
Privacy Policy of TukuTuk online Store
https://tukutuk.com
(„Store”)
Dear User!
We care about your privacy and want you to feel comfortable while using our services. Therefore, below we present you with the most important information about the principles of processing your personal data by us and the cookies that are used by our Store. This information has been prepared to take into account RODO, the General Data Protection Regulation.
PERSONAL DATA ADMINISTRATOR
TukuTuk sp. z o.o. with its registered seat at Płouszowice-Kolonia 137A, 21-008 Jastków, entered in the National Court Register - Register of Entrepreneurs by the District Court Lublin-Wschód in Lublin with its registered seat in Świdnik, under KRS number 0000941738, NIP 7133116604, REGON number 520765705, share capital 5000,00 PLN.
If you wish to contact us about the processing of your personal data by us, please write to us at the e-mail address: kontakt@tukutuk.com
YOUR RIGHTS
You are entitled to demand
- access to your personal data, including obtaining a copy of your data (Article 15 RODO or, if applicable, Article 13 (1)(f) RODO),
- rectification (Article 16 RODO),
- erasure (Article 17 RODO),
- restrict processing (Article 18 RODO),
- to transfer the data to another controller (Article 20 RODO).
And also the right:
- to object at any time to the processing of your data:
- on grounds relating to your particular situation - against the processing of personal data concerning you based on Article 6 (1)(f) of the RODO (i.e. the legitimate interests pursued by us), including profiling (Article 21 (1) of the RODO);
- where personal data is processed for direct marketing, including profiling, to the extent that the processing is related to such direct marketing (Article 21 (2) RODO).
Contact us if you wish to exercise your rights. You can object to our use of cookies (which you will read about below) in particular by using the relevant browser settings.
If you consider that your data are processed unlawfully, you can file a complaint with the President of the Office for Personal Data Protection.
PERSONAL DATA AND PRIVACY
Below you will find detailed information about the processing of your data depending on the actions you take.
1. Placing an order in the Store
For what purpose? | |
---|---|
Processing your order | |
On what basis? | |
sales contract (Article 6 (1)(b) RODO) | legal obligation, related to accounting, obliging us to process your personal data (Article 6 (1)(c) RODO) |
For how long? | |
for the duration of the aforementioned contract | until the expiry of our legal obligation relating to accounting |
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - either by you or by us (see the last table of this section for more information) |
|
What happens if you do not provide your data? | |
you will not be able to place an order |
2. Creating a Store account
For what purpose? |
---|
performance of the contract for the provision of services for maintaining an account in the Store |
On what basis? |
contract for the provision of services (Article 6 (1)(b) RODO) |
For how long? |
until the account is deleted by you or by us at your request |
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - by you or by us (see the last table in this section for more information) |
What happens if you do not provide your data? |
you will not be able to create an account and use its features such as viewing your order history or checking your order status |
3. Contact us (e.g. to ask a question)
For what purpose? | |
---|---|
To deal with your queries or requests | |
On what basis? | |
contract or actions were taken at your request aimed at its conclusion (Article 6 (1)(b) RODO) - if your query or request concerns a contract to which we are or maybe a party | our legitimate interest to process your data in order to conduct communication with you (Article 6 (1)(f) RODO) - if your query or request is not related to a contract |
For how long? | |
for the duration of the contract binding us or, if no contract has been concluded, until the expiry of the redress period - see the last table of this section* | until the expiry of the redress period - see the last table of this section - or until we consider your objection to the processing* |
in addition, your data will be processed until the expiry of the period during which redress is possible - by you or by us (see the last table in this section for more information) |
|
What happens if you do not provide your data? | |
we will not be able to respond to your inquiry or request |
4. Browser settings or other similar action that permits marketing
For what purpose? |
---|
direct marketing by displaying personalized advertisements (you can read more about this in the "Profiling" and "Cookies" sections of the Privacy Policy). |
On what basis? |
our legitimate interest, which consists in processing data for the above-mentioned purpose (Article 6 (1)(f) RODO) |
For how long? |
until the cookies used for marketing purposes expire or are deleted by you* |
What happens if you do not provide your data? |
you will not receive suggestions of products or services that you may be interested in |
5. Browser settings or other similar action that permits analytics
For what purpose? | |
---|---|
to analyze how you use and navigate the Store's website in order to tailor the site to your needs and behavior (you can read more about this in the "Analytics" and "Cookies" sections of the Privacy Policy) |
|
On what basis? | |
our legitimate interest, consisting in processing data for the aforementioned purpose (Article 6 (1)(f) RODO) | |
For how long? | |
until the cookies used for analytical purposes expire or are deleted by you* | |
What happens if you do not provide your data? | |
