Privacy policy

Pepco POLAND SP. Z O.O.
Version applicable as of 26 October 2023

This Privacy Policy defines detailed rules of processing of personal data collected by Pepco Poland Sp. z o.o. from users of its websites.

1. Admin
Pepco Poland Sp. z o.o. with its registered office in Poznań, ul. Strzeszyńska 73A

2. The Pepco Group’s Data Protection Officer and their contact details
All Pepco Group companies have appointed a data protection officer, who may be consulted on all matters regarding the processing of personal data and the exercise of rights related to data processing.

If you wish to contact the Pepco Group’s Data Protection Officer, please use the following contact details:
Address: Daniel Wieszczycki
Data Protection Officer (Inspektor Ochrony Danych Osobowych)
Pepco Poland Sp. z o.o., ul. Strzeszyńska 73A, Poznań
E-mail address: iodo@pepco.eu

3. What are the purposes for which your personal data are processed?

3.1 In general, visiting our websites does not require you to provide your personal data.

3.2 When you use our websites, we collect information on User interactions with the websites and content, including: information on the device and logging, i.e. system logs which include the date and time of visit and the IP number of the device from which the connection was made, as well as viewing statistics for the websites, traffic to and from individual sites. The above actions are intended to improve the websites. Data stored in server logs are not associated with any individual persons using the website or the system and are not used by the Admin to identify the User.

3.3 Subject to your express consent, we may also use technologies such as cookies and we may process personal data, such as IP addresses and cookie IDs, to personalise the displayed content and ads based on your interests, measure the performance of ads and content, and obtain information on the recipients who have viewed ads and content.

3.4 In addition, your data may also be processed, subject to your express consent, for the purpose of direct marketing through a newsletter. For more information see Pepco Newsletter Privacy Policy.

4. How long will your personal data be stored?

4.1 For the purpose of bot and abuse management as well as for statistical and service improvement purposes, your data will be processed until you lodge an objection or until you no longer use the Admin’s services.

4.2 Data used to personalise the displayed content and ads, measure the performance of ads and content, and obtain information on the recipients who have viewed ads and content, will be processed until withdrawal of your consent for such processing.

4.3 We will continue sending you the newsletter until you withdraw your consent to receive it.

5. What is the legal basis for the processing your personal data?

5.1 For the purpose of bot and abuse management as well as for statistical and service improvement purposes, and in some cases for marketing purposes, your data will be processed on the basis of point (f) of Article 6(1) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) (legitimate interests pursued by the Admin). The Admin’s legitimate interest is to ensure the security of its services, continuous improvement of the Admin’s products and to carry out statistical surveys.

5.2 In the case of data processed for the purpose of personalising the displayed content and ads, measuring the performance of ads and content, and obtaining information on the recipients who have viewed ads and content, the legal basis for the processing of your personal data is point (a) of Article 6(1) of the GDPR – your voluntary consent.

5.3 The legal basis for sending the newsletter is also your voluntary consent.

6. Requirement to provide data

6.1 For the purpose of bot and abuse management within the Admin’s services, for statistical measurements and improvement of the Admin’s services, data processing is necessary to ensure high quality of the Admin’s services. Failure to collect your personal data for these purposes may prevent proper provision of the services.

6.2 In the case of data processed for the purpose of personalising the displayed content and ads, measuring the performance of ads and content, and obtaining information on the recipients who have viewed ads and content, such data will not be collected without your explicit consent.

6.3 Provision of personal data for marketing purposes (newsletter) is voluntary.

7. To which recipients will your personal data be transferred?

7.1 Your data may be transferred to entities that process personal data at the request of the Admin, including IT service providers and marketing agencies, with the proviso that such entities process data on the basis of a contract with the Admin and only in accordance with the instructions of the Admin.

7.2 Subject to your explicit consent, your data may also be transferred to other entities that analyse web traffic and personalise the displayed content and ads and measure the performance of ads and content.

7.3 Your data may also be transferred to entities authorised to obtain them under the applicable law, e.g. law enforcement authorities, if a relevant request is made by the authority on the appropriate legal basis (e.g. for the purposes of ongoing criminal proceedings).

7.4 The Admin’s websites may use so-called social plugins for social media such as Facebook, Google+, Twitter, Pinterest. Using the functions offered by those plugins, you can recommend particular content or share it on a given social network. Remember that by using these plugins, you exchange data between youtself and that social network. The Admin does not process such data nor is aware of what data is collected. Therefore, we encourage you to read the terms of use and privacy policies applied by the owners of such social media before using the plugin.

8. Transferring data outside the European Economic Area

Your personal data may be transferred to third countries outside the European Economic Area. Data may be transferred, for example, to the Google Group companies on the basis of a Commission Implementing Decision EU 2023/1795 of 10 July 2023 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council on the adequate level of protection of personal data under the EU-US Data Privacy Framework containing the EU-US. Data Protection Framework issued by the US. Department of Commerce.

If you use our recruitment tools, data may also be transferred to the SAP Group companies whose services and systems we use in the recruitment process.

Data will be transferred to other entities only if they provide appropriate safeguards and provided that effective legal remedies with regard to personal data are available, for example, using the standard contractual clauses introduced by Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council.

9. What are your rights with regard to processing your personal data?

You have the following rights related to how we process your personal data:

the right to access your data, including obtaining their copies,
the right to rectification of data,
the right to erasure of data (in certain situations),
the right to lodge a complaint with a supervisory authority dealing with the protection of personal data,
the right to restrict processing. To the extent that your data are processed on the basis of consent or as part of the service provided (data are necessary for the service provision), you may additionally exercise the following rights:
right to withdraw consent to the extent that they are processed on that basis. The withdrawal of consent will not affect the lawfulness of processing based on consent before its withdrawal.
the right to data portability, i.e. to receive your personal data from the Admin, in a structured, commonly used and machine-readable format. You also have the right to transmit those data to another Admin.
To exercise these rights, please contact the Data Protection Officer at iodo@pepco.eu.

