Privacy Policy

§ 1 SCOPE AND GENERAL INFORMATION

Thank you for your interest in our site.

This Privacy Policy governs the collection, storage and processing of personal information that BiteMe collects from you when you use the website https://biteme-nutrition.com/ (hereinafter referred to as “website”). User is any legal or natural person who uses or visits the website (hereinafter referred to as “user”). The data controller of personal data within the meaning of the European General Data Protection Regulation and applicable Croatian legislation on the protection of personal data is BiteMe Nutrition d.o.o., Avenija Dubrovnik 15/12, 10000 Zagreb, Croatia (hereinafter referred to as “provider” or “data controller” or “we”).

In addition to this Privacy Policy, please familiarize yourself also with the Terms and Conditions governing the business relationship between the user and the provider, as well as with the Cookie Policy, which discloses which cookies we collect and for what kind of purposes.

§ 2 PERSONAL DATA

Personal data is any information relating to a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The data controller, according to the purposes defined in this Privacy Policy, collects the following personal data:

  • name and last name;
  • email;
  • phone number;
  • data about the user’s usage of the provider’s website (IP address, dates and times of visits, visited pages or URLs, time spend on individual pages, the number of visited pages, total time spent on the website, etc.);
  • data about all the user’s purchases and issued invoices (date and place of purchase, purchased products, prices of purchased products, total purchase value, manner of payment, delivery address, number and date of invoice, etc.) and data about resolving reclamations of products;
  • information on your operating system, including language settings;
  • your device type, screen resolution and browser version;
  • other data that the user voluntarily provides to the data controller when they are required for specific services.

We also obtain certain data through cookies. Cookies are small pieces of data that are temporarily stored on your hard drive that allow our website to recognize your computer the next time you visit the website. Cookies help us improve the website and your experience with the website. For details on cookies, please read our Cookie Policy.

§ 3 PURPOSES AND LEGAL GROUNDS FOR DATA PROCESSING

The data controller collects and processes your personal data on the basis of individual’s consent (order of products) or when there is legal basis for the collection of personal data, or the data controller has legitimate interest for such processing of personal data. All personal data you provide to us will be treated confidentially and will only be used for the purpose for which it was provided and collected.

By submitting a request or question on our website, you are deemed to consent to our response to your email address and to providing you with information regarding our products, You can always unsubscribe from our mailing list by sending an email to privacy@biteme-nutrition-com.

In case we need to further process your personal data for any other purpose, we will contact you in advance and ask for your prior written consent.

§ 3.1 Data processing based on law and contractual relations

When ensuring personal data is a contractual obligation or an obligation required to conclude and perform a contract with the provider, or a legal obligation, you must provide personal data. If you do not provide personal data, you cannot enter into a contract with the provider, nor can the provider perform services or deliver products under the contract, since the provider does not have the necessary data to execute the contract.

§ 3.2 Data processing based on legitimate interest

The provider can access data on the basis of legitimate interest for which the provider is striving, provided that the interests or the fundamental rights and freedoms of the user are not overriding. Where using legitimate interest, the provider always makes a judgement in accordance to the European General Data Protection Regulation on data processing.

§ 3.3 Data processing based on your consent

The provider collects and processes your personal data for the following purposes, when you consent to it:

  • to send you commercial offers and other content through email when there are no other grounds for it, and you have consented to it;
  • to send you newsletter, if you have subscribed to it;
  • for any other purposes that you explicitly consent to when cooperating with the provider.

§ 4 CONTRACTUAL PROCESSING OF PERSONAL DATA

Provider will not forward your personal data to third unauthorised parties.

As an individual you are notified and agree that the provider may entrust some tasks related to your data to contractual processors. They may process entrusted personal data exclusively in the name of the provider, within the limits of the provider’s mandate, as specified in written contract or other legal act, and according to the purposes as defined in this Privacy Policy. Contractual processors can only process personal data within the framework of the controller’s instructions and must not use it to pursue any interests of their own. Contractual processors can only process personal data within the framework of the provider’s (data controller’s) instructions and must not use it to pursue any interests of their own.

Data controller may only share your personal data with third parties if it is strictly necessary to ensure compliance of the data controller’s business with laws and other legally binding acts, or if required by a competent state authority.

