Cookies policy
1. Controller
The controller of personal data related to the use of the website www.fink.store (hereinafter: the “Website”) is Fink Group sp. z o.o., with its registered office at ul. Folwarczna 6, 62-300 Psary Małe, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000848497, NIP 7891791218, REGON 386425335 (hereinafter: “Fink”).
Fink can be contacted by e-mail at: info@fink.store.
2. What are cookies and similar technologies?
Cookies are small files or pieces of information stored on a user’s device or read from that device while using the Website. The Website may also use similar technologies, such as browser local storage, pixels, tags, device identifiers and other mechanisms used to provide functionality, security, measurement or advertising.
In the remainder of this Policy, the term “cookies” also includes such technologies, unless the context indicates otherwise. Cookies may be session cookies, meaning that they are deleted after the session ends or the browser is closed, or persistent cookies, meaning that they are stored for a specified period or until they are deleted earlier. They may be set by Fink or by third-party providers.
3. Legal basis for the use of technologies
Strictly necessary technologies
Fink may use strictly necessary technologies without obtaining separate consent from the user where they are necessary for the transmission of a communication or for providing a service expressly requested by the user, in accordance with Article 399(3) of the Polish Electronic Communications Law.
Where the use of such technologies involves the processing of personal data, the legal basis for such processing is, depending on the purpose, Article 6(1)(b) or (f) of the GDPR, in particular the performance of a contract, ensuring the security of the Website, preventing abuse or ensuring the proper operation of the basic functions of the online store.
Optional technologies
Functional, analytics and marketing technologies requiring consent are used only after such consent has been obtained, in accordance with Article 399(1) in conjunction with Article 400 of the Polish Electronic Communications Law.
Where personal data is processed through such technologies, the legal basis for processing is Article 6(1)(a) of the GDPR. Consent is voluntary and may be withdrawn at any time. The rules concerning limited cookieless measurements carried out as part of Google Advanced Consent Mode are described below.
4. Categories of cookies
Strictly necessary
Strictly necessary technologies are used to ensure the basic and secure operation of the Website. They may be used, among other things, to manage sessions, login, security, fraud prevention, the shopping cart, order processing, the purchasing process, the selected country or language where necessary for the proper operation of the Website, and to remember the user’s cookie choices. These technologies are always active to the extent necessary for the operation of the Website or for providing a function expressly requested by the user.
Functional
Functional technologies enable the use of additional settings and features of the Website that are not necessary to make a purchase or use the basic functions of the online store. They may be used, among other things, to remember additional user preferences and personalize how the Website operates.
Functional technologies requiring consent are activated only after consent has been given.
Analytics
Analytics technologies are used to measure how the Website is used, create statistics, analyze traffic and performance, and improve the online store. Cookies and other optional analytics technologies are used only after the appropriate consent has been obtained.
Irrespective of the above, limited cookieless measurements may be transmitted as part of Google Advanced Consent Mode in accordance with the rules described later in this Policy.
Marketing
Marketing technologies may be used to measure campaign effectiveness, attribute conversions, conduct remarketing, create audience groups, and select and personalize advertisements. Cookies and other optional marketing technologies are used only after the appropriate consent has been obtained.
Before consent is given, Google may receive only limited cookieless measurements as part of Advanced Consent Mode. This does not constitute consent to personalized advertising or remarketing.
5. Current list of technologies
The current list of cookies and similar technologies used on the Website is available in the “Cookie Settings” panel. The panel contains information including the name of the technology, provider, category, purpose, and period of operation or storage. The list is updated whenever a new tool is introduced or there is a change of provider, purpose, or manner in which a given technology is used.
Users may also delete or block cookies using their browser settings. However, blocking strictly necessary technologies may result in the basic functions of the Website, such as login, the shopping cart or placing an order, not operating properly.
6. Consent and cookie settings
When visiting the Website for the first time, the user may accept all optional technologies, reject them, or make a detailed selection in the settings panel. Optional categories requiring consent are disabled by default. A user’s inactivity is not treated as consent.
Refusal to consent to functional, analytics or marketing technologies does not prevent the use of the basic functions of the Website or the completion of a purchase. The user may change their choice or withdraw previously given consent at any time via the “Cookie Settings” panel.
Cookie choices generally apply to a particular device and browser. After deleting cookies, changing browsers or using another device, the user may be asked to make a choice again. Fink may also ask the user to make a new choice after the validity period of the saved decision has expired or in the event of a material change to the purposes, technologies or providers.
Information about the user’s choice is stored for the period indicated in the settings panel. Information necessary to document consent or its withdrawal may be stored for the period necessary to demonstrate compliance with the law and to establish, pursue or defend legal claims.
7. Google Advanced Consent Mode
The Website uses Google Advanced Consent Mode (Google Consent Mode – Advanced). Under this model, Google tags may be loaded before the user makes a choice in the cookie panel. Until the appropriate consent is given, Google receives information indicating that consent has not been granted for the storage of analytics and advertising data, the use of data for advertising purposes, or the personalization of advertising. In this state, Google tags do not write or read optional analytics or advertising cookies covered by the refusal and do not use data for personalized advertising or remarketing.
Google may, however, receive limited cookieless measurements used, among other things, to communicate consent status, perform basic measurement and support statistical modelling. Such measurements may include, in particular, a timestamp, technical information provided by the browser, such as browser and device type, user agent, referring page address, consent status information, and information about whether an advertising click identifier is present in the URL.
Connection to Google servers also involves the technical processing of the IP address. According to information provided by Google, Google advertising products truncate the IP address upon collection. Fink also applies additional mechanisms designed to limit the scope of advertising data transmitted to Google before the appropriate consent has been obtained.
To the extent that limited cookieless measurements result in the processing of personal data, Fink relies on Article 6(1)(f) of the GDPR, i.e. its legitimate interest in ensuring the proper operation of the consent management mechanism, protecting and diagnosing the Website, and obtaining limited measurement data concerning the operation of the Website and the effectiveness of marketing activities.
This legal basis applies to the processing of personal data under the GDPR and does not replace consent where such consent is required under Article 399 of the Polish Electronic Communications Law. Fink configures its tools so that, before the appropriate consent has been obtained, optional technologies requiring such consent are not used.
The user may object at any time to the processing of personal data based on Article 6(1)(f) of the GDPR by contacting Fink. Once the appropriate consent has been given, Google may begin using cookies and carrying out more extensive analytics measurements or advertising activities only to the extent corresponding to the user’s choice.
8. Technology providers
Shopify
The Website operates using the Shopify platform, which provides, among other things, the online store infrastructure, session management, the shopping cart, the checkout process and other functions related to operating an online store. Fink uses the Shopify Network Intelligence feature.
As part of this feature, Shopify may use information relating to users’ activity on the Website together with information arising from their interactions with Shopify and other merchants using Shopify for the purpose of providing enhanced services, including, among other things, improving security, products and performance, analytics, personalization and better ad targeting. In connection with the provision of such services, Shopify may act as an independent controller.
For users in the European Economic Area and other regions where appropriate consent is required, the choice made in a properly integrated cookie panel is communicated to Shopify through the Shopify Customer Privacy API. If the user does not consent to non-essential cookies or other optional technologies, device data originating from the Website is appropriately marked so that Shopify Network Intelligence does not use it for purposes other than those that are strictly necessary.
More information about Shopify’s processing of personal data is available in Shopify’s Consumer Privacy Policy and Shopify Privacy Portal.
Pandectes
Pandectes provides the consent management platform used for cookies and similar technologies. The tool is used, among other things, to display the consent panel, record the user’s choice and communicate information about that choice to integrated tools, including through the Shopify Customer Privacy API and Google consent management mechanisms.
Google provides analytics and advertising tools used on the Website, which may include, in particular, Google Analytics, Google Ads, Google Tag Manager and Google Consent Mode. Optional analytics and advertising functions requiring consent are activated only to the extent resulting from the user’s choice.
The rules concerning limited cookieless measurements before consent is given are described in the section “Google Advanced Consent Mode”.
Meta and Pinterest
Depending on the marketing activities currently being conducted, the Website may use Meta or Pinterest technologies for purposes including measuring campaign effectiveness, attributing conversions, creating audience groups, remarketing or displaying advertisements.
These tools are activated only after the required marketing consent has been obtained and only where they are actually used and listed in the current technology register available in the “Cookie Settings” panel.
9. Transfers of data outside the European Economic Area
Some technology providers used by Fink, or their subcontractors, may process data outside the European Economic Area, in particular in the United States.
Where data is transferred to a country in respect of which the European Commission has adopted an adequacy decision, the transfer may take place on the basis of that decision. In the case of transfers to the United States, this may include the EU-U.S. Data Privacy Framework, provided that the recipient holds a valid certification under that framework.
In other cases, data may be transferred, in particular, on the basis of standard contractual clauses approved by the European Commission or another mechanism permitted under the GDPR. Where necessary, appropriate supplementary safeguards are also applied.
10. Retention period
The duration of individual cookies and similar technologies is indicated in the “Cookie Settings” panel.
Personal data obtained through these technologies is retained no longer than is necessary for the purpose for which it was collected. After the relevant period has expired, the data is deleted or anonymized, unless further retention is required by law or is necessary to establish, pursue or defend legal claims.
11. User rights
Under the conditions set out in the GDPR, the user may have the right to access their personal data, rectify or erase it, restrict its processing, or obtain data portability. The user may also object to processing based on legitimate interests and may withdraw consent at any time where consent is the legal basis for processing.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal. Requests concerning rights in relation to Fink may be sent to: info@fink.store.
The user also has the right to lodge a complaint with the President of the Personal Data Protection Office in Poland. Where Shopify acts as an independent controller in connection with the provision of enhanced services, the user may also exercise their rights directly through the mechanisms made available by Shopify.
12. Changes to this Policy
Fink may update this Policy, in particular in the event of changes in applicable law, the operation of the Website, the technologies used, providers or processing purposes.
If a change affects the scope of consent previously given, Fink will ask the user to make the appropriate choice again.
Last updated: 31 August 2026
