1. General Information
Our website operates at the url: suur.pl, and the operator and Administrator of personal data is Suur Sp. z o. o., located at Szkolna 32a. The contact email address of the operator is email@example.com. Personal data is processed voluntarily and is used for purposes such as managing newsletters, handling inquiries through forms, and presenting offers or information.
The website collects information about users and their behavior through voluntarily entered data in forms and by storing cookie files (“cookies”) on end devices.
2. Selected Data Protection Methods Used by the Operator
Login and personal data entry points are secured in the transmission layer with an SSL certificate. User data and login information entered on the website are encrypted on the user’s computer and can only be read on the target server.
User passwords are stored in hashed form, and the hashing function is irreversible, meeting modern standards for user password storage.
The operator periodically changes administrative passwords and regularly performs data backup for protection.
Regular software updates are conducted to ensure the security of personal data processing.
The website is hosted and technically maintained on servers by the operator dhosting. The hosting company keeps server-level logs, including specific resource identifiers (URLs), request arrival time, response time, client station name (identified by the HTTP protocol), error information during HTTP transaction execution, URL address of the previously visited page (referer link), user’s browser information, IP address, diagnostic information related to the process of independently ordering services through registrars on the website, and email handling information directed to and sent by the Operator.
4. Your Rights and Additional Information on Data Usage
To fulfill obligations under personal data protection regulations and ensure real data protection, the Operator has appointed a Data Protection Inspector: Paweł Gołaś, located at Szkolna 32a, contact email: firstname.lastname@example.org.
In certain situations, the Administrator may transfer your personal data to other recipients if necessary for the performance of a contract with you or to fulfill obligations incumbent on the Administrator. This includes recipients such as hosting companies, couriers, postal operators, legal offices and debt collectors, payment operators, public authorities, and marketing service providers.
Your personal data is processed by the Administrator no longer than necessary for activities specified in separate regulations (e.g., accounting). Marketing data will not be processed for more than 3 years.
You have the right to request from the Administrator access to your personal data, correction, deletion, processing limitations, and data portability. You also have the right to object to the processing of personal data for legitimate interests pursued by the Administrator, including profiling.
5. Information in Forms
The website collects information provided voluntarily by the user, including personal data if provided. In some cases, the website may store information facilitating the connection of form data with the email address of the user filling out the form.
6. Administrator’s Logs
User behavior information on the website may be subject to logging and is used for website administration purposes.
7. Significant Marketing Techniques
The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc., USA). The service is based on anonymized information and does not involve the transfer of personal data to the service operator.
The Operator utilizes remarketing techniques, which customize advertising messages to user behavior on the site without transferring personal data to advertising operators.
The Operator uses the Facebook pixel technology, where the Facebook service (Facebook Inc., USA) is aware that a registered person is using the service but without any additional personal data transfer from the Operator.
The Operator uses a solution to study user behavior through creating heatmaps and recording site behavior. Information is anonymized before being transmitted to the service operator.
The Operator uses an automated solution for website functionality, e.g., sending an email to the user after visiting a specific subpage, if the user has given consent to receive commercial correspondence from the Operator.
8. Cookie Information
Two main types of cookies are used on the website: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until deleted by the user.
Users can manage cookie settings in their web browsers, and disabling necessary cookies may affect the functionality of the website.
Cookies placed on the user’s end device may also be used by entities cooperating with the Operator, including Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).
9. Managing Cookies – How to Express and Withdraw Consent in Practice
Users can change browser settings if they do not want to receive cookies. However, disabling cookies necessary for authentication processes, security, and maintaining user preferences may hinder or, in extreme cases, prevent the use of websites.
To manage cookie settings, select your internet browser from the list below and follow the instructions:
- Internet Explorer
- Safari (iOS)
- Windows Phone