PRIVACY POLICY


1. Who is who in this privacy policy?

We, i.e. AmRest Coffee Spółka z o.o. with its registered office in Wrocław, address: ul. Powstańców Śląskich 15-17, 53-332 Wrocław.

You, i.e. our Customer – a natural person whose personal data we process for at least one purpose indicated in the privacy policy.

2. What is the purpose of this privacy policy?

We attach great importance to protecting your privacy and your personal data. We take care of the security of your personal data when processing.

In the privacy policy, we explain how we use your personal data in relation to your participation in Starbucks Rewards program (registration of a physical or virtual Starbucks card and creation and operation of your user account - this can be done at www.starbucks.pl, https://card.starbucks.pl/auth/register, https://card.starbucks.pl/auth/login), use of Starbucks card, as well as answering queries, complaints and suggestions you have submitted. You will also find information about your rights due to the fact that we process your personal data and about how you can exercise these rights.

3. Who is the controller of your personal data and what are its contact details?

The controller of your personal data is AmRest Coffee Spółka z o.o. with its registered office in Wrocław.

Our contact details: ul. Powstańców Śląskich 15-17, 53-332 Wrocław, e-mail: kontakt@amrest.eu, telephone: 71 3861000.

4. How can you contact our Data Protection Officer?

We have designated a Data Protection Officer, whom you can contact in all matters related to the processing of your personal data by us and in order to exercise your rights regarding the processing.

You can contact the Data Protection Officer by:

  • sending an e-mail to iod@amrest.eu;
  • calling 71 3861000;
  • sending a letter (preferably marked for the attention of “Data Protection Officer”) to AmRest Coffee Spółka z o.o., ul. Powstańców Śląskich 15-17, 53-332 Wrocław.

5. What personal data do we process and where do we get it from? For what purpose do we process your personal data and on what basis?

Card in Starbucks Reward program and operation of user account

  • If you decide to register Starbucks card in the Starbucks Rewards program and thus create a user account, we will process your personal data provided by you in the registration form in order to perform the contract regarding your participation in the Starbucks Rewards program and to operate and service your user account;
  • The legal basis for processing the above-mentioned data is the necessity to perform the Starbucks Rewards program contract and the user account contract and to take action at your request (art. 6 sec. 1 letter b) of the GDPR).

Processing purchases using the Starbucks card in the Starbucks Rewards program

  • In order to process the purchase of our products or services using the Starbucks card, we will process information about transactions and products purchased by you, your data related to the Starbucks card, type of card (virtual / physical), Starbucks card number, expiration date.
  • The legal basis for processing the above-mentioned data is the necessity to perform the purchase contract and to take action at your request (art. 6 sec. 1 letter b) of the GDPR).

Performing legal obligations

  • In order to fulfill the obligations imposed on us by law, e.g. by the Accounting Act or tax regulations (e.g. invoicing and storage of invoices and accounting documents), we will process your data from the transactions using Starbucks card and information from user account, as well as data related with a complaint.
  • The legal basis for the processing of the above-mentioned data is a legal obligation imposed on us (art. 6 sec. 1 letter c) of the GDPR)

Analyzing preferences and behaviors and creating a customer profile for marketing purposes (profiling) and direct marketing

  • Analyzing and creating profile for marketing purposes: to know your personal preferences and behaviors in order to present to you information about products, offers and new products offered by us and our business partners in the restaurant and café industry, as well as from the payment services sector which handle the crediting of Starbucks cards, that we think may interest you and are tailored to your needs, we will create your customer profile (profiling). To create it we will process your personal data provided by you in the registration form for the Starbucks Rewards program and user account, information related to your activity within the user account and Starbucks card use in the last 24 months (history of your orders, information about stars and prizes awarded and used by you), frequency and method of using the user account (i.e. via mobile application / website) and Starbucks card (physical card / virtual card), your opinions and suggestions, your location data (if you enable this option on your device or browser), cookies and similar technologies for collecting data about user activities, i.e. visited places and your activity on our websites, technical information about your device (IP address, MAC address, operating system and browser type).
  • Direct marketing: for the purpose of direct marketing (i.e. informing you about products, offers and new products offered by us and our business partners in the restaurant and café industry, as well as from the payment services sector which handle the crediting of Starbucks cards) we will process data from your customer profile.
  • The legal basis for the processing of the above-mentioned data is legitimate interest in analyzing your preferences and behaviors for the purposes of preparing and presenting you information about products, offers and new products offered by us and our business partners in the restaurant and café industry, as well as from the payment services sector which handle the crediting of Starbucks cards, that we think may interest you and are tailored to your needs (profiling) and direct marketing of products and services offered by us and our business partners mentioned above (art. 6 sec. 1 letter f) of the GDPR).

Marketing communication We will direct marketing messages to you about products, offers and new products offered by us and our business partners in the restaurant and café industry, as well as from the payment services sector which handle the crediting of Starbucks cards via communication channels (e.g. e-mail), to which you have previously freely given consent. You can withdraw your consent at any time, as easily as it has been given. Withdrawal of consent does not affect the lawfulness of activities carried out before its withdrawal.

Establishment, exercise or defence of legal claims

  • In order to establish or exercise claims, as well as to defend against claims, we will process your data regarding purchases using your Starbucks card, user account and Starbucks card (if you participate in the program), as well as data related with a complaint.
  • The legal basis for the processing of the above-mentioned data is legitimate interest in establishment and exercise claims and defending against claims (art. 6 sec. 1 letter f) of the GDPR).

Answering queries, complaints and suggestions

  • In order to answer your queries, complaints and suggestions, we will process your data provided in queries, complaints and suggestions.
  • The legal basis for processing the above-mentioned data is our legitimate interest in giving response (art. 6 sec. 1 letter f) of the GDPR).

Customer satisfaction survey and determination of the quality of our services

  • In order to examine our Customers' satisfaction and determine the quality of our services, we will process your data indicated in a survey, which we can ask you to fill out.
  • The legal basis for processing the above-mentioned data is our legitimate interest in obtaining relevant information to improve the quality of our products and services (art. 6 sec. 1 letter f) of the GDPR).

6. Automated decision-making

We will not make decisions regarding your person that are based solely on the automated processing of your data and produce legal effects or similarly significantly affect you.

7. To whom do we transfer your personal data?

We will transfer your data to entities that act on our behalf, i.e. service and IT solutions providers, marketing agencies, entities providing accounting and administrative services, entities conducting customer satisfaction surveys on our behalf.

We will also transfer your e-mail to entities from the payment services sector, which handle the crediting of Starbucks cards to enable them to credit the card.

8. Will your personal data be transferred to a third country (i.e. countries outside the European Economic Area)?

We will not transfer your data to third countries (i.e. countries outside the European Economic Area).

9. How long will we store your personal data?

We store your personal data for period, which is not longer than it is necessary in relation to the achievement of purposes for which data is processed. We will store your data:

  • For the purpose of managing and operating your user account or enabling you to participate in the Starbucks Rewards program and use Starbucks card – until you withdraw (withdrawal can be submitted by deleting your account (an option in your account available after logging in), sending a message to e-mail address kontakt@amrest.eu, or sending a letter to postal address AmRest Coffee Spółka z o.o., ul. Powstańców Śląskich 15-17, 53-332 Wrocław), your exclusion from participating in accordance with the Terms & Conditions or termination of Starbucks Rewards program. We may extend this period for a period of limitation of your or our claims under applicable law, if the processing of this data will be necessary to establish or exercise claims and defend against claims.
  • For the purpose of processing your transactions, including the purchase of our products or services using the Starbucks card – for the duration of the contract for this transaction, providing that we may extend this period for the period of limitation of your or our claims under applicable law, if the processing of this data will be necessary to establish or exercise claims and defend against claims.
  • For the purpose of complying with our legal obligations (e.g. from the Accounting Act or tax regulations) – for a period resulting from such provisions (for example, your billing data will be stored for 5 years from the end of the calendar year in which the payment deadline for the tax related to the order has expired).
  • For the performance of legitimate interests referred to in point 5 of the policy (creating a customer profile for marketing purposes and direct marketing) – for the duration of the legitimate interest, unless you exercise your right and object to the processing of this data for marketing purposes.
  • For the performance of our legitimate interests, i.e., establishment or exercising claims and defending against claims – for the period of limitation of your or our claims under applicable law (e.g. the general limitation period for claims related to your business is 3 years, and the general period of limitation for consumer claims against us is 10 years, the above periods of personal data storage may change as applicable general legal regulations change).
  • For the performance of our legitimate interests, i.e., answering your queries, complaints and suggestions – for a period necessary to give such answer, no longer than 30 days, providing we may extend this period for the period of limitation of your or our claims under the law, if the processing of this data will be necessary to establish or exercise claims and defend against claims.
  • For the performance of our legitimate interests, i.e. our Customer satisfaction survey and determination of the quality of our services – for the duration of our legitimate interest, but no longer than 24 months.
  • For the performance of our legitimate interests, i.e. analysis and correction of errors in the operation of the mobile application, we will store them for the duration of our legitimate interest, but no longer than 24 months.

