Privacy Statement

1. Who is who in this privacy policy?

We, i.e. AmRest Coffee Spółka z o.o. with its registered office in Wrocław, address: ul. Powstańców Śląskich 15-17, 53-332 Wrocław.

You, i.e. our Customer – a natural person whose personal data we process for at least one purpose indicated in the privacy policy.

2. What is the purpose of this privacy policy?

We attach great importance to protecting your privacy and your personal data. We take care of the security of your personal data when processing.

In the privacy policy, we explain how we use your personal data in relation to your participation in Starbucks Rewards program (registration of a physical or virtual Starbucks card and creation and operation of your user account - this can be done at www.starbucks.pl, https://card.starbucks.pl/auth/register, https://card.starbucks.pl/auth/login), use of Starbucks card, as well as answering queries, complaints and suggestions you have submitted. You will also find information about your rights due to the fact that we process your personal data and about how you can exercise these rights.

3. Who is the controller of your personal data and what are its contact details?

The controller of your personal data is AmRest Coffee Spółka z o.o. with its registered office in Wrocław.

Our contact details: ul. Powstańców Śląskich 15-17, 53-332 Wrocław, e-mail: [email protected], telephone: 71 3861000.

4. How can you contact our Data Protection Officer?

We have designated a Data Protection Officer, whom you can contact in all matters related to the processing of your personal data by us and in order to exercise your rights regarding the processing.

You can contact the Data Protection Officer by:

sending an e-mail to [email protected];
calling 71 3861000;
sending a letter (preferably marked for the attention of “Data Protection Officer”) to AmRest Coffee Spółka z o.o., ul. Powstańców Śląskich 15-17, 53-332 Wrocław.

5. What personal data do we process and where do we get it from? For what purpose do we process your personal data and on what basis?

Starbucks Rewards program card and user account management

If you decide to register a Starbucks card in the Starbucks Rewards program and thus set up a user account, in order to perform the contract regarding your participation in the Starbucks Rewards program and the management and maintenance of your user account, we will process your personal data provided by you in the registration form.
The legal basis for our processing of the above-mentioned data is the necessity to perform the contract regarding the Starbucks Rewards program and the user account, and to take action at your request (Article 6, section 1 letter b) of the GDPR).

Handling purchases with a Starbucks card in the Starbucks Rewards program

In order to manage the purchase of our products or services using the Starbucks card, we will process information about the transactions and products you purchase, your data related to the Starbucks card, card type (virtual / plastic), Starbucks card number, its expiry date.
The legal basis for our processing of the above-mentioned data is the necessity to perform the contract regarding your purchases and take action at your request (Article 6, section 1 letter b) of the GDPR).

Compliance with legal obligations

In order to comply with the obligations imposed on us by law, e.g. by the Accounting Act or tax regulations (e.g. issuing and storing invoices and accounting documents), we will process your data regarding transactions made using the Starbucks Card and information from your user account as well as information related to complaints
The legal basis for the processing of the above-mentioned data is the legal obligation imposed on us (Article 6, section 1 letter c) of the GDPR)

Conducting marketing activities as part of your user account, including the analysis of preferences and behavior and creating a customer profile for marketing purposes (profiling)

In order to learn about your personal preferences and behavior in order to present you with information about the products we offer, news and promotions that we believe may interest you and to make sure they are tailored to your needs, a customer profile will be created (profiling). In order to do so we will process your personal data provided by you in the registration form of the Starbucks Rewards program and your user account, information related to your activity under the user account and your use of the Starbucks card in the last 24 months (history of your orders, information on granted and used stars and awards), the frequency and method of using your user account (i.e. via the mobile app/website) and Starbucks cards (plastic card/virtual card), your opinions and suggestions, your location data (if you enable this option on your device or browser), cookies and other similar technology for collecting data on user activity, i.e. places visited and your activity on our websites, technical information about your device (IP/MAC address, operating system and browser type).
Based on the above data, we will send you personalized messages regarding products, news and ongoing promotions dedicated exclusively to participants of the loyalty program (conducting direct marketing). The above communication will be carried out as a permanent element of your participation in the Starbucks Rewards program.
The legal basis for the processing of the above-mentioned data, including our research on your preferences and behavior (in order to match the information provided to you to your interests and needs), is the necessity to perform the contract to which you are a party and to take action at your request before concluding the contract (Article 6, section 1 letter b) of the GDPR).

Conducting marketing activities in the field of displaying behavioral advertising

Your data will also be used to show you advertisements regarding promotions for products offered in our coffee shops on your Facebook account as part of the standard functionalities of the website. This is possible using the Facebook business tool - Custom Audience. Remember that you can change your preferences regarding displaying advertisements on Facebook at any time in your profile settings and at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. More information on how your data is used by Facebook, including for advertising purposes, is available at: https://www.facebook.com/privacy/explanation.
The legal basis for the processing of the above-mentioned data is our legitimate interest in conducting marketing activities in the field of displaying advertisements to you on Facebook (Article 6, section 1, letter f) of the GDPR).

Conducting marketing activities, regardless of participation in the loyalty program

Regardless of your participation in the loyalty program, if you agree to receive commercial information via e-mail, we will send you marketing messages about products, news and promotions offered by us and AmRest Sp. z o.o. to the e-mail address provided. You can withdraw your consent at any time by sending us a relevant request (to the e-mail address: [email protected]). If you have a user account, you can additionally use the designated account settings option to withdraw your consent to receive marketing content. Withdrawal of consent does not affect the lawfulness of actions performed before its withdrawal.
The legal basis for the processing of the above-mentioned data is our legitimate interest in sending marketing content based on your prior consent to receive commercial information (Article 6, section 1, letter f) of the GDPR).

Determining and pursuing claims and defending against claims

In order for us to determine or pursue claims, as well as defend against such claims, we will process the data regarding purchases made by you using your Starbucks card, information from your user account and Starbucks card, as well as data related to complaints
The legal basis for the processing of the above-mentioned data is our legitimate interest in determining and pursuing claims or defending against such claims (Article 6, section 1 letter f) of the GDPR).

Handling inquiries, complaints or suggestions

In order to handle your inquiry, complaint or suggestion, we will process your data provided in the question, complaint or suggestion.
The legal basis for the processing of the above-mentioned data is our legitimate interest in being able to reply (Article 6, section 1 letter f) of the GDPR).

Measuring the satisfaction of our Customers and determining the quality of our services

In order to measure the satisfaction of our Customers and determine the quality of our service, we will process your data indicated in the survey, which we may ask you to complete.
The legal basis for the processing of the above-mentioned data is our legitimate interest in obtaining relevant information in order to improve the quality of our products and services (Article 6, section 1 letter f) of the GDPR).

6. Automated decision making

We will not make decisions about you that would be based solely on the automated processing of your data and would have legal effects on you or otherwise significantly affect you.

Who do we transfer your personal data to?

We will transfer your data to entities acting on our behalf, i.e. providers of IT services and solutions, marketing agencies, entities providing accounting and administrative services, entities carrying out customer satisfaction surveys on our behalf.

We will also provide your e-mail address to entities managing Starbucks card top-ups in order to enable them to do so.

Your data will also be transferred to Facebook Ireland Ltd. in connection with our use of the Custom Audience business tool. In order to ensure an adequate level of protection of your data, it will be anonymized before it is transferred, thus preventing your direct identification.

8. Will your personal data be transferred to a third country (i.e. a country outside the European Economic Area)?

We will not transfer your personal data to third countries (i.e. countries outside the European Economic Area).

9. How long will we store your data?

We will store your data for a period not longer than it is necessary to achieve the purposes for which we process it. Remember that we can always additionally extend this period by the limitation period for your or our claims resulting from legal provisions, if the processing of this data is necessary to determine or pursue claims or defend against such claims. We will store your data for the following period:

