This policy explains what personal data we collect in connection with running our alpaca farm and the izerskiealpaki.pl website, why we collect it, and what you can do with it. We have tried to make it easy to understand – if anything is missing or unclear, please get in touch with us.
- Who processes your data?
- What data do we collect?
- For what purposes and on what grounds
- Who we share data with
- Transfer of data outside the European Economic Area
- How long do we retain data?
- Your rights
- Cookies and similar technologies
- Analytics and advertising
- Google Maps and external content
- Social media profiles
- Policy changes
Who processes your data?
The controller of your personal data is IZERSKIE ALPAKI Jarosław Szatkowski, 4 Radosna Street, flat 4, 59-900 Zgorzelec, Tax Identification Number (NIP) 6151816501, National Business Registry Number (REGON) 528889625.
We have not appointed a data protection officer – please contact us directly regarding any matters relating to personal data: kontakt@izerskiealpaki.pl or +48 455 405 185. You can also write to the registered address given above.
What data do we collect?
We only collect the data we need to arrange and carry out an appointment, and to settle the bill for it.
- Enquiry form on the website: full name, telephone number, service selected, preferred day, number of people. Completing the form is optional, but we cannot book an appointment without your name, telephone number and the service you require.
- Contact us by telephone or email: the information you provide during a call or in a message – usually your name, telephone number or email address, and the details of your enquiry.
- Settlements: If you are requesting an invoice, please provide the details required to issue it, including your full name or company name, address and tax registration number.
- Technical specifications: information automatically stored in cookies and server logs, e.g. IP address, browser type, pages visited. We provide further details in the section on cookies.
We do not collect special categories of data, including health data. If, prior to an alpaca therapy session, you choose to provide us with information about a participant’s health, we will use it solely to ensure the session is conducted safely and will not retain it for longer than is necessary.
For what purposes and on what grounds
- Responding to enquiries, arranging and conducting appointments - The legal basis is the taking of action at your request prior to entering into a contract and the performance of the contract (Article 6(1)(b) of the GDPR).
- Invoicing and bookkeeping - The basis for this is a legal obligation incumbent upon us as a business (Article 6(1)(c) of the GDPR in conjunction with tax and accounting legislation).
- Establishing, investigating or defending against claims - the basis for this is our legitimate interest (Article 6(1)(f) of the GDPR).
- Ensuring the security of the website, including protection against spam and abuse – our legitimate interest (Article 6(1)(f) of the GDPR).
- Website traffic statistics and analysis (Google Analytics 4) – the legal basis is your consent, as given in the consent pop-up (Article 6(1)(a) of the GDPR).
- Marketing, including advertising on Google Ads and Facebook, and measuring its effectiveness - The legal basis is your consent, as given in the consent window (Article 6(1)(a) of the GDPR).
You may withdraw your consent to analytics and marketing at any time by changing your consent settings on the website. Withdrawing your consent does not affect the lawfulness of any processing carried out prior to its withdrawal.
Who we share data with
We do not sell data or share it with anyone who is not necessary for the running of the farm. The recipients of the data may include:
- a web hosting and email provider whose servers host the website and the contact form,
- an accountancy firm and a supplier of invoicing software,
- providers of analytics and advertising tools – Google Ireland Limited (Google Analytics 4, Google Ads, Google Maps) and Meta Platforms Ireland Limited (advertising and statistics on Facebook and Instagram), provided you give your consent,
- a payment service provider or a bank – in relation to settlements,
- entities authorised under the law, provided they submit a request to us in accordance with the procedure laid down by law.
Transfer of data outside the European Economic Area
The use of Google and Meta tools may involve the transfer of data to countries outside the European Economic Area, in particular to the United States. These providers state that they use the mechanisms provided for in the GDPR – participation in the Data Privacy Framework programme or standard contractual clauses approved by the European Commission. If you do not consent to analytics and marketing, no such transfer will take place.
How long do we retain data?
- Enquiries and correspondence - for the time required to respond and arrange an appointment, and thereafter for the limitation period applicable to any claims.
- Accounting documents - 5 years, counted from the end of the calendar year in which the tax payment deadline expired.
- Data processed on the basis of consent - until consent is withdrawn.
- Data from cookies - for the duration of the cookie’s validity, or until you delete it from your browser.
Your rights
In relation to the processing of your personal data, you have the right to:
- access to data and to receive copies of it,
- the rectification of data that is incorrect or incomplete,
- data erasure,
- restrictions on processing,
- data portability – in respect of data processed on the basis of consent or a contract, by automated means,
- to object to processing based on our legitimate interest,
- to withdraw consent at any time – without this affecting the lawfulness of the processing carried out prior to its withdrawal.
To exercise any of these rights, simply write to kontakt@izerskiealpaki.pl. We will reply without undue delay, within a month at the latest.
You also have the right to lodge a complaint with the supervisory authority: the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
Cookies and similar technologies
Cookies are small text files stored on your device. We use them in three categories:
- Essential - Without them, the website does not function properly. Among other things, they remember your consent preferences and secure the contact form. They do not require consent.
- Analytical - They allow us to count visits and see which subpages are useful. We only load them once you have given your consent.
- Marketing - they enable us to measure the effectiveness of adverts and display them to people who have visited our website. We only load them once we have received your consent.
You give your consent to analytical and marketing cookies in the pop-up window that appears on your first visit. You can change your consent at any time – you’ll find a link to your settings in the website footer. You can also manage and delete cookies in your browser settings; however, some settings may then restrict the website’s functionality.
Analytics and advertising
Once you have given your consent, we use the following tools:
- Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – website visitor statistics. Your IP address is truncated, and we do not link this data to your name or telephone number.
- Google Ads - running advertising campaigns and measuring their effectiveness, including targeting adverts at people who have already visited our website (remarketing).
- Meta Pixel (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) – measuring the effectiveness of adverts on Facebook and Instagram and targeting them at audiences interested in our offering.
Advertising tools may profile your interests based on what you view on the website and use this to select adverts. We do not make decisions about you based solely on automated processing that would have legal effects or similarly significantly affect you.
Google Maps and external content
We embed a Google Map on the contact page. We only load it once you’ve clicked on it, because simply loading the map establishes a connection with Google’s servers and transmits your IP address to them. We serve fonts from our own server – visiting the page does not connect you to Google Fonts’ servers.
Social media profiles
We run profiles on Facebook, Instagram and TikTok. If you interact with us on these platforms, your data is also processed by the platform operator, in accordance with their own policies and terms and conditions. With regard to fan page statistics, we act as a joint data controller alongside the platform operator.
Policy changes
If we change the scope of the data, or if the tools or regulations require us to do so, we will update this policy and change the date shown at the top of the page. We encourage you to check back here from time to time.