10. Cookies

10.1 When using the Admin’s websites, you remain anonymous until you decide otherwise. Information included in system logs that result from the general rules of Internet connections (e.g. IP address) is used by the Admin’s websites for technical purposes related to server administration. In addition, IP addresses are used to collect general, statistical demographic information (e.g. the region from which a connection is made).

10.2 Your web browser may store text files (“cookies”) on your computer. Cookies contain information necessary for the proper functioning of the website, in particular in its areas requiring authorisation.

10.3 The Admin’s websites store cookies on users’ computers for the following purposes:

to better adjust the websites to the needs of users; for example, to show a list of stores in your area;
to create viewing statistics;
to present online advertisements with content most relevant to the user’s interests.
10.4 Due to the life of cookies and other similar technologies, we use two essential types of cookies:

session – temporary files stored on the user’s end device until they log out, leave the website and application or disable the software (web browser);
permanent – stored in the user’s end device for the time specified in the parameters of cookies or until they are deleted by the user.

10.5 Due to the purpose used by cookies and other similar technologies, we use the following types:

files used for ensuring security, e.g. for abuse management
performance – enabling collection of information on how websites are used;

Name	Vendor	Purpose	Duration
rc::a	Google	This cookie is used to distinguish between humans and bots.	Permanent
rc::c	Google	This cookie is used to distinguish between humans and bots.	Session
test_cookie	Google	Used to check if the user’s browser supports cookies.	1 day
CONSENT	YouTube	Used to detect if the visitor has accepted the marketing category in the cookie banner. This cookie is necessary for GDPR-compliance of the website.	2 years
pepco_cookies	Pepco		1 month

functional – enabling “remembering” of the user’s selected settings and personalisation of the user’s interface, for example with respect to a selected language or the region where the user is based, font size, website layout etc.;

Name	Vendor	Purpose	Duration
YSC	YouTube	Registers a unique ID to keep statistics of what videos from YouTube the user has seen.	Session
_ga	Google	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	2 years
_gat	Google	Used by Google Analytics to throttle request rate.	1 day
_gid	Google	Registers a unique ID that is used to generate statistical data on how the visitor uses the website.	1 day
collect	Google	Used to send data about the visitor’s device and behavior.	Session
_dc_gtm_	Google	To store number of service requests.	1 minutes
AMP_TOKEN	Google	To store a unique user ID.	30 seconds to 1 year
__utma	Google	Used to distinguish users and sessions.	2 years
__utmt	Google	Used to throttle request rate.	10 minutes
__utmb	Google	Used to determine new sessions/visits.	30 minutes
__utmz	Google	Stores the traffic source or campaign that explains how the user reached your site.	6 months
__utmv	Google	Used to store visitor-level custom variable data.	2 years
OTZ	Google	Provides an aggregate analysis of website visitors.	14 days

advertising – enabling the provision of advertising content better matched to users’ interests; websites use retargeting, which is a form of online marketing. This allows our partners to display advertisements to users based on their interactions with the website. For example, users who have viewed information about clothing on the website may be displayed an advertisement presenting the viewed products when using other websites.
statistical – used for creating the statistics of websites and applications.

Name	Vendor	Purpose	Duration
_gac	Google	To store and track audience reach.	90 days
_gcl	Google	To store and track conversions.	Permanent
c_user	Facebook	To store a unique user ID.	30 days
presence	Facebook	Used to contain the user’s chat state.	Session
_js_datr	Facebook	To store user preferences.	2 years
_fbc	Facebook	To store last visit.	2 years
fbm*	Facebook	To store account details.	1 rok
xs	Facebook	To store unique session id.	3 months
wd	Facebook	To store the browser window dimensions.	1 week
fr	Facebook	Used for retargeting and ads delivery.	3 months
act	Facebook	To store logged in users.	90 days
_fbp	Facebook	To store and track visits across websites.	3 months
LOGIN_INFO	YouTube	Allows tracking of YouTube video views.	Od 6 months do 10 lat
PREF	YouTube	To store user preferences.	8 months
VISITOR_INFO1_LIVE	YouTube	To estimate the users’ bandwidth on pages with integrated YouTube videos	179 days
APISID	Google	To personalize ads.
SID	Google	Helps prevent fraud and unauthorized access.	2 years
AID	Google	Used for linking user data between devices, ad coordination and measuring converstion.	2 years
NID	Google	To store visitors’ information and personalize ads.	6 months
IDE	Google	Used by Google DoubleCLick to register user interaction and measure ad effectiveness.	1 year
SAPSID	Google	To store visitors’ information and personalize ads.	2 years
HSID	Google	Helps prevent fraud and unauthorized access.	2 years
VSC	YouTube	Allows tracking of YouTube video views.	Session
remote_sid	YouTube	Allows tracking of YouTube video views.	Session
llbcs	YouTube	Allows tracking of YouTube video views.	Session
wide	YouTube	Allows tracking of YouTube video views.	Session

10.6 You can define your browser settings to prevent it from storing cookies, in particular those used for marketing purposes, on your computer’s hard drive. You can also completely disable the storage of cookies on your computer’s hard drive in your browser.

10.7 More information about cookies and other technologies is available at e.g. wszystkoociasteczkach.pl or in the Help section of your web browser’s menu.

Why is it worth buying in Pepco?