Privacy Policy

PRIVACY POLICY AND COOKIES POLICY

By using the blog, website and online shop https://www.darnok.com.pl/sklep, you accept the following terms and conditions of the Privacy Policy and Cookies Policy.
As a User of the Website, please read its provisions. The table of contents below will help you do so. In it, we inform you how we care for Users’ data, how we process it, to whom we entrust it, and many other important issues related to personal data.

§1 GENERAL PROVISIONS

This Privacy Policy and Cookie Policy sets out the rules for the processing and protection of personal data provided by Users and cookies, as well as other technologies appearing on the website https://www.darnok.com.pl/ and the online store https://www.darnok.com.pl/sklep/
The administrator of the website and personal data provided within its framework is
DARNOK Industry Sp. z o.o., Nowa Wieś Kwidzyńska 3, 82-500 Kwidzyn, NIP: PL5811973621, KRS: 0000913253, REGON: 389530653

We care about the security of personal data and the privacy of the Website User. We are glad that you have visited the Website.
If you have any questions regarding the provisions of this Privacy Policy and Cookie Policy, please contact the Administrator via e-mail: biuro@darnok.com.pl.
The Administrator reserves the right to make changes to the Privacy Policy, and each Website User is required to be familiar with the current Privacy Policy. The reasons for the changes may include the development of Internet technology, changes in generally applicable law, or the development of the Website, e.g. through the use of new tools by the Administrator. The date of publication of the current Privacy Policy is provided at the bottom of the page.



§2 DEFINITIONS

Administrator – DARNOK Industry Sp. z o.o., Nowa Wieś Kwidzyńska 3, 82-500 Kwidzyn, NIP: PL5811973621, KRS: 0000913253, REGON: 389530653
User – any entity visiting and using the Website.
Website and/or Online Store – the website and online store located at https://www.darnok.com.pl/ and its subpages.
User Account or Account – a User account created on the Online Store’s internet platform, enabling access to purchased services and products in accordance with the Store’s Terms and Conditions, which the User is required to accept when registering an Account.
Form or Forms – places on the Website that allow the User to enter personal data for the purposes indicated therein, e.g. to send a newsletter, to place an order, to contact the User.
Newsletter – means a free service provided electronically by the Administrator to the User by sending e-mails through which the Administrator informs about events, services, products and other elements relevant to the Administrator and/or for the purpose of achieving the Administrator’s legitimate objective, which is direct marketing, including sending marketing and commercial content with the User’s consent. Detailed information on the sending of the Newsletter can be found further on in this privacy policy.
GDPR – means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Personal Data Protection Act – Act of 10 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000, as amended).
Act on the provision of electronic services – Act of 18 July 2002 on the provision of electronic services (Journal of Laws No. 144, item 1204, as amended).
Telecommunications Law – Act of 16 July 2004 Telecommunications Law (Journal of Laws No. 171, item 1800, as amended).
Personal Data Protection Act – Act of 18 May 2018 on the protection of personal data (Journal of Laws 2018, item 1000, as amended)


§3 PERSONAL DATA AND THE RULES FOR ITS PROCESSING

WHO IS THE CONTROLLER OF THE USER’S PERSONAL DATA?

DARNOK Industry Sp. z o.o., Nowa Wieś Kwidzyńska 3, 82-500 Kwidzyn, NIP: PL5811973621, KRS: 0000913253, REGON: 389530653.

IS THE PROVISION OF DATA VOLUNTARY? WHAT ARE THE CONSEQUENCES OF NOT PROVIDING IT?

Providing data is voluntary, however, failure to provide certain information, which is generally marked as mandatory on the Administrator’s website, will result in the inability to achieve a specific goal or take specific actions.
The provision of data by the User that is not mandatory or excess data that the Administrator does not need to process is based on the User’s own decision, and in such cases the processing is carried out on the basis of the premise contained in Article 6(1)(a) of the GDPR (consent). The User consents to the processing of this data and to the anonymisation of data that the Administrator does not require and does not wish to process, but which the User has nevertheless provided to the Administrator.

FOR WHAT PURPOSES AND ON WHAT LEGAL BASIS DO WE PROCESS THE USER’S PERSONAL DATA PROVIDED WHEN USING THE WEBSITE?

The User’s personal data on the Administrator’s Website may be processed for the following purposes and on the following legal bases:
1. to perform a service or execute a contract, send an offer (e.g. advertising) at the User’s request — pursuant to Article 6(1)(b) of the GDPR (necessary for the conclusion and/or performance of a contract or to take action at the request of the User);
2. issuing an invoice, bill and fulfilling other obligations under tax law in the case of orders placed in the Online Store or other products and services — pursuant to Article 6(1)(c) of the GDPR (obligation under the law);
3. granting discounts or informing about promotions and interesting offers from the Administrator or entities recommended by it — pursuant to Article 6(1)(a) of the GDPR (consent) and pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the administrator);
4. storing unpaid orders — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);
5. consideration of complaints or claims related to the contract — pursuant to Article 6(1)(b) of the GDPR (necessary for the conclusion and/or performance of the contract) and pursuant to Article 6(1)(c) of the GDPR (obligation under the law);
6. establishing, pursuing or defending against claims — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);
7. telephone contact in matters related to the provision of services — pursuant to Article 6(1)(b) of the GDPR (necessary for the conclusion and/or performance of a contract);
8. telephone contact for the purpose of presenting offers and direct marketing — pursuant to Article 6(1)(a) of the GDPR (consent) and pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller), if you are a customer of the Controller;
9. creating records related to the GDPR and other regulations – pursuant to Article 6(1)(c) of the GDPR (obligation under the law) and Article 6(1)(f) of the GDPR (legitimate interest of the controller);
10. archiving and evidence, for the purposes of securing information that may be used to prove facts — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);
11. analytical, consisting, among other things, in the analysis of data collected automatically when using the website, including cookies, e.g. Google Analytics cookies, Facebook Pixel — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);
12. use of cookies on the Website and its subpages — pursuant to Article 6(1)(a) of the GDPR (consent);
13. management of the Website and the Controller’s pages on other platforms — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller);
14. conducting satisfaction surveys on the services offered — pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller),
15. posting opinions by the User about the services provided by the Controller — pursuant to Article 6(1)(a) of the GDPR (consent),
16. for the Administrator’s internal administrative purposes related to managing contact with the User, which is the legitimate interest of the Data Administrator pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the administrator),
17. to tailor the content displayed on the Administrator’s websites to individual needs and to continuously improve the quality of the services offered – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller),
18. for the purpose of direct marketing of own products or services or recommended third-party products to the User – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller),
19. for the purpose of creating own User databases – pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller),
20. for the purpose of targeting advertising on social media and websites, such as Facebook Leads Ads or Facebook Custom Audience, YouTube, and targeting remarketing – pursuant to Article 6(1)(a) of the GDPR (consent) and pursuant to Article 6(1)(f) of the GDPR (legitimate interest of the controller) consisting in the promotion and advertising of the Controller’s services through remarketing targeted at persons subscribed to the mailing list or visiting a given website) and pursuant to Article 6(1)(a) of the GDPR (consent).
The provision by the User of data that is not mandatory or excess data that the Controller does not need to process is based on the User’s own decision, and in such cases the processing is carried out on the basis of the premise contained in Article 6(1)(a) of the GDPR (consent). The User consents to the processing of this data and to the anonymisation of data that the Controller does not require and does not wish to process, but which the User has nevertheless provided to the Controller.

HOW IS DATA COLLECTED?

Only data provided by the user is collected and processed (except, in certain situations, data collected automatically using cookies and login data, as described below).
When you visit the Website, data about the visit itself is collected automatically, e.g. your IP address, domain name, browser type, operating system type, etc. (login data). Automatically collected data may be used to analyse user behaviour on the website, collect demographic data about users or personalise the content of the website in order to improve it. However, this data is processed solely for the purposes of administering the Website, ensuring efficient hosting services or directing marketing content, and is not associated with the data of individual users. You can read more about cookies later in this Policy.
Data may also be collected for the purpose of completing forms on the Website, as discussed later in the privacy policy.

Information society services
The Administrator does not collect data on children. Users must be at least 16 years of age to independently consent to the processing of personal data for the purpose of providing information society services, including for marketing purposes, or obtain the consent of a legal guardian (e.g. a parent) for this purpose.
If the User is under 16 years of age, they should not use the https://www.darnok.com.pl/ website and its subpages.
The Administrator is entitled to make reasonable efforts to verify whether the User meets the age requirement referred to above, or whether the person exercising parental authority or guardianship over a User under the age of 16 has given or approved their consent.

WHAT ARE THE USER’S RIGHTS?

The User is entitled at any time to the rights set out in Articles 15-21 of the GDPR, i.e.:
• the right to access their data,
• the right to transfer data,
• the right to correct data,
• the right to rectify data,
• the right to delete data if there are no grounds for processing it,
• the right to restrict processing if it has been carried out incorrectly or without legal basis,
• the right to object to the processing of data on the basis of the legitimate interest of the controller,
• the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (on the terms specified in the Personal Data Protection Act) if they consider that the processing of their data is not in accordance with the current data protection legislation.
• the right to be forgotten, if further processing is not provided for by current legislation.
The Controller points out that these rights are not absolute and do not apply to all processing of the User’s personal data. This applies, for example, to the right to obtain a copy of the data. This right must not adversely affect the rights and freedoms of others, such as copyright or professional secrecy. For information on the limitations of the User’s rights, please refer to the GDPR.
However, the User always has the right to lodge a complaint with a supervisory authority.
In order to exercise their rights, the User may contact the Controller via email at biuro@darnok.com.pl or by post to the address of the Controller’s place of business, if provided in this Privacy Policy, indicating the scope of their requests. A response will be provided no later than 30 days from the date of receipt of the request and its justification, unless an extension of this period is justified in accordance with the GDPR.

CAN THE USER WITHDRAW THEIR CONSENT?

If the User has given consent to a specific action, such consent may be withdrawn at any time, which will result in the removal of the email address from the Administrator’s mailing list and the cessation of the indicated actions (in the case of registration based on consent). Withdrawal of consent does not affect the processing of data that was carried out on the basis of consent before its withdrawal.
In some cases, the data may not be completely deleted and will be retained for the purpose of defending against possible claims for a period of time in accordance with the provisions of the Civil Code or, for example, for the purpose of fulfilling the legal obligations imposed on the Administrator.
In each case, the Controller will respond to the User’s request, providing appropriate justification for further actions resulting from legal obligations.

DO WE TRANSFER USER DATA TO THIRD COUNTRIES?

User data may be transferred outside the EEA, understood as a free trade area and common market comprising the European Union and European Free Trade Association countries, with the exception of Switzerland, to so-called third countries.
Due to the fact that the Controller uses external providers of various services, e.g. Facebook and its subsidiaries, Google, Microsoft, etc., User data may be transferred to the United States of America (USA) in connection with its storage on American servers (in whole or in part). Google and Facebook apply compliance mechanisms provided for by the GDPR (e.g. certificates) or standard contractual clauses in relation to their services. They will only be transferred to recipients who guarantee the highest level of data protection and security, including through:
1. cooperation with entities processing personal data in countries for which a relevant decision has been issued by the European Commission,
2. the use of standard contractual clauses issued by the European Commission (as is the case, for example, with Google),
3. applying binding corporate rules approved by the competent supervisory authority,
or to the transfer of personal data to which the User has consented.
Detailed information is available in the privacy policies of each of these service providers, available on their websites. For example:
Google LLC: https://policies.google.com/privacy?hl=pl
Facebook Ireland Ltd.: https://www.facebook.com/privacy/explanation
Currently, the services offered by Google and Facebook are mainly provided by entities located in the European Union. However, you should always read the privacy policies of these providers in order to obtain up-to-date information on the protection of personal data.

HOW LONG DO WE STORE USER DATA?

User data will be stored by the Administrator for the duration of the provision of individual services/achievement of objectives and:
1. for the duration of the contract and cooperation, as well as for the period of limitation of claims in accordance with the provisions of law – with regard to data provided by contractors, customers or Users,
2. for the duration of discussions and negotiations preceding the conclusion of a contract or the performance of a service – with regard to data provided in a request for quotation,
3. for the period required by law, including tax law — with regard to personal data related to the fulfilment of obligations under applicable regulations,
4. until an objection is effectively lodged on the basis of Article 21 of the GDPR — with regard to personal data processed on the basis of the controller’s legitimate interest, including for direct marketing purposes,
5. until consent is withdrawn or the purpose of processing or business objective is achieved — with regard to personal data processed on the basis of consent. After withdrawal of consent, the data may still be processed for the purpose of defending against possible claims in accordance with the limitation period for such claims or the (shorter) period indicated to the User,
6. until it becomes outdated or loses its usefulness — with regard to personal data processed mainly for analytical and statistical purposes, the use of cookies and the administration of the Administrator’s Websites,
7. for a maximum period of 3 years in the case of persons who have unsubscribed from the newsletter in order to defend against possible claims (e.g. information about the date of subscription and the date of unsubscribing from the newsletter, the number of newsletters received, actions taken and activity related to the messages received), or after a period of 1 year of no activity by a given subscriber, e.g. not opening any messages from the Administrator.
The data storage periods indicated in years are counted at the end of each year in which data processing began. This is to streamline the data processing and management process.
Detailed periods of personal data processing for specific processing activities are included in the Administrator’s processing activity register.

The Website may contain links to other websites. These links will open in a new browser window or in the same window. The Controller is not responsible for the content provided by these websites. The User is obliged to read the privacy policy or terms and conditions of these websites.
SOCIAL MEDIA ACTIVITY – FACEBOOK
The User’s personal data provided on the Fanpage will be processed for the purpose of administering and managing the Fanpage, communicating with the User, interacting, directing marketing content to the User and creating a Fanpage community.
The basis for their processing is the User’s consent and the legitimate interest of the administrator in interacting with Users and Followers of the Fanpage. The User voluntarily decides to like/follow the Fanpage.
The rules governing the Fanpage are set by the Administrator, however, the rules for using the Facebook social network are set out in Facebook’s terms and conditions.
The User may stop following the Fanpage at any time. However, the Administrator will then not display any content from the Administrator related to the Fanpage to the User.
The Administrator can see the User’s personal data, such as their first name, surname or general information that the User makes public on their profiles. The processing of other personal data is carried out by the Facebook social networking site and under the terms and conditions set out in its regulations.
The User’s personal data will be processed for the duration of the Fanpage’s existence existence of the Fanpage on the basis of consent expressed by liking/clicking ‘Follow’ on the Fanpage or interacting, e.g. leaving a comment, sending a message, and for the purpose of pursuing the Administrator’s legitimate interests, i.e. marketing its own products or services or defending against claims.
The User’s personal data may be shared with other data recipients, such as Facebook, cooperating advertising agencies or other subcontractors servicing the Administrator’s Fanpage, IT services, virtual assistants, or teachers servicing individual online courses, if contact is made outside of Facebook.
Other User rights are described in this privacy policy.
User data may be transferred to third countries in accordance with Facebook’s terms and conditions.
This data may also be profiled, which helps to better personalise the advertising offer directed at the User. However, it will not be processed in an automated manner within the meaning of the GDPR (having a negative impact on the User’s rights and freedoms).

DATA SECURITY

The User’s personal data is stored and protected with due diligence, in accordance with the Administrator’s internal procedures. The Administrator processes information about the User using appropriate technical and organisational measures that meet the requirements of generally applicable law, in particular the provisions on the protection of personal data. These measures are primarily aimed at securing the personal data of Users against unauthorised access.
In particular, access to Users’ personal data is restricted to authorised persons who are obliged to keep such data confidential, or to entities entrusted with the processing of personal data on the basis of a separate data processing agreement.
At the same time, the User should take care to secure their personal data transmitted over the Internet, in particular by not disclosing their login details to third parties, using anti-virus protection and updating their software.

WHO CAN BE THE RECIPIENTS OF PERSONAL DATA?

The controller informs that it uses the services of external entities. The entities to which it entrusts the processing of personal data (such as courier companies, electronic payment intermediaries, accounting services companies, companies enabling the sending of newsletters) guarantee the use of appropriate measures to protect and secure personal data as required by law, in particular by the GDPR.
The Administrator informs the User that the recipients of the data include the following entities:
1. H88 S.A. with its registered office in Poznań, NIP 7822622168 – for the purpose of storing personal data on a server, operating a domain and a mail server,
2. Krzysztof Liszewski, conducting business activity under the name MASTER KRZYSZTOF LISZEWSKI, NIP 5811112221 – for accounting services,
3. Maciej Godyń, conducting business activity under the name N F.P.H.U. MatSol – IT services Maciej Godyń, NIP 5130061735 – for the purpose of issuing accounting documents,
4. PayU Spółka Akcyjna with its registered office in Poznań, NIP 7792308495 – for the purpose of operating the payment and electronic transaction system,
5. Google Cloud Poland Sp. z o.o. with its registered office in Warsaw, NIP 5252822767 – for the purpose of using Google services, including e-mail,
6. Allegro.pl Spółka z ograniczoną odpowiedzialnością with its registered office in Poznań, NIP 5252674798 – for the purpose of intermediation in sales and account management on the Allegro platform,
7. DHL Parcel Polska Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, NIP 9512417713 – for the purpose of handling shipments,
8. DPD Polska Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, NIP 5260204110 – for the purpose of handling shipments,
9. InPost Spółka Akcyjna with its registered office in Krakow, NIP 6793108059 – for shipping services,
10. FEDEX EXPRESS Polska Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, NIP 5261005306 – for shipping services,
11. UPS Polska Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, NIP 5221004200 – for shipping purposes,
12. TNT EXPRESS WORLDWIDE (POLAND) Spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, NIP 6342750606 – for shipping purposes,
13. Poczta Polska Spółka Akcyjna with its registered office in Warsaw, NIP 5250007313 – for shipping purposes,
14. GLS LOGISTIC SYSTEM POLAND Spółka z ograniczoną odpowiedzialnością with its registered office in Komorniki, NIP 7851561831 – for shipping purposes,
15. other contractors or subcontractors involved in technical and administrative services or in providing legal assistance to the Administrator and its customers, e.g. accounting, IT, graphic design, copywriting, debt collection companies, etc.
Personal data may also be made available to other recipients, including authorities, e.g. the tax office, for the purpose of fulfilling legal and tax obligations related to settlements and accounting.

HAVE WE APPOINTED A DATA PROTECTION OFFICER?

The Personal Data Administrator hereby informs that it has not appointed a Data Protection Officer (DPO).
The User acknowledges that their personal data may be transferred to authorised state authorities in connection with proceedings conducted by them, at their request and after fulfilling the conditions confirming the necessity of obtaining such data from the Administrator.

DO WE PROFILE USER DATA?

The User’s personal data will not be used for automated decision-making affecting the User’s rights, obligations or freedoms within the meaning of the GDPR.
Within the Website and tracking technologies, the User’s data may be profiled, which helps to better personalise the Administrator’s offer to the User (mainly through so-called behavioural advertising). However, this should not have any impact on the User’s legal situation, in particular on the terms and conditions of contracts concluded by them or contracts they intend to conclude. It can only help to better tailor the content and targeted advertising to the User’s interests. The information used is anonymous and is not associated with the personal data provided by the User, e.g. during the purchase process. It is derived from statistical data such as gender, age, interests, approximate location, and behaviour on the Website.
Every User has the right to object to profiling if it would have a negative impact on the User’s rights and obligations.
If you would like to learn more about behavioural advertising, please click here: https://www.youronlinechoices.com/pl/o-reklamie-behawioralnej.

§4 FORMS

The Administrator uses the following types of forms on the Website:

  1. Contact form – allows you to send a message to the Administrator and contact them electronically. Personal data in the form of your name or company name, e-mail address and data provided in the message content are processed by the Administrator in accordance with this Privacy Policy for the purpose of contacting the User.

After contacting the User, the data may be archived, which is in the Administrator’s legitimate interest. The Administrator is unable to specify the exact period of archiving and, consequently, the deletion of messages. However, the maximum period will not exceed the limitation periods for claims under the law.

  1. Order form in the Shop – When placing an order in the Administrator’s online shop, you must provide certain data in accordance with the rules contained in the Terms and Conditions of Sale in order to process the order, fulfil the legal obligations imposed on the Administrator, settlements, consideration of claims, for statistical and archival purposes, as well as for direct marketing to customers, which is the Administrator’s legitimate interest.

These are mainly: first name, surname, company name, home address or company registered office, possibly delivery address, e-mail address, telephone number. If the User already has a User account in the store, then it is sufficient to provide the login (or e-mail address) and password and log in to your account, and then take further steps related to the order.
The Administrator stores the data for the duration of the order or service, and after its completion, for the period necessary to protect against claims. In addition, for the period specified by law, e.g. tax law (including the period of storage of invoices).

  1. Complaint and withdrawal form in the online shop – When using the Administrator’s services or products, you can file a complaint or withdraw from the contract. For this purpose, the Administrator provides a complaint form and a contract withdrawal form attached to the Terms and Conditions of Sale. You can also perform these actions without filling out the form, but you must provide the necessary data.

The data required in this case are: first name, surname or, if applicable, the User’s name, address of residence or company registered office (if the order was placed on behalf of a company), e-mail address, telephone number (if applicable), bank account number (if a refund is necessary).
Providing the data is voluntary, but necessary to process the complaint in accordance with the law and the terms and conditions of sale. The data will be stored for the purpose of the complaint/withdrawal from the contract procedure, as well as for archiving and defence against claims.

  1. Registration form for creating a User account in the online store– The User has the option of creating an account in the online store and for this purpose should complete the appropriate registration and provide the following data: first name, surname, e-mail address, company name, company address, tax identification number, telephone number and then a password.

The account is created in accordance with the rules set out in the Terms and Conditions of Sale and is a service provided electronically. The rules for maintaining an account and its possible deletion are contained in the Terms and Conditions of Sale.
The data marked as mandatory is required and without it it will not be possible to create a user account. Providing other data is voluntary.

  1. Form for leaving comments and opinions – All data in the form is provided voluntarily by the User if they wish to leave such an opinion. By posting opinions, they consent to the processing of this data. This includes: the content of the opinion, e-mail address, name.

The Administrator is not responsible for the content of opinions posted by users of the Website. The Administrator reserves the right not to publish opinions that are spam, offensive, contain vulgar or offensive language, illegal content or any links to other websites posted without their consent.
The Administrator may entrust the processing of personal data to third parties without the separate consent of the User (on the basis of an entrustment agreement). Data obtained from forms may not be transferred to third parties.
If the User uses the services of external providers, such as Google, they should familiarise themselves with their privacy policies, available on the websites of these service providers.

§5 DISCLAIMER AND COPYRIGHT

1. All content posted on the Website is subject to the copyright of specific individuals and/or the Administrator (e.g. photos, texts, other materials, etc.). The Administrator does not consent to the copying of this content in whole or in part without its express prior consent.
2. The Administrator hereby informs the User that any dissemination of content made available by the Administrator constitutes a violation of the law and may result in civil or criminal liability. The Administrator may also claim appropriate compensation for material or non-material losses in accordance with applicable regulations.
3. The Administrator shall not be liable for any unlawful use of the materials available on the Website.
4. The content posted on the Website is current as of the date of its publication, unless otherwise indicated.


§6 TECHNOLOGIES

In order to use the Administrator’s website, it is necessary to have:
1. A device with Internet access,
2. An active e-mail account,
3. A web browser that allows you to view web pages,
4. Software that allows you to read content in the formats presented, e.g. pdf, video, mp3, mp4.

§7 COOKIE POLICY

  1. Like most websites, the Administrator’s Website uses so-called tracking technologies, i.e. cookies, which enable the website to be improved in terms of the needs of Users visiting it.
  2. The website does not automatically collect any information, except for information contained in cookies.
  3. Cookies are small text files that are stored on your device, e.g. your computer, tablet or smartphone, when you use the Website.
  4. These may be first-party cookies (coming directly from the Website) and third-party cookies (coming from websites other than the Website).
  5. Cookies allow the content of the Website to be tailored to the individual needs of the User and the needs of other Users visiting it. They also enable the creation of statistics that show how Users use the Website and how they navigate it. This allows us to improve the Website, its content, structure and appearance.
  6. The Administrator uses the following third-party cookies on the Website:
  7. Facebook conversion pixel and advertisements created through the Facebook Ads portal (Facebook Custom Audiences) – for the purpose of managing advertisements on Facebook and conducting remarketing activities, which is the Administrator’s legitimate interest. The Administrator may also direct advertising content to the User through the Facebook portal as part of contact advertisements.

The Facebook Pixel tool is provided by Facebook Inc. and its affiliates. It is an analytical tool that helps measure the effectiveness of advertisements, shows what actions Website Users take, and helps reach a specific group of people (Facebook Ads, Facebook Insights). The Administrator may also target advertising content to the User through the Facebook portal as part of contact advertisements.

The Administrator may also conduct remarketing on the basis of Article 6(1)(f) of the GDPR (the Administrator’s legitimate interest in promoting and advertising services to persons who have consented to receiving offers (or persons similar to them or users who have liked the Fanpage) in such a way that the e-mail addresses provided are uploaded to the marketing tool offered by Facebook Inc., the so-called ad manager, and then an advertisement created by the Administrator or authorised persons is directed to them via the Administrator’s advertising account, provided that these persons are also users of the Facebook platform (they have an account there). Each time, this data is deleted after the end of the advertising campaign. In the event of another advertising campaign, an updated contact database is uploaded to the tool. Detailed information about so-called custom audiences, data hashing rules and data processing can be found in Facebook’s privacy policy at this link < a href=”https://www.facebook.com/legal/terms/customaudience”# rel=”nofollow” target=”_blank” > https:// www.facebook.com/legal/terms/customaudience# and < a href=”https://www.facebook.com/legal/terms/dataprocessing” rel=”nofollow” target=”_blank”>https://www.facebook.com/legal/terms/dataprocessing, and the Administrator recommends that each User familiarise themselves with these rules.

The information collected through the use of Facebook Pixel is anonymous and does not allow for the identification of the User. It shows general data about users: location, age, gender, interests. The Facebook portal provider may combine this information with the information that the User provides to them through their Facebook account and then use it in accordance with their own assumptions and objectives.

The Administrator recommends that you familiarise yourself with the details related to the use of the Facebook Pixel tool and, if necessary, ask the provider of this tool any questions you may have, as well as manage your privacy settings on Facebook. For more information, please visit: https://www.facebook.com/privacy/explanation. You can opt out of cookies responsible for displaying remarketing ads at any time, e.g. at https://www.facebook.com/help/1075880512458213/.

By using the website, you consent to the installation of the indicated cookie on your end device.

  1. Built-in Google Analytics code – for the purpose of analysing Website statistics. Google Analytics uses its own cookies to analyse the activities and behaviour of Website Users. These files are used to store information, e.g. from which website the User came to the current website. They help to improve the Website.

This tool is provided by Google Ireland Limited. Actions taken in connection with the use of Google Analytics code are based on the Administrator’s legitimate interest in creating and using statistics, which then enables the improvement of the Administrator’s services and optimisation of the Website.
When using Google Analytics, the Administrator does not process any User data that would enable their identification.

The Administrator recommends that you familiarise yourself with the details related to the use of Google Analytics, the possibility of disabling the tracking code and, if necessary, ask questions to the provider of this tool at: https://support.google.com/analytics#topic=3544906.

  1. Plugins directing to social media, e.g. Facebook, Twitter.
    After clicking on the icon of a given plugin, the User is redirected to the website of an external provider, in this case the owner of a given social networking site, e.g. Facebook. They then have the option to click ‘Like’ or ‘Share’ and like the Administrator’s fan page on Facebook or directly share its content (post, article, video, etc.).

The Administrator recommends that you read Facebook’s privacy policy before creating an account on this website. The Administrator has no control over the data processed by Facebook. From the moment the User clicks on the social media plugin button, personal data is processed by the social networking site, e.g. Facebook, which becomes the data controller and decides on the purposes and scope of its processing. Cookies left by the Facebook plugin (or other third parties) may also be applied to the User’s device after entering the Website and then associated with the data collected on Facebook. By using the Website, the User accepts this fact. The Administrator has no influence on the processing of data by third parties in this way.

The above guidelines also apply to the operation of:

Facebook – fan page located at the URL:

  1. Tools for evaluating the effectiveness of Google Ads advertising campaigns – for the purpose of conducting advertising and remarketing campaigns, which is the Administrator’s legitimate interest.

The Administrator does not collect any data that would allow the identification of the User’s personal data. The Administrator recommends that you read Google’s privacy policy to learn more about how these features work and how to disable them from your browser.

  1. Cookies used to recover abandoned shopping carts and the User’s activity on the Online Store website,
    – for the purpose of sending the User advertising communications related to an uncompleted order, which is the legitimate interest of the Administrator.
  1. Content from external providers’ portals and websites,
    The Administrator may embed content from portals, websites, blogs and other external websites on the Website. In particular, these may be videos from YouTube or Vimeo.

These third parties may store certain data about the content viewed by the User.
If the User does not want this to happen, they should log out of the portal (if they have an account there and are logged in) before visiting the Website or not play the content on the Website. They can also change their browser settings and block the display of specific content from specific portals.

YouTube
YouTube is operated by Google LLC and allows you to play videos on the Administrator’s websites. YouTube may store cookies on your device about video playback and assign them to your YouTube account if you are logged in.
By using the videos posted on YouTube, the User uses the services provided electronically by Google LLC. Details on the processing of personal data by YouTube can be found in the privacy policy and terms and conditions of this website: https://policies.google.com/privacy and https://www.youtube.com/t/terms
1. The Administrator again recommends that you read the privacy policy of each of the providers of the above services in order to learn about the possibilities of making changes and settings that ensure the protection of your rights.
2. The Website uses two types of cookies: session cookies, which are deleted after closing the browser, logging out or leaving the website, and persistent cookies, which are stored on the User’s end device, enabling the browser to be recognised the next time the website is visited, for the period specified in the cookie parameters or until they are deleted by the User.
3. In many cases, the software used for browsing websites (web browser) allows cookies to be stored on the User’s end device by default. Website Users may change their cookie settings at any time. These settings can be changed in particular to block the automatic handling of cookies in the web browser settings or to inform the User each time they are placed on the Website User’s device. Detailed information about the possibilities and methods of handling cookies is available in the software (web browser) settings.
4. The Administrator informs that restrictions on the use of cookies (disabling them, limiting them) may affect some of the functionalities available on the Website and hinder its functioning.
5. More information about cookies is available at http://wszystkoociasteczkach.pl or in the ‘Help’ section of your web browser menu.

§8 CONSENT TO COOKIES

When you first visit the Website, you must consent to cookies or take other possible actions indicated in the message in order to continue using the Website content. By using the Website, you express your consent. If the User does not wish to give such consent, they should leave the Website. They can also change their browser settings at any time to disable or delete cookies. The necessary information can be found in the ‘Help’ tab in the User’s browser.

§9 SERVER LOGS

1. Using the Website involves sending queries to the server on which the Website is stored.
2. Each query sent to the server is recorded in the server logs. The logs include, among other things, the User’s IP address, the date and time of the server, information about the web browser and operating system used by the User.
3. The logs are saved and stored on the server.
4. Server logs are used to administer the Website, and their content is not disclosed to anyone other than persons and entities authorised to administer the server.
5. The Administrator does not use server logs in any way to identify the User.

Date of publication of the Privacy Policy: 7 August 2023
Date of last update: 5 August 2021