Skip to content

Privacy Policy of the Tokenuj website

This is an informational translation of the Privacy Policy; in case of discrepancies, the Polish version is binding.

Table of contents
  1. §1 General provisions
  2. §2 Privacy principles
  3. §3 Scope and purpose of collecting personal data
  4. §4 Cookies
  5. §5 Rights and obligations
  6. §6 Basic security principles
  7. §7 Use of social media plugins

§1 General provisions

  1. This Privacy Policy constitutes an annex to the Terms of Use of the website https://tokenuj.pl/. By using our services, you entrust us with your information. This Privacy Policy is intended to help you understand what information and data are collected, for what purpose, and how we use them. These data are very important to us, so please read this document carefully, as it sets out the rules and methods of processing and protecting personal data. This document also sets out the rules for the use of cookies.
  2. We comply with the principles of personal data protection and with all legal regulations provided for in:
    • the Act of 10 May 2018 on the Protection of Personal Data (Journal of Laws 2019, item 1781),
    • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).
  3. The person whose personal data we process has the right to obtain comprehensive information on how we use their personal data. We inform about the data we collect, the ways we use them, the purposes, the recipients and the data protection measures.
  4. The Seller applies technical and organisational measures protecting personal data, including:
    • physical and IT safeguards,
    • measures protecting the IT infrastructure and databases,
    • procedures restricting access by unauthorised persons.
  5. Access to personal data may be granted exclusively to:
    • authorised employees,
    • entities processing data on behalf of the controller (e.g. payment operators, IT service providers, entities fulfilling orders).
  6. Personal data are processed exclusively for the purposes for which they were collected, on the basis of:
    • the user's consent (Article 6(1)(a) GDPR),
    • performance of a contract/service (Article 6(1)(b) GDPR),
    • a legal obligation (Article 6(1)(c) GDPR),
    • the legitimate interest of the controller (Article 6(1)(f) GDPR).

§2 Privacy principles

  1. We process personal data fairly, diligently and only to the extent necessary to achieve the purposes for which they were collected.
  2. The user has the right to clear information on how we process their data.
  3. In case of doubts regarding data processing, we take explanatory action.
  4. The controller of personal data is Tokenuj with its registered office at ul. Sienna 9, 70-542 Szczecin, Poland, Tax ID (NIP): 9552589254.
  5. In order to protect data:
    • we control the methods of collecting and processing information,
    • we restrict access only to authorised persons bound by confidentiality.
  6. We comply with the applicable laws and cooperate with supervisory authorities.
  7. The method of data protection is set out in the Personal Data Security Policy and the IT Systems Management Manual.
  8. In matters concerning personal data, please contact us via the form on the website.
  9. The user has the right:
    • not to receive marketing information,
    • to obtain a copy of their data,
    • to rectify, update or erase data,
    • to report breaches or irregularities.
  10. To facilitate contact, please provide your first name, surname and the details of the matter.

§3 Scope and purpose of collecting personal data

  1. Data are processed for purposes such as:
    • fulfilment of orders and contracts,
    • handling of complaints and returns,
    • issuing accounting documents,
    • analysis of website traffic,
    • statistics and content personalisation,
    • e-mail and telephone communication,
    • integration with social media,
    • processing of online payments.
  2. The data collected may include:
    • first name and surname,
    • residential and delivery address,
    • Tax ID (NIP), e-mail, telephone,
    • PESEL (national identification number), date of birth,
    • technical data of the browser,
    • other data provided voluntarily.
  3. Providing data is voluntary but necessary for the provision of services.
  4. Data may be transferred to EEA countries for the purpose of providing services in accordance with the GDPR.
  5. We store data for the period of:
    • the duration of the contract and after its termination – in accordance with the law,
    • until the expiry of the limitation period for claims or legal obligations.
  6. We store marketing data until consent is withdrawn.
  7. We store data from competitions or promotions until they are settled.

§4 Cookies

  1. The website uses cookies – small text files stored in the user's browser.
  2. Cookies are used to:
    • maintain the user session,
    • personalise content,
    • perform statistical analysis and remarketing.
  3. The controller processes data from cookies in order to:
    • optimise the operation of the website,
    • remember the user's preferences,
    • compile statistics (e.g. Google Analytics),
    • carry out remarketing (e.g. Facebook Ads, Google Ads).
  4. The user may block or delete cookies at any time in the browser settings.
  5. Blocking cookies may limit the functionality of the website.
  6. Detailed information can be found in the documentation of the user's browser.

§5 Rights and obligations

  1. We may be obliged to disclose data to public authorities on the basis of the law.
  2. The user has the right:
    • to access their data,
    • to rectify and complete them,
    • to request erasure or cessation of processing.
  3. Where data are processed on the basis of the controller's legitimate interest, the user has the right to object.
  4. In the case of marketing consent, the user may withdraw it at any time.
  5. Erasure of data may prevent the further provision of services.
  6. Data profiling takes place:
    • on encrypted data (SSL),
    • on the basis of e-mail, IP address or cookies,
    • in order to tailor the marketing offer and content.
  7. The entity competent for out-of-court dispute resolution is the Polish Financial Ombudsman (Rzecznik Finansowy, www.rf.gov.pl).
  8. A complaint may be lodged with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

§6 Basic security principles

  1. The user should:
    • use up-to-date antivirus software,
    • update the operating system and browser,
    • use strong passwords and PINs,
    • avoid storing passwords in a visible form.
  2. Caution should be exercised when opening e-mail messages from unknown senders.
  3. It is advisable to activate anti-phishing filters in the browser.
  4. Files and applications should be downloaded only from trusted sources.
  5. For Wi-Fi, strong passwords and WPA2 or higher encryption should be used.

§7 Use of social media plugins

  1. The website may contain plugins of social networking services, including Facebook and Twitter.
  2. Facebook is operated by Meta Platforms Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA. More information: https://developers.facebook.com/docs/plugins
  3. Twitter is operated by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. More information: https://dev.twitter.com/web/tweet-button
  4. The plugins transmit to the providers information about the pages visited and the time of the visit. If the user is logged in to their account, these data may be linked to their profile.
  5. Privacy policies:
    • Facebook
    • Twitter
  6. To avoid the linking of data, log out of your accounts before visiting our website.

Your choice is stored for 12 months in the essential cookie “tk_consent”. Privacy policy