1. General Information
This Policy refers to a website Service, operating under the URL address: promopak.pl
The Service Operator and the Data Processing Controller is: Promo-Pak 95-100 Zgierz ul. Piątkowska 83i
The contact e-mail address of the Operator is: firstname.lastname@example.org
The Operator is the Controller of your personal data in respect to the data provided voluntarily in the Service.
The Service may use the personal data for the following purposes:
Preparing a newsletter
Operating a comments system
Operating an Internet forum
Operating an on-line chat service
Operating a system of classified ads
Managing a form for enquiries
Preparing, packaging and dispatching goods
Providing the ordered services
Presenting an offer or information
The Service collects information concerning its users and their behaviour in the following way:
Using the data voluntarily entered by them in a form, which is later introduced into the Operator’s systems.
By uploading cookies on end devices.
2. Chosen Methods of Data Protection Used by the Operator
The sites for logging in and entering personal data are protected in the transport layer (SSL certificate). This way the login and personal data entered on the website are encrypted in the user’s
computer and may only be read on the target server.
User passwords are stored in a hashed form. The hashing function works only one way – it is impossible to revert its working, which is a current standard for storing user passwords.
The Operator changes their administration passwords from time to time.
In order to protect the data, the Operator regularly makes backup copies.
An important element of data protection is regular updating of all software used by the Operator for personal data processing, which includes in particular regular programming components’ updates.
The service is hosted (technically maintained) on the Operator’s server: cyberFolks.pl
4. Your Rights and Additional Information on Data Use
In certain cases the Controller has the right to forward your personal data to other recipients, if it is necessary in order to carry out the contract concluded with you or to fulfil the obligations of the Controller. This refers to the following groups of recipients:
A hosting company under the processing agreement
Operators of an on-line chat service
Authorised employees and partners that use the data for purposes related to the operation of the website
Companies providing marketing services to the Controller
Your personal data is processed by the Controller only as long as it is necessary for activities related to them, as specified in separate regulations (e.g. on accountancy). As far as marketing data is concerned, it will not be processed for more than 3 years.
You have the right to request from the Controller:
Access to your personal data,
Restriction of processing,
And data portability.
You have the right to file an appeal in the scope of processing as specified in Sec. 3.3.c),
concerning personal data processing in order to pursue legitimate interests safeguarded by the Controller, such as profiling, and the right to appeal will not be exercised if there are important, legitimate bases for processing, with interests, rights and freedoms prevailing over yours, in particular putting forward, investigating, or defending claims.
You may appeal against the Controller’s activity to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warszawa.
The provision of personal data is not obligatory, but it is necessary for using the Service.
Some actions may be performed that are related to you, using automatised decision making, including profiling, in order to provide services within the scope of the concluded contract and in order for the Controller to run direct marketing activity.
Personal data is not transferred to third countries, as specified in personal data protection regulations. This means the data is not transferred outside the European Union.
5. Information in the Forms
The Service collects data that is voluntarily provided by its users, including personal data, if it is provided.
The Service may register information on the connection parameters (timing, IP address).
In some cases, the Service may register information facilitating linking the data in the form to the email address of the user who fills in the form. In such cases the user email address is included in the URL address of the website containing the form.
The data provided in the form is processed for purposes related to the function of the given form, such as for purposes of processing a service request or a commercial contract, for service registering, etc. In each case, the context and the form description clearly informs about its purpose.
6. Controller’s Logs
Information concerning users’ behaviour in the service may be logged. The data is used for Service administration purposes.
7. Relevant Marketing Techniques
The Operator uses remarketing techniques, allowing for matching the advertised contents to the
users’ behaviour on the website, which could convey an impression that users’ personal data is being used for their tracking, but in practice no personal data is being transferred by the Operator to advertising operators. A technological condition necessary for such activity are enabled cookies.
The Operator uses a solution testing users’ behaviour by making heat maps and registering their behaviour on the website. This information is anonymised before its transfer to the service operator in such a way that the operator does not know which natural person it refers to. Passwords and other personal data in particular are not registered.
The Operator uses a solution which automatises the operation of the Service in reference to its users, such as sending an email to a user who visits a given subsite, if (s)he agreed to receive commercial correspondence from the Operator.
8. Information About Cookie Files
The Service uses cookie files.
Cookie files (‘cookies’) are IT data, especially text files, which are stored in the Service User’s end device and are used for Service website browsing. Cookies usually contain the name of the website, from which they originate, time of storage in the end device and a unique number.
The entity which places the cookie files in the Service User’s end device and has access to them is the Service Operator.
Cookie files are used for the following purposes:
Maintaining the Service user’s session (after logging in), so that the user does not have to re-enter his/her login and password on each Service subsite;
Fulfilling the aims specified in the “Relevant Marketing Techniques” section above;
Within the Service two main types of cookie files are used: ‘session cookies’ and ‘persistent cookies’. The ‘session’ files are temporary, and are only stored in the user’s end device until the logging out, leaving the website, or switching off the software (Internet browser). ‘Persistent’ cookie files are stored in the User’s end device for the time specified in the cookie files’ parameters or until they are deleted by the User.
The software used for website browsing (Internet browser) usually by default enables the storage of cookie files in the User’s end device. The Service users may change the settings in this respect. Internet browsers allow for deleting cookie files. It is also possible to automatically block cookie files. Detailed information on the subject is available in the support section or the documentation of the given internet browser.
Limitations on the use of cookie files may affect some functionalities available in the Service website.
Cookie files placed in a Service User’s end device may also be used by entities cooperating with the Service operator, in particular the following companies: Google (Google Inc. with its registered office in the US), Facebook (Facebook Inc. with its registered office in the US), Twitter (Twitter Inc. with its registered office in the US).
9. Cookie Files Management – How to Give or Withdraw the Consent in Practice
If the user does not wish to receive cookie files, s/he may change the settings of his/her browser. Please be informed that disabling cookie files necessary for the authorisation and security processes, and maintaining user preferences may make it difficult, and in extreme cases even impossible, to use the website.
In order to manage cookies’ settings, choose your internet browser from the list below, and follow the instructions: