The Operator is the Administrator of your personal data with respect to data voluntarily provided on the website.
The website uses personal data for the following purposes:
Handling inquiries via the contact form
Presenting offers or information
The website gathers user information and behavior in the following ways:
Through voluntarily entered data in forms, which are introduced into the Operator’s systems.
By saving cookies on end devices.
2. Selected Data Protection Methods Used by the Operator
Login and data entry points are protected in transmission layers (SSL certificate). Personal data and login details entered on the page are encrypted and can only be read on the target server.
Personal data stored in the database is encrypted, ensuring that only the Operator holding the decryption key can read it. This protects data in case the database is stolen.
User passwords are stored in hashed form. The hashing function is one-way, ensuring it cannot be reversed, which is the modern standard for storing user passwords.
The Operator periodically changes its administrative passwords.
To protect data, the Operator regularly creates backups.
An essential element of data protection is regularly updating all software used by the Operator for data processing, including components.
3. Hosting
The website is hosted (technically maintained) on the servers of the operator: cyberFolks.pl
The hosting company maintains logs at the server level to ensure technical reliability. These logs may include:
Resources specified by URL identifiers (requested pages or files)
Time of the request
Time of the server’s response
Client station name (identification via HTTP protocol)
Errors encountered during the HTTP transaction
URL address of the page previously visited by the user (referer link) if the transition to the website occurred via a link
Information about the user’s browser
Information about the IP address
Diagnostic information related to the self-service ordering process via the site’s forms
Information related to email correspondence sent to or by the Operator
4. Your Rights and Additional Information on Data Usage
In certain situations, the Administrator has the right to transfer your personal data to other recipients if necessary to execute a contract with you or to fulfill legal obligations. These recipients include:
Hosting company under the entrustment agreement
Authorized employees and associates who use the data to fulfill the purpose of the website
Companies providing marketing services for the Administrator
Your personal data is processed by the Administrator no longer than necessary for the related activities specified by separate regulations (e.g., accounting). Marketing data will not be processed for more than 3 years.
You have the right to request from the Administrator:
Access to your personal data
Correction of the data
Deletion of the data
Restriction of data processing
Data portability
You have the right to object to the processing of your personal data as specified in point 3.2, including profiling, but this does not apply if there are legitimate grounds for processing that outweigh your interests, rights, and freedoms, particularly for establishing, pursuing, or defending claims.
You have the right to file a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa.
Providing personal data is voluntary but necessary to use the website.
Automated decision-making, including profiling, may be conducted in relation to you for the purpose of providing services under the agreement and direct marketing by the Administrator.
Personal data is not transferred outside the European Union.
