
access their data (Article 15 GDPR),
rectify data (Article 16 GDPR),
erase data (Article 17 GDPR),
restrict processing (Article 18 GDPR),
data portability (Article 20 GDPR),
object to processing (Article 21 GDPR),
withdraw consent at any time,
lodge a complaint with the President of the Personal Data Protection Office (Poland).
To exercise your rights, please contact:
exotic.city.poland@gmail.com
The Controller will respond within 30 days.
Profiling
Personal data may be processed in an automated manner (profiling) for marketing purposes; however, this does not produce legal effects for the user.
Users have the right to object to profiling.
Data Security
The Controller applies appropriate technical and organizational measures to ensure personal data protection, including:
SSL encryption,
server security measures,
restricted access to data,
data processing agreements with partners.
Changes to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy.
The new version becomes effective upon publication on the website www.exoticcity.pl.
Contact
For matters related to personal data, please contact:
📧 exotic.city.poland@gmail.com
📍 Dinner Safari African Restaurant Sp. z o.o.
ul. Krowoderska 46/LU1
31-158 Kraków
Poland