10. Do you have the right to object to the processing of your data? What other rights do you have according to the processing of your personal data? How you can exercise your rights?

Objection to data processing for marketing purposes: You have the right to object at any time to the processing of your data for marketing purposes, including profiling.

Objection due to your particular situation: You have the right to object at any time to the processing of your data for the purposes of our legitimate interest (other than marketing) for reasons related to your particular situation. In this case, you should indicate the particular situation which in your opinion justifies discontinuing processing of your data.

Beside this, you have following rights:

  • The right to obtain confirmation of whether we process your personal data, as well as the right to obtain access to such data and copies thereof.
  • The right to request the rectification (correction) or supplementation of your personal data if incomplete or incorrect.
  • The right to obtain restriction of processing of your personal data if, for example:
    • you contest the accuracy of your data processed by us;
    • the processing is unlawful and you oppose the erasure of the personal data and request the restriction of their use instead;
    • we no longer need the personal data for the purposes of the processing, but it is required by you for the establishment, exercise or defense of legal claims;
    • you have objected to the processing of your data for reasons related to your particular situation – in such case you may require restriction of processing pending the verification whether our legitimate grounds override the grounds for your objection.

      • If you restrict the processing of your personal data, we will be able to store it and, additionally, use it only to establish, exercise or defend legal claims, to protect the rights of another natural or legal person, or for important reasons of public interest of European Union or member state. We will only be able to take other actions with your consent.

  • The right to obtain the erasure of personal data, if e.g.:
    • your personal data is no longer necessary in relation to the purposes for which it was collected and processed;
    • if you object to the processing of your personal data for reasons related to your particular situation, and we do not have a legal basis to process data which would override your objection;
    • you object to processing for marketing purposes;
    • your personal data has been unlawfully processed.
  • Right to data portability: Due to the fact that your data is processed in an automated manner on the basis of consent or contract, you have the right to receive from us your data that you provided to us on the basis of consent or contract, in a structured, commonly used, machine-readable and interoperable format (e.g. for reading on a computer). You also have the right to request that your personal data is sent directly to another controller if technically possible.
  • The right to withdraw, at any time, consent to the processing of your personal data in relation to the data that we process on the basis of consent. Withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of consent prior its withdrawal.

The right to withdraw consent to marketing communication: At any time you can withdraw your consent to marketing communication. In order to do this log in and change the settings in your account or e-mail us: kontakt@amrest.eu or iod@amrest.eu.

To exercise the above rights, please contact our Data Protection Officer (contact details can be found in point 4 above) or us (contact details can be found in point 3 above).

Complaint to the supervisory authority: You also have the right to lodge a complaint with the President of the Office for Personal Data Protection of your usual place of residence, place of work or place of presumed violation of personal data protection.

11. Do you have to provide us with your personal data?

Providing personal data by you in order to register Starbucks card and create a user account is necessary to conclude a contract regarding Starbucks Rewards program participation and user account. If you do not provide this data, we will not be able to register your Starbucks card and create your user account.

12. What is the GDPR?

The GDPR is Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the General Data Protection Regulation)

13. From when does this privacy policy apply?

This privacy policy applies from May 25, 2018.