1. General Information
- This Privacy Policy applies to the website operating at the URL: https://prowisto.pl/sklepmania/
- The Website Operator and Personal Data Administrator is: Sebastian Zdulski Przedsiębiorstwo Handlowe "ZDULSKI", Lublin Voivodeship, Puławy County, Gmina Żyrzyn, Osiny, ul. Centralna 194, 24-103, Poland, NIP: 7162286102, REGON: 060484824.
- The Operator's contact e-mail address is: r.zdulska@op.pl
- The Operator is the Data Administrator of your personal data with respect to the information voluntarily provided on the Website.
- The Website processes personal data for the following purposes:
- Preparation, packaging, and shipping of goods
- Handling inquiries submitted via contact forms
- Execution of ordered services
- Presentation of commercial offers or information
- The Website collects information about users and their behavior through the following methods:
- Via data entered voluntarily into forms, which are subsequently processed within the Operator's systems.
- By storing cookie files ("cookies") on users' end devices.
2. Selected Data Protection Methods Used by the Operator
- Data entry and login locations are protected at the transmission layer via an SSL certificate. This ensures that personal data and login credentials entered on the website are encrypted on the user's computer and can only be decrypted on the destination server.
- User passwords are stored in a hashed format. The hashing function is strictly one-way; it is impossible to reverse its operation, which represents the current modern standard for secure user password storage.
- To minimize the risk of unauthorized data access, the Operator enforces complex password requirements, requiring lowercase and uppercase letters, numbers, and special characters, with a minimum length of 8 characters.
- A critical element of data protection is the regular update of all software used by the Operator to process personal data, with a specific focus on routine updates of core development and programming components.
- To safeguard data availability and integrity, the Operator performs regular security backups.
3. Hosting
- The Website is hosted (technically maintained) on the servers of the provider: webd.pl
- To ensure technical reliability, the hosting company maintains server-level logs. The logged information may include:
- Resources identified by the URL (addresses of requested resources – pages, files),
- Timestamp of the incoming request,
- Timestamp of the sent response,
- Client station name – identification conducted via the HTTP protocol,
- Information regarding errors that occurred during the execution of the HTTP transaction,
- The URL of the page previously visited by the user (referrer link) – if the Website was accessed via an external hyperlink,
- Information about the user's web browser,
- Information about the user's IP address,
- Diagnostic data related to the process of automated service registration through on-site registrars,
- Technical data related to the management of electronic mail addressed to or dispatched by the Operator.
4. Your Rights and Additional Information on Data Utilization
- In specific scenarios, the Administrator has the right to transfer your personal data to other entities if it is necessary for the performance of a contract concluded with you or to fulfill legal obligations binding upon the Administrator. This applies to the following recipient categories:
- The hosting provider, on the basis of a data processing agreement
- Payment processors and gateways
- Authorized employees and associates who handle data to fulfill the operational objectives of the website
- Courier and postal companies
- Entities providing marketing services on behalf of the Administrator
- Your personal data will be processed by the Administrator for no longer than necessary to perform the related activities specified by separate legal provisions (e.g., accounting regulations). In respect of marketing activities, data will not be processed for longer than 3 years.
- You hold the right to request from the Administrator:
- Access to your personal data,
- Rectification of your data,
- Erasure of your data,
- Restriction of processing,
- Data portability.
- You have the right to object to the data processing specified in Section 4.3 regarding the processing of personal data for the performance of legitimate interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised if there are valid, legally justified grounds for processing that override your interests, rights, and freedoms, particularly for the establishment, exercise, or defense of legal claims.
- You have the right to lodge a complaint against the Administrator's actions with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
- Providing personal data is voluntary but remains strictly necessary to use the functionalities of the Website.
- Automated decision-making processes, including profiling, may be applied to you in order to provide services under the concluded contract and for the purpose of direct marketing conducted by the Administrator.
- Personal data may be transferred to third countries within the meaning of personal data protection regulations. This implies that data is transmitted outside the European Union (EU) due to the deployment of external analytical and marketing tools (e.g., Google Analytics, Facebook Pixel).
5. Information in Forms
- The Website collects information provided voluntarily by the user, including personal data, where applicable.
- The Website may log connection parameters (including timestamp and IP address).
- In certain cases, the Website may store information facilitating the correlation of form data with the e-mail address of the user filling out the form. In such instances, the user's e-mail address appears within the URL parameter of the page containing the form.
- Data provided in forms is processed exclusively for the purpose resulting from the function of the specific form (e.g., to process a service request, facilitate commercial contact, or register a service). The context and description of each form clearly communicate its designated purpose.
6. Administrator Logs
- Information regarding user behavior on the Website may be logged. This data is used solely for the technical administration of the Website.
7. Key Marketing Techniques
- The Operator utilizes statistical analysis of website traffic via Google Analytics (provided by Google Inc., based in the USA). The Operator does not transfer personal data to the provider of this service, but only anonymized information. The service relies on the use of cookies stored on the user's end device. Regarding user preferences gathered by the Google advertising network, users can view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/
- The Operator utilizes the Facebook Pixel. This technology enables the social network Facebook (provided by Facebook Inc., based in the USA) to recognize that a registered user is visiting the Website. It operates based on data for which Facebook itself acts as the independent data controller; the Operator does not transfer any additional personal data to Facebook. The service relies on the deployment of cookies on the user's end device.
8. Information on Cookie Files
- The Website utilizes cookie files ("cookies").
- Cookies constitute digital data, in particular text files, which are stored on the Website User's end device and are intended for proper interaction with the Website's pages. Cookies typically contain the name of the originating website, the storage duration on the end device, and a unique identifier.
- The entity placing cookies on the Website User's end device and gaining access to them is the Website Operator.
- Cookies are used for the following purposes:
- Maintaining the User's active session (after logging in), thanks to which the User does not have to re-enter their username and password on each subsequent subpage;
- Fulfilling the operational objectives outlined above in Section 7 ("Key Marketing Techniques").
- The Website uses two primary types of cookies: "session cookies" and "persistent cookies". Session cookies are temporary files stored on the User's end device until logging out, leaving the website, or closing the software (web browser). Persistent cookies are stored on the User's end device for the duration specified in the cookie parameters or until manually deleted by the User.
- Web browsing software (web browsers) typically permits the storage of cookies on the user's end device by default. Website Users can modify their browser settings at any time. Web browsers allow users to delete cookies or block them automatically. Detailed guidance is available within the help or documentation section of your web browser.
- Restricting or disabling the use of cookies may impact or prevent the proper operation of certain functionalities available on the Website.
- Cookies placed on the Website User's end device may also be utilized by entities cooperating with the Operator, including but not limited to: Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).
9. Cookie Management – How to Grant and Withdraw Consent in Practice
- If a user does not wish to accept cookie files, they can adjust their web browser configuration. Please note that disabling cookies that are essential for authentication, security, or user preferences may restrict, and in extreme scenarios prevent, the proper use of the website.
- To manage your cookie settings, select your web browser from the list below and follow the official instructions:
Mobile Devices: