Privacy Policy

Perla Group Website Privacy Policy

This Policy is directed to users of the website www.perla-group.com (hereinafter referred to as: the Service). The Policy describes the principles of collecting and using data of Service users, which are collected directly from them or through cookies and similar technologies.

Data Controller and Contact Information

1. The controller of data collected in connection with the use of the Service is Perla Polska Spółka z ograniczoną odpowiedzialnością Spółka komandytowa, ul. Europejska 10, 76-200 Słupsk, tel. 59 722 01 40.
2. For matters related to the processing of your data by the Controller, you can contact us using the above address or by email at: sekretariat@tablefoods.com

Scope of Collected Data

1. The Service allows you to contact the Controller and provide your identification and contact data, as well as any other personal data disclosed directly in the message.
2. The Controller collects data related to your activity, such as time spent on the site, search phrases, number of viewed pages, date and source of visit, as well as data necessary to provide individual services.

Source of Data

1. The source of personal data concerning users and processed by the Controller are the individuals to whom the data relates.
2. Personal data concerning you may also be provided to the Controller by a third party if, due to circumstances justified by the case, the data is necessary to contact you in connection with a reported problem or inquiry. In such a case, the Controller receives identification, address, and case-related data, such as a case description. The person providing the Controller with third-party data is responsible for its disclosure and should have appropriate authorization to do so.

Purpose and Legal Basis for Processing Personal Data

1. Your personal data (including IP address or other identifiers and information collected through cookies) may be processed for the purpose of:
   1. analyzing network traffic, ensuring security within the Service, and adapting content to user needs based on the Controller’s legitimate interest (Article 6(1)(f) GDPR);
   2. providing answers to questions asked, delivering requested offers, and conducting correspondence to handle the matter, based on your consent and the Controller’s legitimate interest in fulfilling user requests (Article 6(1)(a) and (f) GDPR);
   3. concluding and performing contracts, including ensuring transaction handling, resolving problems, and fulfilling your requests directed to us – because processing is necessary for the conclusion and performance of contracts (Article 6(1)(b) GDPR);
   4. providing services electronically and sending commercial information – based on your consent (Article 6(1)(a) GDPR in conjunction with Article 10(2) of the Act on the Provision of Services by Electronic Means);
   5. direct marketing of products or services, including initiating contact, presenting offers, conducting measurements and analyses, including profiling (i.e., using personal data to create your profile in terms of products and services you may be interested in), storing data in cookies, and collecting data from websites and mobile applications – based on your separate consent expressed by checking a special checkbox (Article 6(1)(a) GDPR in conjunction with Article 172 of the Telecommunications Law);
   6. fulfilling legal obligations incumbent upon us under EU or Polish law (e.g., to the President of the Office of Competition and Consumer Protection, tax authorities) (Article 6(1)(c) GDPR);
   7. ensuring payment service handling, ensuring the security of services we provide electronically, handling your requests submitted, for example, through a contact form when they are not directly related to contract performance, debt collection, conducting court, administrative, and mediation proceedings, storing data for archival purposes, and ensuring accountability (fulfilling obligations arising from legal provisions) – because processing is necessary to pursue our legitimate interest, which is handling the services provided, fulfilling your requests, the ability to establish, pursue, or defend against claims, and data archiving (Article 6(1)(f) GDPR).

Right to Withdraw Consent

To the extent that your data is processed based on consent, you may withdraw it at any time by contacting the Controller. Withdrawal of consent may hinder or prevent contact with you.

Obligation or Voluntariness of Providing Data

1. Providing data by you for purposes related to handling the matter is voluntary but necessary. Failure to provide it may hinder or prevent the matter from being resolved.
2. Providing data necessary for statistical analysis of Service users is voluntary. You can use the so-called incognito mode to browse the site without providing the Controller with information about your visit to the Service. Using incognito mode, and therefore not providing data, does not affect the ability to use the Service.

Rights Under GDPR Regarding Processed Data

You have the right to:

1. request access to your data from the Controller, as well as receive a copy of it (Article 15 GDPR);
2. request rectification or correction of data from the Controller (Article 16 GDPR) – regarding a request for data rectification when you notice that the data is incorrect or incomplete;
3. request erasure of data from the Controller (Article 17 GDPR);
4. request restriction of processing from the Controller (Article 18 GDPR) – for example, when you notice that the data is incorrect – you may request restriction of processing of your data for a period allowing us to verify the accuracy of that data;
5. file a complaint in connection with the processing of your personal data by the Controller to the President of the Personal Data Protection Office.

Recipients of Your Personal Data

1. Recipients of your personal data may only be entities authorized to receive it under legal provisions. In addition, your data may be shared with couriers, postal operators, hosting providers, mail server providers, and entities providing IT, marketing, advertising, accounting and financial, audit and control, and legal services – provided that such entities process data based on an agreement with the Controller and only in accordance with the Controller’s instructions, to the extent justified by the consent of the data subject or the Controller’s interest. Data processing and entrusting it to the entities indicated above may also result from legal obligations incumbent upon the Controller as an entrepreneur (e.g., accounting obligations).
2. The Controller reserves the right to transfer data to cooperating entities, including those with headquarters outside the EEA (European Economic Area), provided that these entities are obliged to maintain the entrusted data in full confidentiality, while ensuring their security to a degree at least as indicated by European regulations. Data is entrusted based on a data processing agreement concluded in this regard with the Controller.

Data Retention Period

1. Your personal data will be stored until consent is withdrawn or until the matter is resolved, and then until the expiration of the limitation period for claims of the parties related to its performance.
2. Data related to network traffic analysis collected through cookies and similar technologies may be stored until the cookie expires. Some cookies never expire, so the data retention period will be equivalent to the time necessary for the Controller to achieve the purposes related to data collection, such as ensuring security and analyzing historical data related to site traffic.

Use of Cookies and Similar Technologies

1. The Service enables the collection of information about the user through cookies and similar technologies, the use of which is most often associated with installing this tool on the user’s device (computer, smartphone, etc.). This information is used to remember the user’s decisions (font selection, contrast, policy acceptance), collect information about the user’s device and visit to ensure security, as well as analyze visits and adapt content.
2. Information obtained through cookies and similar technologies is not combined with other data of Service users, nor is it used to identify them by the Controller.
3. The user can set the browser to block certain types of cookies and other technologies, for example, by specifying that only those necessary for proper page display will be allowed. By default, most browsers allow the use of all cookies, but the user can change these settings at any time and can also delete already installed cookies. Each browser allows such actions through one of the options available in settings or preferences.
4. The user also has the option to use the site in the so-called incognito mode, which blocks the ability to collect data about their visit.
5. Using the Service without changing browser settings, i.e., with default acceptance of cookies and similar technologies, means consent to their use for the purposes specified above. The Controller does not use the obtained information for marketing purposes.

Use of Cookies and Similar Technologies

1. This Privacy Policy is effective from January 1, 2026.
2. The Controller undertakes to update the Policy on an ongoing basis in the event of new circumstances or regulatory requirements.