Dear Sir or Madam,

This Privacy Policy (hereinafter: Privacy Policy) of the company operating under the business name

Fit&Healthy s.r.o. (hereinafter: the Service Provider) describes how Service Provider collects,

processes and uses Users' data on the website www.vitalbox.cz (hereinafter: Website). The Website is

operated by the Service Provider.

1. Who is the Controller of the Users' personal data?

In connection with Article 13 of the General Data Protection Regulation (hereinafter: GDPR), the

Service Provider informs that the controller, i.e. the entity which decides how the data of the users of

the Website (hereinafter: User) will be used, is the Service Provider, who can be contacted at e-mail

address info@vitalbox.cz.

2. What personal data of Users do we process?

When placing an order, a new User will be asked to provide the following data:

1) First and last name;

2) Company name and Tax Identification Number (NIP) in the case of a company;

3) Delivery address;

4) E-mail address;

5) Telephone number;

6) Details required for the delivery of the diet;

7) Invoice data (optional).

3. Do you have to provide your personal data to the Service Provider?

The provision of the above personal data by the User is voluntary. However, failure to provide such

data will result in the impossibility of performance of the agreement with the Service Provider, so that

we would not be able to provide you with services. If for some reason you cannot provide your personal

data, unfortunately we will not be able to conclude an agreement with you and consequently you will

not be able to use the Website.

4. Purpose and legal basis for the processing of Users' personal data

Your personal data defined in point 2 of the Privacy Policy shall be processed on the basis of your

consent. Your personal data shall be processed for the purpose of performing the agreement

concluded with the Service Provider, in particular for creating and maintaining an account in the

Website, the possibility of placing an order, purchasing the selected products and having the order

delivered by our driver (hereinafter referred to as the Driver), as well as the possibility of providing

electronic services and handling your complaints and requests. The Service Provider shall oblige the

Driver to ensure full protection of the personal data provided to it.

5. For how long do we keep the personal data you provide?

The data specified in item 2 of the Privacy Policy, will be stored until the deletion of the account in the

Website, and also after the deletion of the account in the Website only for the purposes of:

1) the performance of obligations under the law, including in particular tax and accounting

obligations;

2) pursuing claims in connection with the performance of an agreement with Service Provider.

We retain personal data collected for marketing purposes for which the User has given separate

consent for the duration of the marketing activities or until the User objects to the processing of their

personal data.

6. Who we share your personal data with

We share your personal data with the parties to transactions you enter into on the Website and with

entities that support us in providing electronic services, i.e. those that provide payment services, our

employees and associates, including Drivers, the Website provider, the hosting company that handles

our email, entities that work with us to handle accounting, tax and legal matters.

Transaction data, including personal data, are also provided to the online payment service provider,

namely Transaction data, including personal data, are also provided to the online payment service

provider, namely Blue Media S.A. with its registered office in Sopot, address: 81-718 Sopot, ul.

Powstańców Warszawy 6, registered in the District Court Gdańsk-Północ, 8th Commercial Division of

the National Court Register, KRS No. 0000320590, with share capital of PLN 2,000,000 (fully paid up),

Tax Identification Number (NIP): 585-13-51-185, represented by: Bartłomiej Gast - the Proxy, being a

payment service provider within the meaning of the Act of 19 August 2011 on payment services

(hereinafter: Blue Media) to the extent necessary to handle payments. Blue Media is the controller of

the personal data provided to it.

7. Security of personal data

The Service Provider protects personal data from being made available to unauthorised persons, from

being taken by an unauthorised person, from being processed in violation of applicable laws and from

being altered, lost, damaged or destroyed.

8. Storage of personal data and User's rights

Users have the right to request access to personal data from the controller, the right to rectify, delete,

limit processing, the right to data portability, the right to object, the right to withdraw consent. If they

find that our processing of their personal data violates the provisions of the GDPR, they have the right

to lodge a complaint with the President of the Office for Personal Data Protection.

In the course of ordering products, until the final confirmation by pressing the appropriate button,

Users who have an account with the Website have the possibility of independent correction of the

entered data through editing their account profile.

Data verification or order correction can also be done by sending an e-mail to the Service Provider at

the following address: info@vitalbox.cz

The User has the possibility to change the data entered when creating the account at any time within

the options made available.

Customers who have an account on the Website will be informed of changes to this Privacy Policy via

email correspondence.

In matters not covered by this document, the provisions of Polish law including the Civil Code, as well

as European Union law, in particular the GDPR (Regulation of the European Parliament and of the

Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons in relation to the

processing of personal data and on the free movement of such data and repealing Directive 95/46/EC)

shall apply.

9. Do we transfer your data to countries outside the European Economic Area (EEA)?

Your personal data may be transferred to countries outside the European Economic Area to entities

that support us in providing electronic services such as sending emails, sending notifications, hosting

data.

10. Do we process your personal data automatically (including through profiling) in a way that affects

your rights?

Your personal data will not be processed by automated means (including profiling).

11. Cookies Policy

The use of the Website is carried out using the secure SSL Protocol, which affects the protection of

data transmission on the Internet.

The Website may use cookies, i.e. information files saved by the Service Provider's server on the User's

computer. The use of cookies makes it possible to improve the quality of services offered by the

Website by:

a. improving the process of selecting and ordering products;

b. informing about User preferences;

c. creating statistics on the use of the services of the Website by Users.

Cookies usually contain the name of the website they come from, the time of storage on the terminal

equipment and a unique number. Within the Website we use the following types of Cookies:

a. "session" - are stored on the User's terminal equipment until they log out, leave the website

or switch off the web browser;

b. "permanent" - are stored in the User's terminal equipment for the time specified in the

parameters of cookies or until they are deleted by the User;

c. "performance" - enable collection of information on the manner of use of the sites of the

Website;

d. "necessary" - which enable the use of the services available on the Website;

e. "functional" - which makes it possible to remember the settings selected by the User and to

personalize the User's interface;

f. "own" - placed by the Website;

g. "external" - coming from a site external to the Website;

Cookies on the Website

Our site uses Cookies to make it easier for you to use its resources. Cookies contain useful information

and are stored on the User's computer - our server can read them when the User reconnects to the

computer. The use of cookies does not make it possible to retrieve any personal or address data or

other confidential information from the User's computer. The use of cookies is not possible if the

option to save cookies has been deactivated in the Internet browser. Disabling this option does not

prevent the use of the Website, but may cause some difficulties. Most Internet browsers allow the

storage of Cookies in the User's terminal equipment by default. Each User of our Website has the

possibility to change the settings concerning Cookies in the settings of his/her Internet browser.

In order to function properly, the Website requires the latest version of one of the following browsers:

• Chrome

• Firefox

• Edge

• Opera

• Safari

12. Additional information

Within the Website, there may be placed external links enabling its Users to directly reach other

websites or, while using the Website, there may also be placed in your device the cookies originating

from other entities, in particular from suppliers such as: Facebook, Google in order to enable you to

use the functionalities of the Website integrated with these services. Each provider defines the rules

for using cookies in its privacy policy, therefore, for security reasons, we recommend that you read the

We reserve the right to change the Privacy Policy by posting the new Privacy Policy on our website.

After the change, the Privacy Policy will appear on the website with the new date, and those who have

an account on the Website will be sent an e-mail information about the change of the document.

Team Vitalbox