1. General Information

2. Selected Data Protection Methods Used by the Operator

1. The login areas and personal data entry are protected in the transmission layer (SSL certificate). As a result, personal data and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the Operator possessing the key can read it. This protects the data in case the database is stolen from the server.
3. User passwords are stored in a hashed form. The hashing function works in one direction – it is not possible to reverse its operation, which is currently the modern standard for storing user passwords.
4. Two-factor authentication is used on the site, providing an additional form of protection for logging into the Service.
5. The Operator periodically changes their administrative passwords.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.

3. Hosting

1. The Service is hosted (technically maintained) on the operator’s servers: SEOHOST
2. To ensure technical reliability, the hosting company maintains server-level logs. The following may be recorded:
3. • resources identified by URL identifier (addresses of requested resources – pages, files),
   • time of the query’s arrival,
   • time of sending the response,
   • name of the client’s station – identification carried out by the HTTP protocol,
   • information about errors that occurred during the execution of the HTTP transaction,
   • URL address of the page previously visited by the user (referer link) – in the case of a transition to the Service via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information related to the process of self-ordering services through recorders on the site,
   • information related to the handling of electronic mail sent to and sent by the Operator.

4. Your Rights and Additional Information on How Data is Used

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to the following groups of recipients:
   • hosting company on the basis of entrustment
   • operators of online chat solutions
   • authorized employees and associates who use the data to achieve the purpose of the website
   • companies providing marketing services for the Administrator
2. Your personal data processed by the Administrator no longer than is necessary to perform the activities related to them specified by separate regulations (e.g., regarding accounting). Regarding marketing data, they will not be processed for more than 3 years.
3. You have the right to request from the Administrator:
   • access to your personal data,
   • their rectification,
   • deletion,
   • processing restriction,
   • and data portability.
4. You have the right to object to the processing indicated in point 3.2 regarding the processing of personal data for the performance of legally justified interests pursued by the Administrator, including profiling, although the right of objection will not be executable if there are significant legally justified grounds for processing, overriding your interests, rights and freedoms, especially for the establishment, investigation or defense of claims.
5. There is a right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to service the Site.
7. Actions consisting of automated decision making, including profiling, may be undertaken with respect to you in order to provide services within the framework of the concluded contract and for the Administrator to conduct direct marketing.
8. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.

5. Information in Forms

1. The Service collects information voluntarily provided by the user, including personal data, if they are provided.
2. The Service may record information about connection parameters (timestamp, IP address).
3. In some cases, the Service may save information facilitating the association of data in the form with the email address of the user filling out the form. In this case, the user’s email address appears within the URL of the page containing the form.
4. Data provided in the form are processed for the purpose arising from the function of a specific form, e.g., to perform the service request handling process or commercial contact, registration of services, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Administrator’s Logs

1. Information about users’ behavior in the service may be logged. These data are used for administering the service.

7. Key Marketing Techniques

1. The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
2. The Operator uses remarketing techniques that allow for matching advertising messages to the user’s behavior on the site, which may give the impression that the user’s personal data is used for tracking, but in practice, no personal data is transferred from the Operator to advertising operators. The technical condition for such actions is the enabled cookie support.
3. The Operator uses Facebook Pixel. This technology means that the Facebook service (Facebook Inc. based in the USA) knows that a person registered with it is using the Service. In this case, it is based on data for which it itself is the administrator, the Operator does not transfer any additional personal data to the Facebook service. The service is based on the use of cookies on the user’s end device.
4. The Operator uses a solution to examine user behavior by creating heat maps and recording behavior on the site. This information is anonymized before being sent to the service operator so that he does not know which physical person they relate to. In particular, the recording does not cover entered passwords and other personal data.
5. The Operator uses a solution automating the operation of the Service in relation to users, e.g., it may send an email to the user after visiting a specific subpage, provided they have consented to receive commercial correspondence from the Operator.

8. Information About Cookies

1. The Service uses cookies.
2. Cookies (“ciasteczka”) are computer data, especially text files, that are stored in the Service User’s end device and are intended for use with the Service’s websites. Cookies usually contain the name of the website they come from, the duration of their storage on the end device, and a unique number.
3. The entity placing cookies on the Service User’s end device and accessing them is the Service operator.
4. Cookies are used for the following purposes:
   1. Maintaining the Service user’s session (after logging in), so the user does not have to re-enter the login and password on every subpage of the Service;
   2. Realizing the objectives specified above in “Key Marketing Techniques”;
5. In the Service, two basic types of cookies are used: “session” (session cookies) and “permanent” (persistent cookies). “Session” cookies are temporary files that are stored in the User’s end device until logging out, leaving the website, or disabling the software (web browser). “Permanent” cookies are stored on the User’s end device for the duration specified in the cookies parameters or until they are deleted by the User.
6. Web browsing software (web browser) typically allows cookies to be stored in the User’s end device by default. Service Users can change the settings in this respect. The web browser allows the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some of the functionalities available on the Service’s web pages.
8. Cookies placed in the Service User’s end device may also be used by entities cooperating with the Service operator, especially refers to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

1. If the user does not want to receive cookies, they can change the browser settings. Note that disabling cookies necessary for authentication, security, maintaining user preferences may hinder, and in extreme cases, may prevent the use of websites.
2. To manage cookie settings, select from the list below the web browser you are using and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone