Privacy Policy

1. What is a privacy policy?

A privacy policy is a set of principles whose purpose is to inform our clients about all aspects of the process of collecting, processing, and securing their personal data. We also explain the principles and purposes of collecting data. These processes are carried out based on applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC, and the Personal Data Protection Act of 10 May 2018.

2. Definitions

Controller – Pursuant to the General Data Protection Regulation, a personal data controller is a natural or legal person, public authority, agency, or other entity that, alone or jointly with others, determines the purposes and means of processing personal data.

Personal Data – all information about a natural person identified or identifiable by one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, online identifier, and information collected through cookies and other similar technologies.

Policy – this Privacy Policy.

GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Act – Act of 10 May 2018 on the Protection of Personal Data.

User – any natural person visiting the website www.oricofood.pl and using one or more services or functionalities described in the Policy.

3. Personal Data Controller

 The Controller of your personal data is Orico Food Sp. z o.o., with its registered office in Osin 101, 97-415 Kluki, entered into the CEIDG register, Tax Identification Number (NIP): 5210335548, National Business Registry Number (REGON): 010385038, telephone number: 601 801 605, email address: info@oricofood.pl

4. Purposes and legal basis for personal data processing

 We collect and process data that is necessary for:

  • Concluding and executing a sales contract and providing the service selected by the User, ensuring the quality of the services provided, and enabling payment for products and services purchased from us (Article 6, Section 1b of the GDPR).
  • Fulfilling legal obligations, including for tax and accounting purposes (issuing invoices and accounting documents and storing them). Storing contracts, correspondence, and information related to the execution of product sales contracts and service provision contracts, as well as handling complaints (Article 6, Section 1c of the GDPR).
  • Pursuing the legitimate interests of Orico Food, including: establishing, pursuing, and enforcing claims, verifying payment credibility, responding to submitted notifications, questions, and complaints within the time limits established by law, marketing our own services, providing information on our current offer, conducting statistical analyses and marketing research for our own purposes, and contacting the User for purposes related to the provision of services and the sale of products (Article 6, Section 1f of the GDPR).

5. What personal data do we collect and process?

 When registering or ordering a service on our website, we require the following data:

  • Company name
  • First and last name
  • Residential or registered office address
  • Correspondence address or delivery address (if different from the residential address)
  • Tax ID (for companies)
  • Telephone number
  • Email address

When performing a contract for the provision of services and the sale of products, it is not mandatory to provide all of the above personal data. We only process the data necessary to fulfill the subject matter of the contract selected by the User. Providing the personal data marked as required by the User and consenting to the processing of this data is voluntary and is also a condition for the conclusion and performance of the contract. Failure to provide personal data and consent to their processing will result in the inability to conclude a contract and for Orico Food to provide services to the User. We may also request optional data that does not affect the conclusion of the contract.

6. How long do we process data

We process personal data no longer than necessary. Primarily, during the term of the contract,
y and after its completion for the period necessary for tax settlements or the expiration of claims, unless the law requires us to delete the data earlier. The maximum period for which User data is stored for settlement purposes is 5 years, counted from the end of the calendar year in which the tax payment deadline related to the service provided expired.

7. Data Transfer

 Data is shared with external entities only within legally permitted limits. We may share User personal data with entities supporting us in the provision of services electronically (e.g., data hosting services on servers) and providing financial services (e.g., accounting services managing our bookkeeping). Entities providing consulting, legal, postal, and courier services to us, as well as entities acquiring receivables in the event of the User’s failure to pay our invoices on time. Data will be shared on a need-to-know basis to enable the performance of the contract. The transfer of data does not release the data transferor from responsibility for its processing. Orico Food may be obligated to provide information and make User data available to authorized services and public authorities (e.g., the Police, the Prosecutor’s Office, the Courts, the President of the Office for Personal Data Protection, the President of the Office of Competition and Consumer Protection, the President of the Office of Electronic Communications). This data may be shared without the User’s knowledge and consent, pursuant to applicable law, only if the legality of the request is verified by an appropriate legal basis.

8. When do we collect data?

 We may collect your personal data when, while on our website, you perform the following actions: Order our services; Register as a User on our website; Share content in our online communities; Submit job applications; Register to receive information about our services; Contact us regarding a problem, ask a question, or submit a complaint. We also automatically collect certain information about Users who visit our website, as described in the section titled “Cookies.”

9. How do we process personal data?

We process personal data in accordance with applicable law, in particular the Personal Data Protection Act and the General Data Protection Regulation. We are guided by the following principles when processing personal data: Adequacy Principle: We only process data that is necessary to achieve the given processing purpose; Accuracy Principle: We strive to keep the personal data in our systems up-to-date and accurate. Integrity and Confidentiality Principle: We implement the necessary measures to safeguard the confidentiality and integrity of personal data; Accountability Principle: We want to be accountable for every action we take with personal data, so that, in the event of an inquiry, we can provide full and accurate information regarding the actions we have taken with the User’s personal data.

10. What do we do with your personal data?

 When you provide us with personal data, we use it for the following purposes:

  • To enable you to use any services we may make available through the website from time to time.
  • To enable you to register as a user on our website.
  • To communicate with you appropriately.
  • To provide you with information about our products and services, in accordance with our communication preferences, and to deliver our latest news or special offers that may be of interest to you.
  • To track activity on our websites for marketing research purposes so that we can improve the website’s usefulness and content; However, when performing such activities, we use personal data in aggregated and anonymous form.
  • Preventing you from posting or sending content of an aggressive, inappropriate, or offensive nature on our website.
  • Administering the website (including, among other things, enabling us to respond to any comments posted on the website or enabling you to send feedback).

11. International Transfers of Personal Data

We do not currently transfer, and do not plan to transfer, User data outside the European Economic Area.

12. Cookies

Cookies, also known as cookies, are text files sent by the websiteInternet cookies are stored on the hard drive of a computer, smartphone, or other device used to connect to the Internet. Cookies do not cause any damage to computers, devices, or the files stored on them. Cookies are useful because they allow websites to recognize the user’s device and display them appropriately.

Do we use cookies, and how do we use them?

Our websites use cookies. This allows us to recognize the user’s device upon return visits. Cookies are used, among other things, to store preferences set by the user. With the user’s permission, our websites and advertising networks that cooperate with us place cookies on the computers of visitors to our websites. These cookies allow us to learn about user preferences and ratings, helping us continuously improve our website. However, cookies do not identify the user (e.g., by name and surname), only the settings and behavior of an anonymous user who used the website on a selected device. Cookies are also used to limit the display of advertisements that the user is most likely not interested in.

We may use the following types of cookies on our website:

  • Required cookies – enabling the proper use of services available on the website, e.g., authentication cookies used for services requiring authentication,
  • Performance cookies – enabling the collection of information about how the website’s pages are used,
  • Functional cookies – enabling the user to remember their settings and personalize the user interface,
  • Advertising cookies – enabling the delivery of advertising content to users that is more tailored to their interests and limiting the number of times a given advertisement is displayed,
  • Statistical cookies – used to calculate website statistics.

How long is data stored in cookies?

Two types of cookies may be used on our website – session cookies and persistent cookies. Persistent cookies are temporary files stored on the user’s end device until logging out, leaving the website, or disabling the software (web browser). Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.

Do we use third-party cookies?

Yes. Users using our website may receive cookies from third parties collaborating with Orico Food, such as Facebook and Google. More information about these cookies can be found on the websites of individual third parties.

Cookie Management

Cookies help improve the user’s experience when using the Website. Limiting the use of cookies may affect the functionality available on the website. Disabling cookies that are necessary for authentication, security, and maintaining user preferences, among other things, may make it difficult, or in extreme cases impossible, to use the Website.

How to express and withdraw consent to cookies in practice?

Web browsing software (web browsers) usually allows cookies to be stored on the user’s end device by default. Website users can change their own settings in this regard. The web browser allows, among other things, managing cookies for a specific website, completely deleting all saved cookies, and automatically blocking cookies. Detailed information on this topic can be found in the help file or documentation of the web browser.

Key Information About Cookies

Consenting to cookies does not mean that the user’s data will be processed for marketing and sales purposes. Cookies do not collect the user’s personal data unless the user expresses consent by completing a form displayed on the selected website, along with providing independent consent to the processing of personal data. Cookies are not harmful to the user or the user’s device. Cookies do not allow others to view the data the user saves on their device’s hard drive. Until now, cookies have operated on the same principle as they do now. The only change is that websites are now required to inform users about the use of cookies. You can set your web browser to warn you when a cookie is being sent, or to block the sending of such files altogether. In the latter case, some website features may not work. Using our services withoutDisabling cookies in your browser means they will be saved on your device. Information on how to manage cookies can usually be found in the “Help” section of each browser. Below, we describe how to disable cookies in the most popular browsers:

Mozilla Firefox

In the “Tools” menu, select “Options” and then the “Privacy” tab. The browser allows you to choose between deleting cookies for individual websites or completely deleting them.

Microsoft Internet Explorer

In the “Tools” menu, select “Internet Options” and then the “Privacy” tab. You can use the slider to adjust the overall privacy level or use the “Sites” button to manage settings for individual websites.

Google Chrome

In the menu hidden under the three horizontal lines in the upper right corner of the browser, select “Settings,” then “Advanced.” In the “Privacy and Security” section, click the “Content Settings” button. In the “Cookies” section, you can change your cookie settings.

Opera

In the “Tools” menu, select “Preferences” and then the “Advanced” tab. Cookies are controlled by selecting or deselecting the “Cookies” option.

Safari

In the “Safari” menu, select “Preferences” and click the “Security” icon. In the “Accept Cookies” area, you can change your cookie settings.

On mobile phones, tablets, and other mobile devices, each device model may handle cookie management differently. Therefore, we encourage you to review the privacy options in the documentation on the website of your mobile device manufacturer.

13. IP Addresses

An IP address is a number assigned to your computer by your internet service provider to provide internet access. We may use your IP address to collect aggregated usage information, but we cannot identify you individually without being able to assign an IP address to you as a specific user. This usually requires access to additional information, which we do not solicit.

14. User Rights Related to Personal Data

Right to Information on Personal Data Processing – on this basis, the Controller provides information to the person making such a request about the processing of personal data, including in particular the purposes and legal basis for processing, the scope of the data held, the entities to which the personal data is disclosed, and the planned date. deletion.

Right to obtain a copy of the data – on this basis, the Controller provides a copy of the processed data relating to the person submitting the request.

Right to rectification – on this basis, the Controller removes any inconsistencies or errors in the processed personal data, and supplements or updates them if they are incomplete or have changed.

Right to erasure – on this basis, you can request the deletion of data whose processing is no longer necessary for the purposes for which they were collected.

Right to restriction of processing – on this basis, the Controller ceases to perform operations on personal data, except for operations to which the data subject has consented, and to store them in accordance with the adopted retention principles, or until the reasons for limiting data processing cease (e.g., a decision of a supervisory authority is issued authorizing further data processing).

Right to data portability – on this basis, to the extent that the data are processed in connection with a concluded contract or expressed consent, the Controller releases the data provided by the data subject in a machine-readable format. also requesting that this data be transferred to another entity – provided, however, that there are technical possibilities in this respect on the part of both the Controller and that other entity.

Right to object to data processing for marketing purposes – the data subject may object at any time to the processing of personal data for marketing purposes, without having to justify such objection.

Right to object to other data processing purposes – the data subject may object at any time to the processing of personal data based on the Controller’s legitimate interest (e.g., for analytical or statistical purposes, or for reasons related to property protection). An objection in this respect must contain a justification and is subject to evaluation.

Right to withdraw consent – ​​if the Controller processes personal data based on the User’s consent, this consent may be withdrawn at any time. If the User wishes to withdraw consent to the processing of their personal data, they may do so by sending a request to the following email address: info@oricofood.pl

LawTo file a complaint – If a User believes that their personal data is being processed in violation of applicable law, they may file a complaint with the President of the Personal Data Protection Office.

15. Personal Data Protection

Orico Food, ensuring the security of its Users’ personal data, uses SSL certificate encryption wherever personal data is required when completing and submitting online forms. This ensures that data sent by Customers to or from the server is protected against unauthorized disclosure, interception, or use by third parties.

To protect Users’ personal data against unauthorized disclosure, collection by unauthorized persons, processing in violation of applicable regulations, and alteration, loss, damage, or destruction, technical and organizational measures are used to ensure the protection of processed personal data appropriate to the threats and categories of data being protected.

In particular, the Controller uses technical measures to prevent unauthorized access or modification of data. The Controller secures data sets against unauthorized access.

16. Contact

Users may contact Orico Food at any time to obtain information about whether and how Orico Food uses or intends to use their personal data, as well as to report any incidents affecting the security of information and data transmission. For this purpose, the User should contact us using the following email address: info@oricofood.pl

17. Changes to the Privacy Policy

Orico Food reserves the right to make changes to this Privacy Policy. At the same time, we assure you that the User’s rights under this document will not be limited without their consent. Any changes to the Privacy Policy will be published on the website www.oricofood.pl

18. Contacting the Supervisory Authority

In matters related to the application and implementation of this Privacy Policy and the processing of personal data, the User has the right to lodge a complaint with the President of the Personal Data Protection Office.

19. Document Date

Privacy Policy, version dated June 29, 2026