For the purpose of maintaining and servicing your user account and enabling you to participate in the Starbucks Rewards program, including sending you marketing messages related to your participation in the loyalty program and using the Starbucks card - until you resign (you can resign by deleting your account (option in your account, available after logging in), sending us a message to the e-mail address [email protected], sending us a letter to the following address: AmRest Coffee Spółka z o.o., ul. Powstańców Śląskich 15-17, 53-332 Wrocław) or excluding you from participation in accordance with the regulations or termination of the Starbucks Rewards program.
For the purposes of carrying out transactions made by you, including the purchase of our products or services using a Starbucks card - for the duration of the contract relating to such transactions.
For the purposes of fulfilling our legal obligations (e.g. from the Accounting Act or tax regulations) - for the period resulting from such provisions (e.g. for billing purposes, your data will be stored for 5 years from the end of the calendar year, in which the deadline for payment of the tax related to the order has expired).
For the purposes of conducting marketing communication on the basis of expressed consent - until the consent to receive marketing content is withdrawn or an effective objection to the processing of your data for marketing purposes is submitted.
For the purposes of testing the satisfaction of our customers and determining the quality of our services - for the duration of our legitimate interest, but no longer than 24 months.
For the purpose of analyzing and correcting errors potentially occurring on the mobile app - for the duration of our legitimate interest, but no longer than 24 months.
For the purpose of determining and pursuing claims or defending against such claims - for the period of limitation of your claims against us or our claims against you resulting from legal provisions (e.g. the general limitation period for claims related to business activity is 3 years, and the general limitation period for consumer claims against us is 6 years; the periods of storing personal data given above may change in the case of changes to generally applicable law).

10. Can you object to the processing of your data? What rights do you have in connections with us processing your personal data??

How can you exercise your rights?

Objection to data processing for marketing purposes related to your consent to receive such content: You have the right to object, at any time, to the processing of your data for marketing purposes.
Objection in connection with your specific situation: You have the right to object at any time to the processing of your data for the purposes of our legitimate interest (other than marketing), for reasons related to your specific situation. In such cases, you should indicate the specific situation that, in your opinion, justifies the termination of the processing of your data covered by the objection.

You also have the following rights:

The right to obtain confirmation of whether we are processing your personal data, as well as the right to access this data and its copies
The right to request amending (correction) or completion of your personal data if it is incomplete or incorrect.
The right to request the restriction of the processing of your personal data, if, for example:
If the processing of your personal data is restricted, we will be able to store it and additionally use it only to determine, pursue or defend claims, to protect the rights of another natural or legal person, or for important reasons in the public interest of the European Union or a Member State. Any other actions to be taken by us will require your consent
- you question the correctness of your personal data processed by us
- the processing of your personal data is unlawful, but you oppose the deletion of this data and request the restriction of its use instead
- we no longer need your personal data to achieve our purposes, but you need them to determine, pursue or defend claims
- you have objected to our processing of your personal data due to your specific situation - in this case, you may request that we restrict the processing of this data until it is determined whether or not our legitimate interests override the grounds for your objection.
The right to request the deletion of your personal data, if, for example:
- o Your personal data is no longer necessary to achieve the purposes for which it was collected and processed
- you object to the processing of your personal data by us due to your specific situation, and we have no grounds for processing that would override your objection
- you object to its processing by us for marketing purposes
- we have processed your personal data unlawfully.
The right to data transfer: In the event that your data is processed in an automated manner on the basis of consent or contract, you have the right to receive from us the data that you provided to us on the basis of consent or contract, in a structured, publicly available format suitable for machine-reading (e.g. readable on a computer). You also have the right to request that your personal data be sent by us directly to another controller, if technically possible.
The right to withdraw, at any time, the consent to the processing of your personal data in relation to the data that we process on the basis of consent (e.g. within the scope of data provided voluntarily during registration, such as gender or date of birth). Withdrawal of consent does not affect the lawfulness of the processing carried out by us on the basis of consent before its withdrawal. In order to do so, log in and change the settings in your account or write to us at [email protected] or [email protected].
To exercise your rights, you can contact our Data Protection Officer (contact details to be found in section 4 above) or contact us (contact details to be found in section 3 above).
You also have the right to file a complaint with the President of the Personal Data Protection Office of your usual place of residence, place of work or place of alleged breach of personal data.

11. Do you have to provide us with your personal data?

Providing your personal data for the purpose of registering a Starbucks card and creating a user account is necessary to conclude an agreement regarding participation in the Starbucks Rewards program and a user account. If you do not provide this data, we will not be able to register your Starbucks card and create your user account.

12. What is the GDPR?

(Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)).

13. Since when does this privacy policy apply?

This privacy policy applies as of July 13, 2021.