Privacy policy
Pepco POLAND SP. Z O.O.
Version applicable as of 26 October 2023
This Privacy Policy defines detailed rules of processing of personal data collected by Pepco Poland Sp. z o.o. from users of its websites.
1. Admin
Pepco Poland Sp. z o.o. with its registered office in Poznań, ul. Strzeszyńska 73A
2. The Pepco Group’s Data Protection Officer and their contact details
All Pepco Group companies have appointed a data protection officer, who may be consulted on all matters regarding the processing of personal data and the exercise of rights related to data processing.
If you wish to contact the Pepco Group’s Data Protection Officer, please use the following contact details:
Address: Daniel Wieszczycki
Data Protection Officer (Inspektor Ochrony Danych Osobowych)
Pepco Poland Sp. z o.o., ul. Strzeszyńska 73A, Poznań
E-mail address: iodo@pepco.eu
3. What are the purposes for which your personal data are processed?
3.1 In general, visiting our websites does not require you to provide your personal data.
3.2 When you use our websites, we collect information on User interactions with the websites and content, including: information on the device and logging, i.e. system logs which include the date and time of visit and the IP number of the device from which the connection was made, as well as viewing statistics for the websites, traffic to and from individual sites. The above actions are intended to improve the websites. Data stored in server logs are not associated with any individual persons using the website or the system and are not used by the Admin to identify the User.
3.3 Subject to your express consent, we may also use technologies such as cookies and we may process personal data, such as IP addresses and cookie IDs, to personalise the displayed content and ads based on your interests, measure the performance of ads and content, and obtain information on the recipients who have viewed ads and content.
3.4 In addition, your data may also be processed, subject to your express consent, for the purpose of direct marketing through a newsletter. For more information see Pepco Newsletter Privacy Policy.
4. How long will your personal data be stored?
4.1 For the purpose of bot and abuse management as well as for statistical and service improvement purposes, your data will be processed until you lodge an objection or until you no longer use the Admin’s services.
4.2 Data used to personalise the displayed content and ads, measure the performance of ads and content, and obtain information on the recipients who have viewed ads and content, will be processed until withdrawal of your consent for such processing.
4.3 We will continue sending you the newsletter until you withdraw your consent to receive it.
5. What is the legal basis for the processing your personal data?
5.1 For the purpose of bot and abuse management as well as for statistical and service improvement purposes, and in some cases for marketing purposes, your data will be processed on the basis of point (f) of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) (legitimate interests pursued by the Admin). The Admin’s legitimate interest is to ensure the security of its services, continuous improvement of the Admin’s products and to carry out statistical surveys.
5.2 In the case of data processed for the purpose of personalising the displayed content and ads, measuring the performance of ads and content, and obtaining information on the recipients who have viewed ads and content, the legal basis for the processing of your personal data is point (a) of Article 6(1) of the GDPR – your voluntary consent.
5.3 The legal basis for sending the newsletter is also your voluntary consent.
6. Requirement to provide data
6.1 For the purpose of bot and abuse management within the Admin’s services, for statistical measurements and improvement of the Admin’s services, data processing is necessary to ensure high quality of the Admin’s services. Failure to collect your personal data for these purposes may prevent proper provision of the services.
6.2 In the case of data processed for the purpose of personalising the displayed content and ads, measuring the performance of ads and content, and obtaining information on the recipients who have viewed ads and content, such data will not be collected without your explicit consent.
6.3 Provision of personal data for marketing purposes (newsletter) is voluntary.
7. To which recipients will your personal data be transferred?
7.1 Your data may be transferred to entities that process personal data at the request of the Admin, including IT service providers and marketing agencies, with the proviso that such entities process data on the basis of a contract with the Admin and only in accordance with the instructions of the Admin.
7.2 Subject to your explicit consent, your data may also be transferred to other entities that analyse web traffic and personalise the displayed content and ads and measure the performance of ads and content.
