PRIVACY POLICY

effective from 2 August 2021

  1. Administrator of your personal data

    The Administrator of your personal data is DP Polska S.A. with its registered office in Warsaw, 03-932, at ul. Dąbrowiecka 30 (later referred to as: the Administrator), which processes the personal data of customers who use the website available at www.dominospizza.pl (later referred to as: User; Service) in accordance to the European Parliament and Council Regulation No. 2016/679 dated 27 April 2016 on the protection of individuals with regard to the processing of personal data and the free movement of such data, as well as the repeal of Directive 95/46/WE (general data protection regulation) (later referred to as: GDPR), and in accordance to this Privacy Policy (later referred to as: Policy).

    On matters related to the Policy and personal data, the Administrator can be contacted by means of the above mentioned address, as well as by email: [email protected]

  2. Information on how your personal data is processed by Administrator

    The Administrator processes personal data of Users in the following manner:

    1. Registration of a User account in the Service
      In order to execute the agreement related to the registration of a User account in the Service, the Administrator will process personal data you provided in the registration form. The legal grounds for the Administrator to process personal data is the necessity to execute the agreement related to the registration of a User account in the Service in relation to the expressed will to register in the Service (Article 6 paragraph 1 (b) GDPR).
    2. Sharing content in the Service
      In order to share content collected in the Service with Users (Article 6 paragraph 1 (b) GDPR).
    3. Order execution and service on order inquiries
      In order to execute an order and to manage any possible inquiries relating to the order, the Administrator will process your personal data as provided in the order. The legal grounds for the Administrator to process personal data is the necessity to execute the order (Article 6 paragraph 1 (b) GDPR).
    4. Direct marketing of proprietary products and services
      In order to inform you about promotions and developments relating to Domino’s products and services, the Administrator will process your data provided during an order or when registering in the Service. The legal grounds for processing the data is the legitimate interest of the Administrator based on the direct marketing of the Administrator's products and services (Article 6 paragraph 1 (f) GDPR).
    5. Sending trade and marketing information by means of electronic forms of communication
      In order to inform you about promotions and developments among Domino’s mutual offer of products and services by means of electronic forms of communication (SMS, email), the Administrator and Dominium S.A., with its registered office in Warsaw, will process your data in regard to which voluntarily agreed that they be used in the above described manner. The legal grounds for processing the data is the consent received by the Administrator and Dominium S.A. with its registered office in Warsaw (Article 6 paragraph 1 (a) GDPR). You have the right to withdraw your consent at any time, whereas withdrawing your consent remains without influence on the legality of any processing which took place prior to the consent being withdrawn.
    6. Analytical and statistical objectives
      In order to define the quality of the services granted, the Administrator will process your data as indicated in the order. The legal grounds for processing the data is the legitimate interest of the Administrator based on attaining the appropriate information in order to improve the quality of services provided by the Administrator (Article 6 paragraph 1 (f) GDPR). 
    7. Compliance with legal obligations.
      In order to comply with the obligations imposed on the Administrator by law, particularly tax law, the Administrator will process your data as provided when making your order. The legal grounds for processing the data is the legitimate interest of the Administrator as well as the legal obligations imposed on the Administrator (Article 6 paragraph 1 (c and f) GDPR) .
    8. Defence against claims
      In order to establish, investigate, or defend against claims, the Administrator will process your data as provided when making your order. The legal grounds for processing the data is the legitimate interest of the Administrator based on the possibility of establishing and investigating claims or on defence against such claims (Article 6 paragraph 1 (f) GDPR).
    9. Creating a profile for marketing purposes
      In order to create a profile for marketing purposes, to offer information about products and services suited to your needs, the Administrator or their trusted partners (indicated in point VII.7 of the Privacy Policy) will process the data resulting from your activity in the Service. The legal grounds for processing the data is the legitimate interest of the Administrator based on the possibility of suiting products and services offered by the Administrator to your needs (Article 6 paragraph 1 (f) GDPR)."
    10. Customer satisfaction study
      In order to study the satisfaction of our customers we may process your data as provided when making an order in order to conduct a questionnaire by means of which we will study the level of the services granted by us. The legal grounds for processing the data is the legitimate interest of the Administrator based on attaining the appropriate information required to improve the quality of services provided by the Administrator (Article 6 paragraph 1 (f) GDPR).
    11. Suggestions and inquiries related to website errors, franchises, and other matters
      In order to manage the suggestions and inquiries related to website errors, franchisees, and other matters, we will process your personal data as provided in the contact form on the dominospizza.pl website. The legal grounds for processing the data is the legitimate interest of the Administrator based on the possibility of providing you with a reply to your suggestions and inquiries (Article 6 paragraph 1 (f) GDPR).
    12. Participation in current and future recruitment processes
      In order to participate in current and future recruitment processes executed by the Administrator, we will process your personal data as provided in the contact form on the dominospizza.pl website. The legal grounds for processing the data are:
      • in reference to data indicated in Article 221 § 1 of the Labour Code - the legal obligation of the Administrator resulting from the provisions of the Labour Code in regard to the conducted employee recruitment processes (Article 6 paragraph 1 (c) GDPR) in reference to Article 221 § 1 of the act of 26 June 1974 r. Labour Code;
      • in reference to data indicated in Article 221 § 1 of the Labour Code - the legal obligation of the Administrator resulting from the provisions of the Labour Code in regard to the conducted employee recruitment processes (Article 6 paragraph 1 (c) GDPR) in reference to Article 221 § 1 of the act of 26 June 1974 r. Labour Code;
      • In reference to recruitment, where the preferred form of employment is a civil contract, the legal grounds for processing your data is your consent expressed by your actions where you provided your data by means of the contact form, as well as taking action at the request of the candidate prior to concluding the contract (Article 6 paragraph 1 (a and b) GDPR);
      • In reference to participation in future recruitment processes conducted by the Administrator, the legal grounds for processing your data is your consent expressed by your actions where you provided your data by means of the contact form (Article 6 paragraph 1 (a) GDPR).

