Privacy policy

1. General information

1. The present policy concerns the Website functioning at the url address: https://grafitia.dev2.muchmore.pl/
2. The website operator and personal data Administrator is: Projekt Ergonomia Spółka Z Ograniczoną Odpowiedzialnością Spółka Komandytowa ul. prof. dr. Mieczysława Michałowicza 12 43-300 Bielsko-Biała, PL
3. OPerator’s contact email address: grafitia@grafitia.dev2.muchmore.pl
4. The Operator is the personal data Administrator with regard to the data you provide voluntarily to the Website.
5. The Website uses personal data for the following purposes:
   1. Producing the newsletter
   2. Operating a comments system
   3. Operating online chat communication
   4. Queries serviced via the form
   5. Preparing, packing, shipping goods
   6. Realising services ordered
   7. Debt recovery
   8. Presentation of the offer or information
6. The website obtains information about users and their behaviour in the following way:
   1. By voluntarily entering data in the forms which are entered into the Operator’s systems.
   2. By storing cookies in the user’s device.

2. Selected methods of data storage used by the Operator

1. The locations of logging on and entering personal data are protected in the transmission layer (SSL certificate). This means that personal data and log-in details entered on the page are encrypted on the user’s computer and may only be read on the intended server.
2. Users’ passwords are stored in hashed form. The hashing function is unidirectional - its actions cannot be reversed, which is the contemporary standard in the field of storing user passwords.
3. The Operator periodically changes his administrative passwords.
4. In order to protect data, the Operator regularly makes a safety copy.
5. A vital element of data protection is the regular updating of all software used by the Operator to process personal data, which means in particular regularly updating programming components.

3. Hosting

1. The Website is hosted (physically maintained) on the operator’s server: hekko.pl
2. Hosting company registration details: H88 S.A. with registered headquarters in Poznań, at Franklina Roosevelta 22, 60-829 Poznań, entered in the National Court Register by the District Court of Poznań – Nowe Miasto i Wilda in Poznań, 8th Commercial Division of the National Court Register as number KRS 0000612359, REGON 364261632, NIP 7822622168, share capital 210,000.00 zł paid in full.
3. You can find out more about hosting at https://hekko.pl and also check the hosting firm’s privacy policy.
4. Hosting Firm:
   1. applies protective measures to prevent data loss (e.g. disc matrices, regular security copies),
   2. applies adequate measures to protect processing sites in the event of a fire (e.g. special extinguisher systems),
   3. applies adequate measures to protect processing systems in the event of a sudden power failure (e.g. double power supply, UPS voltage support systems),
   4. applies physical measures to protect access to data processing sites (e.g. access control, CCTV),
   5. applies measures to ensure the appropriate environmental conditions for servers as elements of the data processing system (e.g. monitoring environmental conditions, appropriate air conditioning systems),
   6. applies organisational solutions to ensure the highest possible degree of security and confidentiality (training, internal regulations, password policy, etc.),
   7. has appointed a Data Protection Inspector.
5. The hosting firm keeps logs at the server level in order to ensure technical reliability. The following may be recorded:
   1. resources defined by a URL identifier (addresses of resources demanded - pages, files),
   2. arrival time of a query,
   3. time a reply is sent,
   4. name of client station - identification carried out by HTTP protocol,
   5. information about errors occurring during HTTP transactions,
   6. URL address of the page previously visited by the user (referer link) - in the event that the Website is reached via a link,
   7. information about the user’s browser,
   8. information about the IP address,
   9. diagnostic information connected with the process of ordering services independently through the loggers on the page,
   10. information connected with use of email addressed to the Operator and sent by the Operator.

4. Your rights and additional information about the use of data

1. In certain circumstances, the Administrator is entitled to pass your personal data on to other recipients if this is necessary to realise the contract concluded with you or to fulfil obligations required of the Administrator. This concerns the following groups of recipients:
   1. the hosting firm subject to an entrustment agreement
   2. couriers
   3. postal operators
   4. insurers
   5. lawyers’ offices and debt collectors
   6. payment operators
   7. comments system operators
   8. online chat communication operators
   9. authorised employees and partners who use the data in order to realise the aim of the party
   10. firms providing marketing services to the Administrator
2. Your personal data is processed by the Administrator for no longer than is necessary to carry out the actions connected with it as stipulated in separate regulations (e.g. regarding accountancy). With regard to marketing data, the data will not be processed for longer than 3 years.
3. You are entitled to demand that the Administrator:
   1. access to personal data concerning you,
   2. correcting it,
   3. removal
   4. limit processing,
   5. and transfer of data.
4. You are entitled to submit an objection concerning the processing stipulated in pt. 3.3 c) with regard to processing of the personal data by the Administrator for the purposes of legally justified interests, including profiling, with the caveat that the right to object cannot be executed in the event that there exist important, legally justified grounds for the processing, interests, rights and freedoms which override yours, in particular the establishment, seeking or defence of claims.
5. Complaints regarding the Administrator can be submitted to the Personal Data Protection Ombudsman, ul. Stawki 2, 00-193 Warszawa.
6. The provision of personal data is voluntary, but necessary for the functioning of the Website.
7. Actions may be taken with regard to you involving automated decision making, including profiling for the purposes of realising services under the contract concluded, and in order for the Administrator to carry out direct marketing.
8. Personal data is provided to third countries in the understanding of the personal data protection legislation. This means we send it outside the European Union.

