Privacy Policy

This Privacy Policy outlines the principles of personal data processing by Yucca Root sp. z o.o. in connection with the use of the website yuccaroot.eu (hereinafter: 'Website').

Last updated: March 2025.

1. Data Controller

The controller of your personal data is:

Yucca Root sp. z o.o. ul. Poligonowa 1/39 04-051 Warsaw NIP: 1133022461

Contact regarding personal data matters: karol.cetlin@yuccaroot.eu

2. Purpose and Scope of the Website

The website yuccaroot.eu is a business card site — it does not conduct online sales, does not have an online store, and does not process payment data. The purpose of the Website is to present the company's offer, contact details, and information about the brands in the Yucca Root portfolio.

3. What data do we collect and for what purpose?

3.1 Contact Form

Through the contact form, we collect the following data:

• first and last name
• email address
• phone number (optional)
• message content

Legal basis: Article 6(1)(b) or (f) of the GDPR — processing is necessary for taking actions before entering into a contract or results from the legitimate interest of the Controller (response to the inquiry). Data is stored for the period necessary to handle the inquiry, no longer than 12 months.

3.2 Influencer Form

Through the collaboration form, we collect the following data:

• first and last name
• email address
• links to social media channels
• community size
• description of interests and motivations for collaboration

Legal basis: Article 6(1)(a) of the GDPR — consent of the data subject (expressed by accepting the GDPR clause in the form). Data is stored until consent is withdrawn or for the time necessary to assess and implement collaboration, no longer than 24 months.

3.3 Cookies and Google Analytics

The Website uses cookies and Google Analytics to analyze traffic on the Website and optimize its performance. Data collected by Google Analytics is anonymized — it does not allow for the identification of specific individuals.

Types of cookies used:

• essential cookies — ensure the proper functioning of the Website
• analytical cookies — collect anonymous data on how the Website is used (Google Analytics)

Legal basis: Article 6(1)(a) of the GDPR — user consent expressed through browser settings or the cookie banner. You can manage cookies through your web browser settings or by refusing them upon entering the Website.

4. Data Recipients

Your personal data may be shared with the following entities:

• IT and hosting service providers who provide the technical infrastructure of the Website
• Google LLC — in relation to the Google Analytics service (anonymized data)
• entities authorized to receive data under applicable law

We do not sell or share your personal data with third parties for marketing purposes without your consent.

5. Data Transfer Outside the EEA

In connection with the use of Google Analytics, data may be transferred to the United States. Google LLC participates in the Data Privacy Framework program, which provides an adequate level of data protection in accordance with GDPR requirements.

6. Your Rights

Under the GDPR, you have the following rights:

• the right to access your data and receive a copy of it
• the right to rectify (correct) your data
• the right to erasure (the right to be forgotten)
• the right to restrict data processing
• the right to data portability
• the right to object to data processing
• the right to withdraw consent at any time (without affecting the lawfulness of processing based on consent before its withdrawal)

To exercise the above rights, please contact us at: karol.cetlin@yuccaroot.eu

You also have the right to lodge a complaint with a supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, www.uodo.gov.pl).

7. Data Security

We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or destruction. Access to data is granted only to authorized persons who are obliged to maintain confidentiality.

8. Changes to the Privacy Policy

We reserve the right to make changes to this Privacy Policy. We will inform you of any significant changes by posting the updated version on the Website. The date of the last update is visible at the beginning of the document.

9. Contact

If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us:

Yucca Root sp. z o.o. ul. Poligonowa 1/39, 04-051 Warsaw Email: karol.cetlin@yuccaroot.eu Tel.: 605-550-857