  3. Information about the Administrator sharing and entrusting your personal data

    1. In the event of an order being made from the mutual Domino’s offer available in Dominium restaurants, in order to complete your order, your personal data will be provided to Dominium S.A., with its registered office in Warsaw, 03-932, at ul. Dąbrowiecka 30, in accordance with the agreement concluded between the Administrator and Dominium S.A., guaranteeing the security of your personal data.
    2. If the order you made is processed by a franchisee of the Administrator, your personal data will be provided to this franchisee in order to complete the order in accordance with the agreement concluded between the Administrator and the franchisee guaranteeing the security of your personal data.
    3. In the event of marketing the Administrator's own products and services, particularly Domino’s products, your personal data will be entrusted to entities with the help of which the marketing of DP Polska S.A. products and services is executed.
    4. If you will complete a payment for your order online, your personal data will be provided to entities handling that form of payments. Your data will be entrusted to the suppliers of services and IT and telecommunication solutions acting on behalf of the Administrator. The Administrator will not share your personal information to entities outside the European Economic Area.
    5. n the event of a claim being related to an order managed by a restaurant under Dominium S.A. with its registered office in Warsaw, or a DP Polska S.A. franchisee, your personal data will be provided to the above mentioned entity in order to process the claim, in accordance with the agreements concluded by the Administrator guaranteeing the security of your data, accordingly with Dominium S.A. with its registered office in Warsaw, or with a DP Polska S.A. franchisee.
    6. Receivers of the personal data may also be such entities which are authorised to receive the data on the basis of generally binding legal regulations.
    7. In the event a recruitment process being carried out by a subsidiary from one of the company groups, i.e., Dominium S.A., personal data will be provided to this subsidiary on the basis of the same legal grounds which allow the Administrator to process personal data in order to participate in the recruitment process carried out by Dominium S.A., in accordance with the agreement concluded by the Administrator and Dominium S.A. guaranteeing security of your personal data.

