EN / PL

Privacy Policy

1. General information

  1. This privacy policy applies to the website operating at: chilicollective.com
  2. The website operator and personal data controller is: Chili Models sp. z o.o. (limited liability company), K. I. Gałczyńskiego St, 00-362 Warsaw, Poland
  3. Contact email address: email@chilicollective.com
  4. The Operator is the Controller of your personal data with respect to the data voluntarily provided through the website.
  5. The website processes personal data for the following purposes:
    • Handling inquiries via contact forms
    • Presenting offers or information
  6. The website collects information about users and their behavior in the following ways:
    1. Through data voluntarily entered in forms, which are then stored in the Operator’s systems
    2. Through the use of cookies saved on end-user devices

2. Selected data protection methods used by the Operator

  1. Login areas and personal data input fields are protected at the transmission layer (SSL certificate). This ensures that personal and login data entered on the website are encrypted on the user’s computer and can only be read by the target server.
  2. The Operator periodically changes its administrative passwords.
  3. An essential element of data protection is the regular updating of all software used by the Operator for processing personal data, particularly through regular updates of software components.

3. Hosting

  1. The website is hosted (technically maintained) on servers provided by OVH.
  2. The hosting company, to ensure technical reliability, maintains server-level logs. These may include:
    • Resources identified by URL (addresses of requested pages or files)

    • Timestamp of the request

    • Timestamp of the response

    • Client station name – identified via the HTTP protocol

    • Information on HTTP transaction errors

    • URL of the previously visited site (referrer link) if the transition to the Service occurred through a link

    • Information about the user’s browser

    • IP address

    • Diagnostic information related to the self-ordering process via site forms

    • Information related to email handling addressed to and from the Operator

4. Your rights and additional information on data use

  1. In certain situations, the Controller has the right to share your personal data with other recipients if necessary for the performance of a contract or for fulfilling legal obligations. This applies to the following groups of recipients:
    • hosting company under data processing agreements
    • authorized employees and collaborators using data to perform website-related activities
    • marketing service providers acting on behalf of the Controller
  2. Your personal data will be processed no longer than necessary for the purposes defined by applicable laws (e.g. accounting regulations). For marketing purposes, the data will not be processed for longer than 3 years.

  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification of your data,
    • erasure of your data,
    • restriction of processing,
    • data portability.
  4. You also have the right to object to processing specified in point 3.2, including profiling, for the purposes of legitimate interests pursued by the Controller. However, this right cannot be exercised where there are overriding legitimate grounds for processing, such as the establishment, exercise, or defense of legal claims.
  5. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary to use the website.
  7. Automated decision-making, including profiling, may be applied in relation to you for the purpose of providing services under the concluded contract and for the Controller’s direct marketing.
  8. Personal data are not transferred to third countries outside the European Union.

5. Information in forms

  1. The website collects information voluntarily provided by users, including personal data, if submitted.
  2. The website may record information about connection parameters (such as timestamp and IP address).
  3. In some cases, the website may store information linking form data with the email address of the user who completed the form. In such cases, the user’s email address may appear within the URL of the page containing the form.
  4. Data provided in forms are processed for the purpose related to the function of a specific form — for example, handling service requests, commercial contact, or service registration. The description and context of each form clearly indicate its purpose.

6. Administrator logs

  1. Information on user behavior within the website may be logged. These data are used for website administration purposes.

7. Important marketing techniques

  1. The Operator uses statistical traffic analysis tools provided by Google Analytics (Google Inc., USA). The Operator does not transfer personal data to this service provider — only anonymized information. The service relies on cookies stored on the user’s device. Users can view and edit their advertising preferences collected by Google’s ad network using the following tool: https://www.google.com/ads/preferences/
  2. The Operator also uses remarketing techniques to tailor advertising messages to user behavior on the website. Although this may create the impression that the user’s personal data is being tracked, no personal data is actually transmitted to advertising partners. The technical requirement for such actions is enabled cookie support.
  3. The Operator may use automation solutions within the website, such as automatically sending an email to a user after visiting a specific subpage, provided the user has consented to receive commercial messages from the Operator.

8. Information about cookies

  1. The website uses cookies.
  2. Cookies are small text files stored on the User’s device that allow the website to function properly. Cookies typically contain the name of the website, storage duration, and a unique identifier.
  3. The entity placing and accessing cookies on the User’s device is the website Operator.
  4. Cookies are used for the following purposes:
    1. maintaining the User’s session after logging in, so the User does not need to re-enter login and password on each page;
    2. achieving the goals defined above under “Important Marketing Techniques”;
  5. Two main types of cookies are used on the website: session cookies – temporary files deleted after logging out, closing the site, or browser and persistent cookies – stored until their expiration date or manual deletion by the User.
  6. Most web browsers allow cookies by default. Users can change these settings, delete cookies, or block them automatically. Detailed instructions can be found in the browser’s help documentation.
  7. Restricting the use of cookies may affect some functionalities of the website.
  8. Cookies placed on the User’s device may also be used by external partners, including: Google (Google Inc., USA), Facebook (Facebook Inc., USA), Twitter (Twitter Inc., USA).

9. Cookie management - how to grant and withdraw consent

  1. If you do not wish to receive cookies, you may adjust your browser settings. Please note that disabling essential cookies required for authentication, security, or user preferences may hinder or, in extreme cases, prevent the use of the website.
  2. To manage cookie settings, please select your browser from the list below and follow the instructions:


    Mobile devices: