This policy explains what cookies and similar technologies we use on https://yerbador.com (shop name: Yerbador Mate), on what basis we use them, and how you control them. The shop is operated by GREEN REPUBLIC sp. z o.o., ul. Marcina Kasprzaka 31/119, 01-234 Warszawa, Poland. Contact: [email protected]. Contact is by e-mail only; there is no telephone customer service.

1. What cookies and similar technologies are

A cookie is a small text file that a website asks your browser to store on your device. When you come back, the site can read that file again. Similar technologies work the same way in practice: local storage in your browser, and tracking pixels — tiny image or script tags that report that a page was loaded.

We use them for four things: to make the shop work (cart, session, language, currency), to remember your settings, to count visits, and — only if you agree — to measure and target advertising.

  • First-party cookies are set by yerbador.com itself.
  • Third-party cookies are set by providers whose tools we embed, for example Google or Meta.
  • Session cookies disappear when you close the browser. Persistent cookies stay until they expire or until you delete them.

2. On what legal basis we use them

Two sets of rules apply: the ePrivacy Directive governs storing and reading files on your device, and the GDPR (Regulation (EU) 2016/679) governs what we then do with the data.

  • Strictly necessary cookies run without consent. They are needed to deliver the service you asked for — showing the shop, keeping your cart, logging you in, taking payment, keeping the site secure. You cannot switch them off in the banner, because the shop stops working without them.
  • Everything else runs only with your consent. Functional, analytics and advertising cookies are set only after you accept that category in the consent banner. Legal basis: Art. 6(1)(a) GDPR.
  • You can withdraw consent at any time, as easily as you gave it. Withdrawal does not affect the lawfulness of processing carried out before you withdrew.

Until you make a choice, no analytics or advertising cookies are set. Refusing consent does not limit your ability to browse the shop, place an order or pay.

3. Categories we use

Strictly necessary (always on)

  • Keeping the products in your shopping cart and your order through checkout.
  • Your session and, if you have an account, your logged-in state.
  • The language version you are viewing.
  • The currency you are shown (EUR, GBP, CZK, SEK, DKK, CHF or NOK).
  • Security and protection against attacks and abuse, including cookies set by Cloudflare, which delivers and protects the site.
  • Recording your cookie choices, so that the banner does not ask again on every page.

Functional (consent)

These remember choices you make so the shop is more convenient — for example interface preferences and settings you have already selected. If you refuse them, the shop still works, but it forgets those preferences.

Analytics and performance (consent)

These tell us how many people visit, which pages they open, where they came from and where checkout goes wrong. We use the results as aggregated statistics to improve the shop. Tool: Google Analytics 4, loaded through Google Tag Manager.

Advertising (consent)

These measure whether an advertisement led to a visit or an order, and allow us to show you our advertisements on other sites and build advertising audiences. Tools: Meta pixel and Google Ads. Advertising audiences are built only on the basis of consent given for this category. We take no decisions about you by purely automated means that produce legal effects.

4. Third-party tools

The following providers may set or read cookies and similar identifiers on our site. Google and Meta act as separate controllers or joint controllers for their own purposes under their own terms.

  • Google Tag Manager (container GTM-53NMWS89), provider Google Ireland Limited — loads and controls our other tags.
  • Google Analytics 4 (measurement ID G-6BSMVYB8ZK), provider Google Ireland Limited — traffic statistics. Analytics category.
  • Google Ads, provider Google Ireland Limited — conversion measurement and advertising. Advertising category.
  • Meta pixel (ID 955269232351627), provider Meta Platforms Ireland Limited — advertising measurement and audiences. Advertising category.
  • Payment providers: Stripe Payments Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (card payments) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (PayPal). Their cookies serve payment processing, fraud and chargeback prevention. These are strictly necessary for paying.
  • CookieYes — the consent banner itself, which stores your choices.

Google Consent Mode

We use Google Consent Mode. Google tags on our site read your choice from the banner and adjust their behaviour: if you have not consented to analytics or advertising, the tags do not set those cookies and measure only what you have agreed to.

Transfers outside the EEA

Some of these providers — in particular Google and Meta — may process data on servers in the United States. Such transfers take place under the EU-US Data Privacy Framework adequacy decision or on the basis of the European Commission’s standard contractual clauses. You can request a copy of the safeguards at [email protected].

5. How to give, change or withdraw consent

The banner appears on your first visit. You can accept all categories, reject all non-necessary categories, or choose category by category.

  1. Open the cookie settings link on the site. It is available on every page.
  2. Switch each category on or off. Strictly necessary cookies stay on — they cannot be disabled.
  3. Save. Your new choice applies immediately to future page loads.

Withdrawing consent stops further use of those cookies. Cookies already stored on your device are not removed by the withdrawal alone — delete them in your browser if you want them gone now.

Blocking cookies in your browser

Every current browser lets you block or delete cookies in its privacy settings, block third-party cookies only, or clear everything when you close it. Those settings apply to all websites, not just ours.

One warning: if you block strictly necessary cookies, the cart, checkout and payment will not work, and you will not be able to place an order.

6. How long cookies are stored

  • Cookies set by the shop itself expire at the end of your browsing session or after up to 12 months.
  • The exact lifetime of every single cookie, including third-party cookies, is listed in the cookie declaration inside the consent banner. Check it there — it is the current list.
  • Your consent record is stored so we can prove what you agreed to and so the banner stops asking.
  • You can shorten any of these periods by deleting cookies in your browser at any time.

7. Where to read more

How we handle personal data in general — purposes, legal bases, recipients, retention periods and your rights of access, rectification, erasure, restriction, portability and objection — is described in our Privacy Policy.

The controller is GREEN REPUBLIC sp. z o.o., ul. Marcina Kasprzaka 31/119, 01-234 Warszawa, Poland. No data protection officer has been appointed; write to [email protected]. You can lodge a complaint with the Polish President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, https://uodo.gov.pl) or with the supervisory authority of your own country of residence.