  4. Information about the retention period for personal data storage by the Administrator

    The Administrator stores your data for a time not longer than is necessary to achieve the processing purposes, unless in accordance with the law it is required or permitted to store data for a longer time. The Administrator will particularly retain your data:

    1. for the purpose of maintaining a User’s account until the moment of the account being terminated or until the service is no longer provided by the Administrator. This term may be extended by a limitation period for your or the Administrator's claims as defined in legal provisions, if the processing of this data will be necessary to establish or investigate the claim, as well in the case of possible defence against such claims;
    2. for the purposes of executing your order - for the duration of the agreement relating to this order, although this term may be extended by a limitation period for your or the Administrator's claims as defined in legal provisions, if the processing of this data will be necessary to establish or investigate the claim, as well in the case of possible defence against such claims;
    3. for the execution of the legitimate interests of the Administrator in the form of direct marketing of own products and services or the study customer satisfaction - for the time of the existence of the legitimate interest, although not longer than 18 months or until an effective objection is raised in relation to the data processing;
    4. for the execution of the legitimate interests of the Administrator, i.e., for analytical and statistical purposes in order to improve the quality of services provided by the Administrator – for the time of the existence of the legitimate interest, although not longer than 18 months or until an effective objection is raised in relation to the data processing;
    5. data processed by the Administrator on the basis of the consent you gave in regard to marketing the Administrator's own products and services will be stored until the consent is withdrawn;
    6. for the purposes of the Administrator complying with the obligations resulting from legal provisions and its legitimate interests for a period resulting from these provisions, particularly tax law, i.e., for 5 years counting from the end of the calendar year in which the tax associated with the order was due;
    7. for the execution of the legitimate interests of the Administrator, i.e., reply to a claim, establishing and investigating claims, or defence against claims – for your or the Administrator's limitation period;
    8. for the execution of the legitimate interests of the Administrator, i.e., the possibility of replying to suggestions and inquiries associated with website errors, franchise, or other matters until reply is provided to a suggestion or inquiry;
    9. for the purpose of participating in current and future recruitment processes, for the period until the recruitment process is completed, and if your data is not used in any future recruitment process, for a year from the date the data is provided.

  5. Your rights related to personal data

    All rights resulting from this Privacy Policy can be executed by contacting the Administrator in a manner indicated in point I. You have the right to withdraw consent for the processing of personal data by the Administrator for the marketing of Domino’s products and services, as well as the right to withdraw consent for the processing of personal data by the Administrator for the purposes of participation in future recruitment process conducted by the Administrator and participation in recruitment processes where the preferred form of employment is a civil contract, while the withdrawal of the consent remains without influence on the legality of processing which had already taken place prior to the withdrawal. In the event of consent being withdrawn, the Administrator and Dominium S.A. will cease to process your personal data for this purpose. You have the right to object to the processing of your personal data by the Administrator. In the event of an objection being filed for the processing of personal data, the Administrator will cease to process this data, unless there are legally justified grounds which are superior to the interests, rights, and liberties of the person whom the data relates to, or unless the data will be necessary for the Administrator to possibly establish, investigate, or defend against claims, as determined by point IV of the Policy. You have the right to access your personal data, as well as to receive a copy of this data. In events defined by GDPR, you also have the right to amend the data, as well as to demand the data to be erased, transferred, and the right to demand processing of the data to be limited. You have the right to not be subject to a decision which is based only on automated processing, including profiling. If you decide that your personal data is being processed not in compliance with legal requirements, you have the right to file a complaint to the supervising authority, which is the President of the Personal Data Protection Office.

