This policy explains what personal data we process when you use https://www.soulmateorganic.com (the "Website"), for what purpose and on what legal basis, and what rights you have. The Website is a static site presenting the Soul Mate yerba mate brand: it has no user accounts, forms, newsletter, comments or payments.
1. Data controller
The controller of personal data is Venusti sp. z o.o., registered office in Świdnik, ul. Tygrysia 6a, 21-040 Świdnik, Poland, KRS 0000664061, NIP 6121860348, REGON 366578876 (the "Controller").
For matters concerning personal data you can contact the Controller by e-mail at contact@soulmateorganic.com or by post at the registered office address.
2. What data we process and why
Technical data when you visit the Website
- Scope: IP address, date and time of the request, address of the requested page or file, server response code, type of browser and operating system, referring page address.
- Purpose: making the Website available, ensuring its stable operation and security, and protection against abuse.
- Legal basis: Article 6(1)(f) GDPR (the Controller's legitimate interests in running and securing the Website).
- Retention: for as long as necessary for these purposes, in line with the hosting provider's settings (see section 4). The Website has no database or forms of its own.
E-mail correspondence
- Scope: e-mail address, name (if you provide it) and the content of the message sent to the address given on the Website.
- Purpose: replying to the message and handling the matter.
- Legal basis: Article 6(1)(f) GDPR (the Controller's legitimate interests in communicating with people who contact it); where the message concerns entering into or performing a contract, Article 6(1)(b) GDPR.
- Retention: until the matter is closed and then, where necessary to establish, pursue or defend legal claims, until the limitation period for those claims expires.
Providing contact details is voluntary, but without them we cannot reply to your message. The technical data is necessary for the Website to be displayed in your browser.
3. Cookies and similar technologies
The Website does not store its own cookies or other data on your device (for example in localStorage), does not use analytics tools, pixels or advertising, and does not embed external scripts. Fonts are loaded from our own server, not from third-party providers. For this reason the Website does not display a cookie consent banner.
The Cloudflare infrastructure on which the Website runs may use, for security purposes, technical cookies that are necessary for its security features to work. Such cookies are not used for analytics or advertising. You can manage cookies in your browser settings.
4. Recipients of data and hosting
The Website is delivered through Cloudflare Pages and the Cloudflare content delivery network, provided by Cloudflare, Inc. (101 Townsend Street, San Francisco, CA 94107, USA). Cloudflare processes the technical data described in section 2 as a processor, under an agreement with the Controller.
The e-mail service that receives correspondence from the Website (the address contact@soulmateorganic.com) is provided by cyber_Folks S.A., with its registered office in Poznań, ul. Wierzbięcice 1B, 61-569 Poznań, Poland, under the Zenbox brand (zenbox.pl). The e-mail provider stores the messages and processes the personal data they contain as a processor, under an agreement with the Controller.
Recipients of data may also include the Controller's other IT service providers and public authorities, where a legal obligation requires data to be disclosed. We do not sell data.
5. Transfers of data outside the European Economic Area
The Cloudflare network operates globally, so technical data may be processed in data centres outside the European Economic Area, including in the United States. Transfers take place on the basis of a European Commission adequacy decision (the EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.
6. External links
The Website contains links to online shops where Soul Mate products can be bought (matemundo.pl and the foreign versions of the matemundo shop: matemundo.co.uk, matemundo.de, matemundo.fr and matemundo.es), to the TigreMarket.com wholesale platform, and to the brand's Instagram and Facebook profiles.
The matemundo shops are run by the same Controller, but they are separate services with their own terms and their own privacy policies. That is where we describe what data we process for purchases, accounts and orders. The TigreMarket.com platform is run by its operator, under its own terms and privacy policy. The Website does not pass any data about your visits to these shops or to the platform, and data relating to purchases begins to be processed only when you go to the shop and use it. Purchases cannot be made on the Website.
The Instagram and Facebook profiles are operated by the separate controllers of those services, in accordance with their privacy policies. The Website does not embed social media plug-ins and does not pass information about your visits to those services until you click a link.
7. Your rights
In connection with the processing of personal data you have the right to:
- access your data and obtain a copy of it,
- rectify data that is inaccurate or incomplete,
- erasure of data where there is no longer a basis for processing it,
- restriction of processing in the cases set out in Article 18 GDPR,
- data portability, to the extent provided for by law,
- object to processing based on the Controller's legitimate interests (Article 21 GDPR), on grounds relating to your particular situation.
To exercise these rights, write to contact@soulmateorganic.com. You also have the right to lodge a complaint with the supervisory authority: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland. You may also lodge a complaint with the data protection authority of your country of residence or place of work and, if you are in the United Kingdom, with the Information Commissioner's Office (ICO).
8. Automated decisions and profiling
We do not make decisions about you by automated means and we do not profile users of the Website.
9. Security
The Website is available only through an encrypted HTTPS connection. We apply technical and organisational measures appropriate to the risk, and we restrict access to correspondence to those who need it.
10. Changes to this policy
We may change this policy, for example when new features such as a contact form, newsletter or analytics are added to the Website. The current version is always available on this page, with the date of the last update.