§ 5 STORING PERSONAL DATA

The provider will store your personal data only for the time necessary to realise the purpose for which the personal data was collected and further processed (e.g. for the provider’s fulfilment of your orders, checking your payment and fulfilment of other obligations of the provider and/or yours, etc.).

The personal data that are being processed on a legal basis the provider stores for the time period defined by law.

The personal data that are being processed based on a contract with the individual, the provider stores for the duration of the contract and 5 years after its expiration, unless there has been a dispute about the contract between the user and the provider. In this case, the provider stores such data for 5 years after the finality of the court or arbitrary ruling or settlement or, if there was no judicial dispute, 5 years from the day of amicable settlement.

The provider stores the data that are processed based on personal consent or legitimate interest permanently, until the revocation of such consent or objection to data processing from the user. The provider deletes these data before objection only when the purpose of storing data had already been fulfilled or when defined by law.

After the end of the period of personal data being stored, the data controller effectively and permanently erases or anonymises the personal data so that they cannot be linked to an individual.

§ 6 THIRD PARTY WEBSITES

Our website may contain links to third party websites. These websites have their own privacy policy for which the operator does not assume any liability.

§ 7 RIGHTS OF THE INDIVIDUAL REGARDING DATA PROCESSING

If you have any questions about our Privacy Policy or processing in regards to your personal data, you can contact us at privacy@biteme-nutrition.com. Based on your request we will notify you in writing and in accordance with applicable legislation.

As an individual you have the following rights regarding data processing based on the European General Data Protection Regulation (hereinafter referred to as “GDPR”):

The right to withdraw consent: if you have, as an individual, consented to processing of personal data (for one or more purposes), you have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

Consent can be withdrawn through a written statement that is sent to the provider to one of the contacts at provider’s website https://biteme-nutrition.com/. Withdrawal of consent for personal data processing has no negative consequences or sanctions for the individual. However, it is possible that the data controller may not be able to offer one or more of its services after the withdrawal of consent, if those services cannot be performed without personal data.

The right to access personal data: as an individual, you have the right to obtain confirmation from the provider (processor of personal data) as to whether or not your personal data are being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, its users, the period for which the personal data will be stored, or the criteria used to determine that period, the right to request rectification or erasure of personal data or restriction of or objection to processing of personal data, the right to lodge a complaint with a supervisory authority, the source of the data if the data were not collected from you, the existence of automated decision-making, including profiling and  meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for you, in accordance with Article 15 of the GDPR.

The right to rectify personal data: as an individual, you have the right to obtain from the provider without undue delay the rectification of inaccurate personal data concerning you. Taking into account the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.

The right to deletion of personal data (“the right to be forgotten”): you have the right to obtain from the provider without undue delay the deletion of your personal data when one of the below reasons exists:

(i) the personal data are no longer necessary in relation to the purposes for which they are collected or otherwise processed,

(ii) you have withdrawn your consent, and there is no legal basis for further processing,

(ii) you have objected to the processing of your personal data, and there are no overriding legitimate grounds for the processing,

(iv) your personal data have been unlawfully processed,

(v) the personal data have to be erased for compliance with legal obligation in European Union or Member State law to which the provider is subject,

(vi) the personal data have been collected in relation to the offer of information society.

As an individual under certain circumstances, as defined in Article 17, paragraph 3 of the GDPR, you do not have the right to data deletion.

The right to restriction of processing: as an individual, you have the right to obtain from the provider restriction of processing where one of the following applies:

(i) you contest the accuracy of the personal data for a period enabling the provider to verify the accuracy of the personal data,

(ii) the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead,

(iii) the provider no longer needs the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims,

(iv) you have objected to processing pending the verification whether the legitimate grounds of the provider override yours.

The right to data portability: you have the right to receive the personal data concerning you, which you have provided to the provider, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the provider to which the personal data have been provided, where:

(i) the processing is based on consent or on a contract; and

(ii) the processing is carried out by automated means.

In exercising your right to data portability, you have the right to have your personal data transmitted directly from one data controller (provider) to another, where technically feasible.

The right to object to data processing: as an individual, you have the right to object, on grounds relating to your particular situation, at any time to processing of your personal data that is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the provider (Article 6 (1), point (e) of the GDPR), processing is necessary for the purposes of the legitimate interests pursued by the provider or by a third party (Article 6 (1) point (f) of  the GDPR), including profiling based on the data; the provider shall no longer process your personal data unless the provider demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing; where you object to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes. Where data are processed for scientific or historical research purposes or statistical purposes, you have the right, on grounds relating to your particular situation, to object to processing of your data, unless it is necessary for the performance of a task carried out in the public interest.

The right to lodge a complaint with a supervisory authority: without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of your personal data infringes data protection regulations.

Without prejudice to any other administrative or non-judicial remedy, you have the right to an effective judicial remedy, against a legally binding decision of a supervisory authority concerning it, as well as where the supervisory authority which is competent does not handle a complaint or does not inform you within three months on the progress or outcome of the complaint lodged. Proceedings against a supervisory authority shall be brought before the courts of the Member State where the supervisory authority is established.

The individual may address all her or his requests regarding personal data in written form to the provider, through one of the contacts at the website https://biteme-nutrition.com/.

In order to ensure reliable identification in case of a user exercising his or her rights regarding personal data, the provider may request additional data from the user and shall not refuse to act on the request of the individual, unless the provider demonstrates that it is not in a position to identify the user.

The provider must, by user’s request to exercise his or her rights in regard to data processing, provide information without undue delay and in any event within one month of receipt of the request.

§ 8 CROSS BORDER DATA TRANSFERS

Within the scope of our information sharing activities, your personal data may be transferred to other countries (including countries outside the EEA) which may have different data protection standards from your country of residence. Please note that data processed in a foreign country may be subject to foreign laws and accessible to foreign governments, courts, law enforcement, and regulatory agencies. However, we will endeavour to take reasonable measures to maintain an adequate level of data protection when sharing your personal data with such countries.

In the case of a transfer outside of the EEA, this transfer is safeguarded by either Privacy Shield or EU Model Clauses. You can find further information about the aforementioned safeguards by contacting us at privacy@biteme-nutrition.com.

§ 9 CONTACTING US

Please submit any questions, concerns or comments you have about this Privacy Policy or any requests concerning your personal data by contacting us at privacy@biteme-nutrition.com.

The information you provide when contacting us will be processed to handle your request and will be erased when your request is completed. Alternatively, we will restrict the processing of the respective information in accordance with statutory retention requirements.

§ 10 AMENDMENTS TO THIS PRIVACY POLICY

We reserve the right to change this Privacy Policy from time to time as necessary to the actual situation and legislation in the field of personal data protection. Please visit our website regularly and check our respective current privacy policy before any personal data is provided so that you are aware of any changes and additions. We will also notify you in advance of any changes that significantly affect the processing of your personal data (e.g. by notification on our website, by email).

BiteMe Nutrition d.o.o.

This is the cookie policy for BiteMe Nutrition d.o.o.

With this Cookie Policy we would like to provide you with all the necessary information about the cookies we use on BiteMe website (https://biteme-nutrition.com). This information contains general information about cookies, your choices, specific information about the cookies we use or cookies that are with our consent used by third parties.

This Cookie Policy forms part of BiteMe’s Privacy Policy and Terms and Conditions.

§ 11 Cookie policy

1 DEFINITION OF COOKIES

Cookie is a small text file that is placed on your computer by webpage that you visit. It helps the webpage to identify you when you return to a webpage and give us some other information about your browsing activity on the webpage. The cookie will collect information relating to your use of our webpage, information about your device such as the device’s IP address and browser type, demographic data and, if you arrived at our site via a link from third party site, the URL of the linking page.

There are different types of cookies. From the perspective of their life span (how long are they stored on your computer) cookies can be “session” or “persistent”. Session cookies are only stored for the duration of your visit to a webpage and are automatically deleted as soon as you close your web browser. On the other hand, persistent cookies remain on your computer when you have gone offline. They are saved on your device (computer, mobile phone) for a fixed period of time after the browser was closed and are activated each time you visit the webpage where cookie was generated.

2 HOW WE USE COOKIES

We use cookies for several reasons shown below. As many other websites, we use cookies and/or similar technologies to help us understand how people use BiteMe website. This enables us to keep improving our website and to tailor our website to your interest. With our own cookies we recognize you when you visit BiteMe website.

Account of related cookies

If you create an account with us, we will use cookies for data management and general management. These cookies are usually deleted when you leave our website however, in some cases they may later sit down to remember your preferences where you want them when placed outside.

Login and login-related cookies

We use cookies when you log in so we can remember this fact. This will keep you from logging in every time you visit a new page. These cookies are usually removed or cleaned when you leave our website in order to ensure that you can only access the limited materials and components when logged into your account on our website.

3 THIRD-PARTY COOKIES

In order to deliver best possible experience when using our services, in addition to our own cookies we also use cookies of reputable third parties (trusted companies) which help us optimize our website and analyze how the website is used. Third party cookies are cookies that are set by a domain other that the one being visited by the user.

Please find below a list of third-party cookies we use on our website:

Google Analytics

We use Google Analytics (Google’s analytics tool) to track website traffic. Google Analyitics collects data such as: how often a user visits a web site, what web pages they visit before they visit our web site, etc. Google Analyitics collects only the IP address assigned to you on the day of your visit to the website, not the name or other identifying information. BiteMe does not combine the data collected with Google Analytics with the data collected in any other way and does not identify the visitors to the web pages. Although Google Analytics uses persistent cookies to identify you as a single user the next time you visit, these cookies can only be used by Google. Google’s rights to use and share information obtained through Google Analyitics are defined in accordance with the following documents: Google Analytics Terms of Use and Google Privacy Policy. You can prevent Google Analytics from recognizing you the next time you visit a website by turning off the cookie usage feature of your web browser. We use the information obtained through Google Analytics solely for the purpose of improving our website. We do not sell or share this information with third parties.

Facebook pixel

We use Facebook pixel to better track the traffic we receive from Facebook, and to measure the effectiveness of ads and sponsored posts. Facebook pixel will install more cookies on your device as long as you agree to the third-party cookies on our site. You can read more about Facebook Pixel at the following link https://developers.facebook.com/docs/facebook-pixel/implementation/conversion-tracking. For more information on Facebook’s privacy policy, see their Cookie Policy.

Linkedin pixel (LinkedIn Insight Tag)

We use LinkedIn pixel or LinkedIn InsightTag to better track the traffic we receive from LinkedIn and to measure the effectiveness of ads and sponsored posts. LinkedIn pixel will install more cookies on your device, as long as you agree with third-party cookies on our website. You can find more information on LinkedIn InsightTag in their Cookie Policy and their cookie table.

4 CONTROLLING COOKIES

By using this website you agree that we can place cookies on your computer or device as described herein. However, most browsers allow you to control cookies through its setting preferences. Please note that removing or blocking cookies may affect your user experience and you may have to manually adjust some preferences every time you visit our website and some functionalities may not work.

If you give your cookie consent and change your mind later, you will have to reset your decision by deleting the cookies (instructions on how to do this for your browser are posted below). Once deleted, you will be notified again if you agree that we can place cookies on your computer or device.

5 INSTRUCTIONS FOR EDITING COOKIES IN INDIVIDUAL BROWSERS

To change how cookies are used in your browser, including blocking or deleting them, you can do so by changing your browser settings accordingly. Most browsers allow you to accept or decline all cookies, accept only a specific type of cookie, or alert you that a site wants to save a cookie. You can also easily delete cookies stored by your browser. Changing or deleting your browser’s cookie file, modifying or rewarding your browser or device may require you to disable cookies again. The process for managing and deleting cookies varies from browser to browser. If you need help with this, you can consult the browser’s help desk.

6 PERMISSION TO USE COOKIES

By using this website you agree that we can place cookies on your computer or device as described herein. However, most browsers allow you to control cookies through its setting preferences. Please note that removing or blocking cookies may affect your user experience and you may have to manually adjust some preferences every time you visit our website and some functionalities may not work.

7 FURTHER INFROMATION AND CONTACT DETAILS

If you need any further information with regard to cookies, we advise you to visit www.aboutcookies.org or www.whatarecookies.com.

In case you would like to contact us, please use our email customer@biteme-nutrition.com.

8 CHANGES TO OUR COOKIE POLICY

BiteMe reserves the right to change or supplement the Cookie Policy at any time. Please check https://biteme-nutrition.com/cookie-policy/ regularly for changes to our Cookie Policy, as we will occasionally update this Cookie Policy as necessary to protect our users, furnish current information and respond to legal and technical changes. The date of the last Cookie Policy is set out in the document. If you have any questions in case of any changes, please contact us at privacy@biteme-nutrition.com.

BiteMe Nutrition d.o.o.

Last update: Dec 2022