we will not take your Store usage preferences into account when developing the Store |
6. Your consent to receive marketing content from us (e.g. information about special offers)
For what purpose? |
---|
to send you marketing information, in particular, special offers |
On what basis? |
your consent to our marketing activities (Article 6 (1)(a) RODO) |
For how long? |
until you withdraw your consent - remember, you can withdraw your consent at any time. The processing of your data until you withdraw your consent remains lawful. |
in addition, your data will be processed until the expiry of the period during which it is possible to assert claims - either by you or by us (see the last table in this section for more information) |
What happens if you do not provide your data? |
you will not receive our marketing materials, including information about our special offers |
7. Newsletter subscription
For what purpose? | |
---|---|
sending the newsletter | |
On what basis? | |
contract for the provision of newsletter services (Art. 6 (1)(b) RODO) | |
For how long? | |
until you unsubscribe from our newsletter | |
In addition, your data will be processed until the expiry of the period during which it is possible to assert claims - by you or by us (you can find more information on this in the last table of this section) |
|
What happens if you do not provide your data? | |
you will not be able to receive information about the Store and our services |
8. Take any action or omission that may result in a claim relating to the Store or our services
For what purpose? | |
---|---|
the establishment, investigation, or defense of possible claims, related to the concluded agreement or provided services | |
On what basis? | |
our legitimate interest consists in the processing of personal data for the aforementioned purpose (art. 6 (1)(f) RODO) | |
For how long? | |
until the expiry of the period of limitation of claims or until we accept your objection to the processing* | |
What happens if you do not provide your data? | |
inability to establish, assert, or defend claims |
PUBLISHING DATA
If you choose to publish a comment, its content and your signature will be visible to other Store users.
We do not disclose your email address to other users - unless you do so yourself.
PROFILING
We perform profiling on the Store - about you this will take place if you allow such actions. This profiling involves automatically assessing what products or services you may be interested in using information about the content you view. As a result, advertisements for products or services displayed on the online services you use will be more relevant to you and your needs.
The profiling we perform does not result in decisions that produce legal effects for you or that affect you in a similarly significant way.
ANALYTICAL ACTIVITIES
We conduct analytics activities on the Store to make it more intuitive and accessible - this will occur for you if you allow us to do so. As part of the analytics, we will take into account how you navigate the Store - for example, how much time you spend on a particular subpage or where in the Store you click. This allows us to adapt the layout and appearance of the Store and the content placed therein to the needs of Users.
DATA SECURITY
When processing your personal data, we apply organizational and technical measures by the relevant provisions of law, including the use of connection encryption with the SSL certificate.
COOKIES AND SIMILAR TECHNOLOGIES
1. What are cookies?
Our website (hereinafter the "Site") uses cookies and other similar tracking technologies such as pixels (e.g., Meta Pixel, Pinterest Tag), tags, or scripts (hereinafter collectively referred to as "cookies") to ensure the proper functioning of the Site, improve it, personalize content and advertisements, and analyze traffic. Cookies are small text files stored on your device (computer, smartphone, tablet) when you visit a website. They allow the Site to "remember" you and your preferences during subsequent visits. We distinguish between first-party cookies (set by our domain) and third-party cookies (set by our partners' domains). These can be session cookies (deleted after closing the browser) or persistent cookies (remaining on the device for a specified time).
2. How do we use cookies?
We use cookies for the following main purposes, corresponding to the categories presented in our cookie banner and the "Cookie Settings" in the website footer:
- necessary: To ensure the basic functioning and security of the Site. They are essential for functions such as navigation, login support, or shopping cart operation. These cookies do not require your consent.
- functional: To remember your choices (e.g., language) to provide more personalized features that are not essential to the basic functioning of the Site. These require your consent.
- analytics: To collect information about how you use the Site (e.g., which pages you visit, where the traffic comes from). This helps us measure and improve the performance of the Site. These require your consent.
- marketing: To enable the display of ads tailored to your interests (ad personalization), measure the effectiveness of advertising campaigns (conversion tracking), and re-engage you with ads on other websites (remarketing). These require your consent.
3. Third-party cookies and our Partners
As mentioned above, we use services of technology partners who may place their own cookies on your device. These include:
- Google LLC (based in the USA): Provider of Google Analytics (site traffic analysis) and Google Ads (advertising, including remarketing and conversion tracking). Google uses collected data to provide us with services, improve its own products, and potentially to personalize ads within its network, in accordance with its policy.