  6. Obligation to provide personal data

    Providing personal data is voluntary, although it is necessary to make and execute orders in the Service, to manage a User account, as well as to manage claims and to reply to suggestions and inquiries. Providing personal data for the purpose of participating in a recruitment process in the scope specified in Article 221 § 1 of the Labour Code is necessary to participate in the process.

  7. Cookies and analytical and marketing tools

    1. When sharing content by means of the Service, the Administrator uses cookies, i.e., files constituting IT data which are stored on an end device (e.g., computer, phone, tablet) of the Service User.
    2. Cookies are used for:
      1. adapting the content of Service website pages to the preferences of the User and to optimise use of the Service; these files particularly allow to recognise the device of the person using the Service and to appropriately display the website, adapted to individual needs;
      2. creating statistics which will help in understanding how Service Users use the Service, which allows to improve the structure and content of the Service;
      3. maintain the Service User session (after signing in), thanks to which the User does not have to type in the log in and password for each sub-page and to maintain the session of a User who is not signed in;
      4. as part of the Service, delivering advertising content which is better adapted to the interests of Service Users.
    3. Under the Service, used are two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files which are stored on the Service User's end device until the User logs out, leaves the website, or switches the software off (browser). Persistent cookies are stored on the Service User's end device for the time defined in the cookie parameters or until they are erased by the User.
    4. Under the Service, used are the following types of cookie files:
      1. "necessary" cookies, allowing the use of services available as part of the Service, e.g., authenticating cookies used for services which require authentication as part of the Service, cookies which are used to ensure security, e.g., used to detect fraud in regard to authentication for the Service;
      2. "functional and analytical" cookies, allowing certain settings and User interface personalisation choices to be "remembered", e.g., a chosen language or region, font size, website appearance, and allowing to collect information about how the Service websites are used, etc.;
      3. "advertising" cookies, allowing advertising content better adapted to the User's interest to be delivered to the User.
    5. During the first visit to the Service, displayed is information about the use of cookies. The use of the Service indicates the necessity to process ""required"" cookie files. Processing of other cookies is possible after receiving consent for the use of cookies, in accordance with the provisions of the Policy. You always have the right to withdraw the consent, changing the cookie settings in your browser. These settings may be changed particularly in order to block the automated use of cookies in the settings of the browser or to be informed each time about the cookies being stored on the User's end device. Detailed information about the possibilities and methods of dealing with cookie files is available in the software settings (of the browser).
    6. The Administrator also informs that limitations in the use of cookie files may influence some functions available on the Service website.
    7. "Advertising" and "analytical" cookies stored on the User's end device may also originate from the Administrator's partners and be used for analytical and marketing purposes. Detailed information in this regard is available in the privacy policies of the given partners. The Administrator uses the following analytical and marketing tools, supplied by partners:
      1. Google Ads – files used by Google in order to adapt advertising in its services, e.g., browser or to display advertising throughout the Internet - more information: https://policies.google.com/technologies/partner-sites
      2. Double Click Floodlight – files used to track advertising effectiveness - more information: https://policies.google.com/technologies/partner-sites
      3. Facebook pixels – files used to adapt advertising in Facebook services to the individual preferences of users - more information: https://www.facebook.com/policies/cookies
      4. Google Analytics – files used to analyse the manner in which the Service is used by Users, to create statistics and reports - more information: https://policies.google.com/technologies/partner-sites
      5. Hotjar Ltd. - the data collected by and stored on by this service is used for purposes associated with optimising its effectiveness. This data can be used to generate profiles of Users who use a pseudonym. Cookies may also be used for this purpose. Data collected with the use of Hotjar technology is not used for the purpose of uncovering the identity of a User visiting the Service and will not be connected to personal data of Users who use a pseudonym as long as appropriate consent is not given. A User may at any time withdraw consent for the collection of their personal data by Hotjar from sites which use this technology. For this purpose, the User must go to https://www.hotjar.com/policies/do-not-track and click "Disable Hotjar" or activate the "Do Not Track" option in their browser."