5. Information in the forms

1. The website gathers information provided voluntarily by the user, including personal data if this is given. <li?The site may record information about connection parameters (time designation, IP address).
2. In some circumstances the Site may record information which facilitates associating data from a form with the email address of the user completing the form. In such a case the user’s e-mail address appears inside the url address of the page containing the form.
3. Data provided in forms is processed for the purpose of that specific form, e.g. in order to complete the process of serving an announcement from the site, or commercial contact, recording of services, etc. Each individual context and description of the form informs clearly of its purpose.

6. Administrator’s logs

1. Information concerning users’ behaviour on the site may be logged. This data is used for the administration of the site.

7. Relevant marketing techniques

1. The Operator applies a statistical analysis of site traffic using Google Analytics (Google Inc. with headquarters in the USA). The Operator does not supply personal data to the operator of that service, only anonymised information. The service involves using cookies in the end user’s device. Within the scope of user preferences gathered by the Google advertising network, the user may review and edit information taken from the cookies using the tool: https://www.google.com/ads/preferences/
2. The Operator uses Facebook pixel. This technology lets Facebook (Facebook Inc. with headquarters in the USA) know that a given person registered with it is using the Website. In this case it is based on data for which the Operator himself is the administrator, so he does not provide Facebook with any additional personal data. The service involves using cookies in the end user’s device.
3. The Operator applies solutions which automate the functioning of the Website with regard to users, e.g. which can send email to a user after a particular subpage is visited, provided that he has consented to receive commercial correspondence from the Operator.

8. Information about cookies

1. The Website uses cookies.
2. Cookies consist of data, specifically text files, which are stored in the Site User’s device and are intended for using webpages. Cookies usually contain the name of the website which they come from, the time for which they are stored on the device, and a unique number.
3. The entity placing cookies in the device of the User of the Website and obtaining access to them is the operator of the Website.
4. Cookies are used for the following purposes:
   1. maintaining the User’s session (after logging in), which means the User does not have to re-enter a log-in and password for every subpage;
   2. realising the aims stipulated above in the “Relevant marketing techniques” section;
5. The Site uses two basic types of cookies - session cookies and persistent cookies. Cookies „sesyjne” są plikami tymczasowymi, które przechowywane są w urządzeniu końcowym Użytkownika do czasu wylogowania, opuszczenia strony internetowej lub wyłączenia oprogramowania (przeglądarki internetowej). Persistent cookies are stored on the User’s device for the period defined in the cookie parameters, or until they are deleted by the User.
6. The software used to view websites (web browser) usually allows cookies in the User’s device as a default. Users of the Website may change their settings in this regard. The web browser enables the removal of cookies. It is also possible to block cookies automatically. Detailed information on this subject is contained in the browser’s help section or documentation.
7. Limiting the use of cookies may have an adverse effect on certain functionalities available on the pages of the Site.
8. Cookies stored in the Site User’s device may also be used by entities collaborating with the Site operator, this applies in particular to: Google (Google Inc. with headquarters in the USA), Facebook (Facebook Inc. with headquarters in the USA), Twitter (Twitter Inc. with headquarters in the USA).

9. Managing cookies – how to provide and withdraw consent in practice?

1. If the user does not want to receive cookies, he may change his browser settings. We warn you that rejecting cookies necessary for the processes of verification, security and maintaining user preferences may hinder, and in extreme cases prevent, use of the website
2. To manage cookie settings, choose the browser you use from the list below, then follow the instructions:
   1. Edge
   2. Internet Explorer
   3. Chrome
   4. Safari
   5. Firefox
   6. Opera

   Mobile devices:

   1. Android
   2. Safari (iOS)
   3. Windows Phone