- Meta Platforms Ireland Ltd. (based in Ireland, part of the global Meta group headquartered in the USA): Provider of Meta Ads services (advertising on Facebook and Instagram) via the Meta Pixel. The Pixel helps us measure ad effectiveness, build audiences, conduct remarketing, and analyze user activity on the site. Meta uses this data in accordance with its policy.
- Pinterest Europe Ltd. (based in Ireland, part of the global Pinterest group headquartered in the USA): Provider of Pinterest Ads services via the Pinterest Tag. The Tag helps us measure the effectiveness of ads on Pinterest, build audiences, and conduct remarketing. Pinterest uses this data in accordance with its policy.
- Shoper S.A. (based in Poland): Provider of the e-commerce platform used by our store. Shoper may use cookies for analyzing the operation of the store software and measurements, in accordance with its policy.
The use of these services means that third parties may collect certain information about you (IP address, browser data, cookie identifiers, interactions with the site). We do not have direct control over the data collected by third parties. We encourage you to review their privacy policies:
- Google:
How Google uses information from sites or apps that use our services
Google Privacy Policy
Google Ad Settings - Meta (Facebook, Instagram):
Meta Privacy Policy
Meta Cookie Policy - Pinterest:
Pinterest Privacy Policy
Pinterest Cookie Policy - Shoper:
Privacy Policy for visitors to online stores
Information about cookies
According to Google’s EU user consent policy, we are obliged to clearly indicate each party that may collect, receive, or use users’ personal data as a result of our use of Google products. This includes Google, Meta, Pinterest, and potentially other Ad Technology Providers (ATPs) if we use more advanced ad configurations.
4. Managing Cookie Consent
Your consent is required for all cookies that are not necessary for the operation of the website, particularly analytical and marketing cookies. We obtain your consent through a cookie banner displayed during your first visit and later accessible via the preferences center. Under the GDPR, valid consent must be freely given, informed, specific, and unambiguous, expressed through a clear affirmative action (e.g., clicking the “Accept all” button or selecting specific categories in the preference center). We do not use pre-checked boxes for any cookies other than the necessary ones.
You have the right to withdraw your consent or change your preferences at any time. You can do this by clicking the "Cookie settings" link in the website footer, which will reopen the preferences center. Withdrawing consent is as easy as giving it. We store records of your consent choices in accordance with legal requirements.
To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. You can usually access this information by pressing the F1 key in your browser. Additionally, you can find relevant instructions on the following support pages, depending on the browser you use:
5. Google Consent Mode
To respect your privacy choices and comply with Google's requirements, our Website uses Google Consent Mode v2. This tool communicates your consent decisions (expressed via our banner) to Google services (Google Analytics 4, Google Ads). Thanks to this, Google tags adjust their behavior accordingly:
If you give consent (e.g., for analytical or marketing cookies), the relevant Google tags will operate fully.
If you deny consent, Google tags may operate in a limited way (depending on the configuration), e.g., by sending anonymous signals (cookieless pings) to Google for statistical modeling purposes (e.g., estimating conversion rates), without identifying you or storing cookies on your device. Your consent for marketing cookies is passed to Google via the Consent Mode v2 parameters: ad_storage
(ad data storage), ad_user_data
(use of user data for advertising), and ad_personalization
(consent for remarketing/ad personalization).
6. Types of Cookies Used (Detailed List)
Below is a more detailed list of the cookies that may be used on our Website, along with their providers, purposes, and typical expiration periods. Please note that the actual duration may be shorter due to your browser settings or manual deletion of cookies.