7.3 Your data may also be transferred to entities authorised to obtain them under the applicable law, e.g. law enforcement authorities, if a relevant request is made by the authority on the appropriate legal basis (e.g. for the purposes of ongoing criminal proceedings).
7.4 The Admin’s websites may use so-called social plugins for social media such as Facebook, Google+, Twitter, Pinterest. Using the functions offered by those plugins, you can recommend particular content or share it on a given social network. Remember that by using these plugins, you exchange data between youtself and that social network. The Admin does not process such data nor is aware of what data is collected. Therefore, we encourage you to read the terms of use and privacy policies applied by the owners of such social media before using the plugin.
8. Transferring data outside the European Economic Area
Your personal data may be transferred to third countries outside the European Economic Area. Data may be transferred, for example, to the Google Group companies on the basis of a Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework containing the EU-US. Data Protection Framework issued by the US. Department of Commerce.
If you use our recruitment tools, data may also be transferred to the SAP Group companies whose services and systems we use in the recruitment process.
Data will be transferred to other entities only if they provide appropriate safeguards and provided that effective legal remedies with regard to personal data are available, for example, using the standard contractual clauses introduced by Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.
9. What are your rights with regard to processing your personal data?
You have the following rights related to how we process your personal data:
the right to access your data, including obtaining their copies,
the right to rectification of data,
the right to erasure of data (in certain situations),
the right to lodge a complaint with a supervisory authority dealing with the protection of personal data,
the right to restrict processing. To the extent that your data are processed on the basis of consent or as part of the service provided (data are necessary for the service provision), you may additionally exercise the following rights:
right to withdraw consent to the extent that they are processed on that basis. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
the right to data portability, i.e. to receive your personal data from the Admin, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another Admin.
To exercise these rights, please contact the Data Protection Officer at iodo@pepco.eu.
10. Cookies
10.1 When using the Admin’s websites, you remain anonymous until you decide otherwise. Information included in system logs that result from the general rules of Internet connections (e.g. IP address) is used by the Admin’s websites for technical purposes related to server administration. In addition, IP addresses are used to collect general, statistical demographic information (e.g. the region from which a connection is made).
10.2 Your web browser may store text files (“cookies”) on your computer. Cookies contain information necessary for the proper functioning of the website, in particular in its areas requiring authorisation.
10.3 The Admin’s websites store cookies on users’ computers for the following purposes:
to better adjust the websites to the needs of users; for example, to show a list of stores in your area;
to create viewing statistics;
to present online advertisements with content most relevant to the user’s interests.
10.4 Due to the life of cookies and other similar technologies, we use two essential types of cookies:
session – temporary files stored on the user’s end device until they log out, leave the website and application or disable the software (web browser);
permanent – stored in the user’s end device for the time specified in the parameters of cookies or until they are deleted by the user.
10.5 Due to the purpose used by cookies and other similar technologies, we use the following types:
files used for ensuring security, e.g. for abuse management
performance – enabling collection of information on how websites are used;
|
Name |
Vendor |
Purpose |
Duration |
|
rc::a |
This cookie is used to distinguish between humans and bots. |
Permanent |
|
|
rc::c |
This cookie is used to distinguish between humans and bots. |
Session |
|
|
test_cookie |
Used to check if the user’s browser supports cookies. |
1 day |
|
|
CONSENT |
Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website. |
2 years |
|
|
pepco_cookies |
Pepco |
|
1 month |
functional – enabling “remembering” of the user’s selected settings and personalisation of the user’s interface, for example with respect to a selected language or the region where the user is based, font size, website layout etc.;
|
Name |
Vendor |
Purpose |
Duration |
|
YSC |
Registers a unique ID to keep statistics of what videos from YouTube the user has seen. |
Session |
|
|
_ga |
Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
2 years |
|
|
_gat |
Used by Google Analytics to throttle request rate. |
1 day |
|
|
_gid |
Registers a unique ID that is used to generate statistical data on how the visitor uses the website. |
1 day |
|
|
collect |
Used to send data about the visitor’s device and behavior. |
Session |
|
|
_dc_gtm_ |
To store number of service requests. |
1 minutes |
|
|
AMP_TOKEN |
To store a unique user ID. |
30 seconds to 1 year |
|
|
__utma |
Used to distinguish users and sessions. |
2 years |
|
|
__utmt |
Used to throttle request rate. |
10 minutes |
|
|
__utmb |
Used to determine new sessions/visits. |
30 minutes |
|
|
__utmz |
Stores the traffic source or campaign that explains how the user reached your site. |
6 months |
|
|
__utmv |
Used to store visitor-level custom variable data. |
2 years |
|
|
OTZ |
Provides an aggregate analysis of website visitors. |
14 days |
advertising – enabling the provision of advertising content better matched to users’ interests; websites use retargeting, which is a form of online marketing. This allows our partners to display advertisements to users based on their interactions with the website. For example, users who have viewed information about clothing on the website may be displayed an advertisement presenting the viewed products when using other websites.
statistical – used for creating the statistics of websites and applications.
|
Name |
Vendor |
Purpose |
Duration |
|
_gac |
To store and track audience reach. |
90 days |
|
|
_gcl |
To store and track conversions. |
Permanent |
|
|
c_user |
To store a unique user ID. |
30 days |
|
|
presence |
Used to contain the user’s chat state. |
Session |
|
|
_js_datr |
To store user preferences. |
2 years |
|
|
_fbc |
To store last visit. |
2 years |
|
|
fbm* |
To store account details. |
1 rok |
|
|
xs |
To store unique session id. |
3 months |
|
|
wd |
To store the browser window dimensions. |
1 week |
|
|
fr |
Used for retargeting and ads delivery. |
3 months |
|
|
act |
To store logged in users. |
90 days |
|
|
_fbp |
To store and track visits across websites. |
3 months |
|
|
LOGIN_INFO |
Allows tracking of YouTube video views. |
Od 6 months do 10 lat |
|
|
PREF |
To store user preferences. |
8 months |
|
|
VISITOR_INFO1_LIVE |
To estimate the users’ bandwidth on pages with integrated YouTube videos |
179 days |
|
|
APISID |
To personalize ads. |
|
|
|
SID |
Helps prevent fraud and unauthorized access. |
2 years |
|
|
AID |
Used for linking user data between devices, ad coordination and measuring converstion. |
2 years |
|
|
NID |
To store visitors’ information and personalize ads. |
6 months |
|
|
IDE |
Used by Google DoubleCLick to register user interaction and measure ad effectiveness. |
1 year |
|
|
SAPSID |
To store visitors’ information and personalize ads. |
2 years |
|
|
HSID |
Helps prevent fraud and unauthorized access. |
2 years |
|
|
VSC |
Allows tracking of YouTube video views. |
Session |
|
|
remote_sid |
Allows tracking of YouTube video views. |
Session |
|
|
llbcs |
Allows tracking of YouTube video views. |
Session |
|
|
wide |
Allows tracking of YouTube video views. |
Session |
10.6 You can define your browser settings to prevent it from storing cookies, in particular those used for marketing purposes, on your computer’s hard drive. You can also completely disable the storage of cookies on your computer’s hard drive in your browser.
10.7 More information about cookies and other technologies is available at e.g. wszystkoociasteczkach.pl or in the Help section of your web browser’s menu.
Why is it worth buying in Pepco?
We are close to you
Over 3600 stores across Europe. We are always close to you - please enter your number of stores or use other argument if you don't have a big number.
Always low prices
At Pepco you will find everything you need at low prices.
Wide range
At Pepco you will find a wide selection of products for yourself, for the family and for the home.
Buy with confidence
You have a 30-day right to return the goods at any store in the country.
