Skip to Content

Privacy Policy

Privacy Policy

We respect your privacy and are committed to protecting your personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (GDPR).

1. Data Controllers (Joint Controllers)

The processing of your personal data is carried out jointly by:

Fundacja Almarte

al. Zwycięstwa 241/13

81-521 Gdynia

Poland

Email: info (at) almarte.com

Almarte SRL

Dominican Republic

These entities act as joint controllers within the meaning of Art. 26 GDPR, as they jointly operate the website, manage operations, and provide products and services.

2. What Data We Collect

We may collect and process the following personal data:

  • Full name

  • Email address

  • Phone number (optional)

  • Billing and shipping address

  • Company or organization (optional)

  • Order and transaction data

  • Communication data (messages, emails)

  • Technical data (IP address, browser type, device information)

  • Website usage data (cookies and tracking technologies)

3. Purpose of Processing

We process your data for the following purposes:

  • Processing orders and deliveries

  • Payment processing

  • Customer service and communication

  • Managing collaborations and partnerships

  • Sending newsletters and marketing communication (with consent)

  • Improving our website and services

  • Fraud prevention and security

  • Compliance with legal obligations (e.g. tax and accounting)

4. Legal Basis (GDPR)

We process your personal data based on:

  • Art. 6(1)(b) GDPR – contract performance (orders, payments, delivery)

  • Art. 6(1)(c) GDPR – legal obligations (tax, accounting, compliance)

  • Art. 6(1)(f) GDPR – legitimate interest (communication, security, optimization)

  • Art. 6(1)(a) GDPR – consent (newsletter, marketing, cookies)

5. Data Sharing & Service Providers

We share your data only with trusted partners necessary to operate our business:

Website & Infrastructure

  • Odoo S.A. (website, CRM, e-commerce system)

  • GoDaddy (hosting)

Payment Providers

  • Stripe (card payments)

  • Bank Pekao S.A. (bank transfers)

These providers may act as independent data controllers.

Logistics & Fulfillment

  • DHL

  • DPD

  • FedEx

  • InPost

  • Omnipack

Operational Partners

  • Coffeeforsoul GmbH (processing and logistics support)

  • Euler Hermes (risk management)

We do not sell your personal data.

6. Payments

Payments are processed via external providers such as Stripe or Bank Pekao S.A..

These providers may process personal and financial data such as:

  • name

  • billing details

  • payment information

We do not store credit card data on our servers.

7. Shipping & Fulfillment

To deliver your order, we share necessary data (name, address, contact details) with logistics partners such as:

  • DHL, DPD, FedEx, InPost

  • Fulfillment providers such as Omnipack

This is required for contract performance under Art. 6(1)(b) GDPR.

8. Marketing & Newsletter

If you subscribe to our newsletter:

  • You will receive updates about products, events, and offers

  • You can unsubscribe at any time via the link in emails or by contacting us at info (at) almarte.com

  • Processing is based on your consent (Art. 6(1)(a) GDPR)

We may also use marketing and retargeting technologies where consent is given.

9. Cookies & Tracking

We use cookies and similar technologies:

Essential Cookies

Required for website functionality (e.g. cart, login)

Analytics Cookies

Used to analyze and improve website performance

Marketing Cookies

Used for advertising and retargeting

Non-essential cookies are only used with your consent via a cookie banner.

You can manage cookie preferences via your browser settings.

10. International Data Transfers

Due to our international structure, your data may be transferred outside the European Economic Area (e.g. Dominican Republic).

In such cases, appropriate safeguards are implemented, including:

  • Standard Contractual Clauses (SCCs)

  • secure processing measures

11. Data Retention

We retain your personal data as follows:

  • Orders and invoices: 10 years (legal obligation)

  • Customer communication: up to 24 months or longer if related to an active or past order or legal obligation

  • Marketing data: until consent is withdrawn

12. Your Rights

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request deletion

  • Restrict processing

  • Object to processing

  • Withdraw consent

  • Data portability

To exercise your rights, contact:

info (at) almarte.com

You also have the right to lodge a complaint with the Polish supervisory authority:

UODO (Urząd Ochrony Danych Osobowych)

13. Automated Decision-Making

We do not use automated decision-making or profiling that produces legal effects.

14. Data Security

We implement appropriate technical and organizational measures, including:

  • SSL encryption

  • secure servers

  • restricted access

  • regular monitoring

15. Changes to this Policy

We may update this Privacy Policy to reflect changes in legal requirements or our services.