Cookie file name | Provider | Function | Storage time | Category |
---|---|---|---|---|
_tukutuk | TukuTuk sp. z o.o. / Shoper S.A. | session/store traffic tracking | session duration | necessary |
Shop5 | Shoper S.A | session | session duration | necessary |
basket | Shoper S.A | cart version iteration | session duration | necessary |
cookie_read | Shoper S.A | cookie information | 2 years | functional |
Shoper5_lp-pl_PL or lastProducts-pl_PL |
Shoper S.A | recently viewed products | 1 year | functional |
product_vote_56 | Shoper S.A | product rating | 1 day | functional |
ic | Shoper S.A | a functionality that allows quick presentation of website content | session duration | functional |
_ga | Google LLC | used to distinguish users; stores a unique ID assigned to each user | 2 years | analytics |
_ga_* | Google LLC | used to store and count page views | 2 years | analytics |
_gid | Google LLC | Google Analytics cookie file; used to distinguish users within a single session (day) | 1 day | analytical |
_ga_<container-id> | Google LLC | Google Analytics 4 cookie file; used to persist session state | 2 years | analytical |
_gat or _dc_gtm_* |
Google LLC | Google Analytics cookie file; used to throttle the number of requests to Google servers | 1 minute | analytical |
_gac_gb_<container-id> | Google LLC | Google Analytics 4 cookie file; contains campaign-related information for the user | 90 days | analytical / marketing |
_gcl_* | Google LLC | Google Ads cookies; used to track conversions (e.g., _gcl_au , _gcl_aw ); help measure how often users clicking on ads perform actions on the site |
90 days | marketing |
IDE | Google LLC (DoubleClick) | primary advertising cookie used by Google on non-Google sites; used to display Google ads, track conversions, and limit frequency | 13 months (EEA/UK/CH), 24 months (rest of the world) | marketing |
test_cookie | Google LLC (DoubleClick) | checks whether the user's browser accepts cookies | 15 minutes | marketing |
NID , _Secure-ENID |
Google LLC | stores user preferences and other information, such as preferred language, number of search results; also used for personalizing ads in Google services | NID: 6 months, ENID: 13 months | functional / marketing |
DSID | Google LLC | used to identify a logged-in user on non-Google websites to respect ad personalization settings | 2 weeks | marketing |
_fbp | Meta Platforms Ireland Ltd. | Meta Pixel cookie; stores and tracks visits to pages for analytical and advertising purposes (targeting, measurement) | 3 months | marketing |
_fbc | Meta Platforms Ireland Ltd. | Meta Pixel cookie; stores information about Meta ad clicks (includes fbclid ), used for conversion attribution. |
3 months | marketing |
fr | Meta Platforms Ireland Ltd. | Main Meta advertising cookie; used for delivering, measuring, and improving the relevance of ads | 3 months | Marketing |
_pin_unauth | Pinterest Europe Ltd. | Pinterest cookie; groups user actions that cannot be identified | 1 year | Marketing |
_pinterest_sess | Pinterest Europe Ltd. | Pinterest cookie; stores the user's login state | 1 year | Marketing |
_epik | Pinterest Europe Ltd. | Pinterest cookie; stores information about user matching after clicking on Pinterest ads | 1 year | Marketing |
Note: This list may not be exhaustive and may change. We regularly scan our site to update the list of cookies. The exact set of cookies active during your visit may depend on your interactions and consents given.
EXTERNAL SERVICES / DATA RECIPIENTS
We use external entities to support us in the conduct of our business. We entrust them with your data for processing - these entities only process data on our documented instructions.
Below you will find a list of the recipients of your data:
ACTION | DATA RECIPIENTS | TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION |
---|---|---|
any activity in connection with the Store | internet commerce platform operator | yes - United States of America, United Kingdom, Switzerland, Canada, Israel ** |
placing an order in the Store | payment provider | yes - United States of America, United Kingdom, Switzerland, Israel ** |
the entity providing delivery of goods - unless you have chosen the option of personal collection | yes - United States of America, Great Britain, Switzerland, Canada, Israel ** | |
provider of business enhancement software (e.g. accounting software) | yes - United States of America, Great Britain, Switzerland, Canada, Israel ** | |
provider of standard office software (including e-mail box) | yes - United States of America, Great Britain, Switzerland, Canada, Israel ** | |
accounting office | yes - United States of America, Great Britain, Switzerland, Canada, Israel ** | |
installment plan provider | no place | |
newsletter subscription or consent to marketing communications | provider of newsletter or marketing communication | no place |
use of an instant messenger available in the Store | provider of instant messaging available in the Store | no place |
taking part in a survey on satisfaction with our services or products | entities enabling you to post reviews of the Store or products and to compare them | no place |
getting in touch with us (e.g. asking a question) | standard office software provider (including email inbox) | yes - United States of America, Great Britain, Switzerland, Canada, Israel ** |
And in addition:
relevant public authorities to the extent that we are required to share data with them.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** Accordingly, your personal data may also be processed by entities outside the European Union. An adequate level of protection for your data, including through the use of appropriate safeguards, is provided by:
- application of the standard data protection clauses adopted by the European Commission referred to in Article 46 (2)(c) of the RODO
- Commission Implementing Decision of 28 June 2021, under Regulation (EU) 2016/679 of the European Parliament and the Council, on the adequate protection of personal data in the United Kingdom
- European Commission Decision 2000/518/EC on the adequate protection of personal data in Switzerland
- European Commission Decision 2002/2/EC on the adequate protection of personal data provided by the Canadian Personal Information Protection and Electronic Documents Act
- Commission Decision 2011/61/EU on the adequate protection of personal data in the State of Israel about automated processing of personal data