Privacy Policy

This Privacy Policy describes the rules for processing information about you, including personal data and cookies.

1. General information

  1. This policy applies to the website available at the URL: bursztynowyhoryzont.pl
  2. The operator of the website and the Data Controller is: Magdalena Broda, Bursztynowy Horyzont, Aleja Lipowa 28, 72-344 Śliwin
  3. Contact email address of the operator: kontakt@bursztynowyhoryzont.pl
  4. The operator is the Data Controller of your personal data with regard to data voluntarily provided in the Service.
  5. The Service uses personal data for the following purposes:
    • Handling inquiries via the contact form
    • Provision of ordered services
  6. The Service collects information about users and their behavior in the following ways:
    1. Through voluntarily entered data in forms, which are then stored in the Operator’s systems.
    2. By storing cookies on end devices (so-called “cookies”).

2. Selected data protection methods used by the Operator

  1. Login areas and data entry forms are protected via encrypted transmission (SSL certificate). This ensures that personal data and login credentials entered on the website are encrypted on the user’s device and can only be read on the target server.
  2. User passwords are stored in hashed form. The hashing function is one-way – it cannot be reversed, which is the current standard for password storage.
  3. The Operator periodically changes administrative passwords.
  4. To protect data, the Operator regularly creates backups.
  5. An important element of data protection is the regular updating of all software used by the Operator for processing personal data, including programming components.

3. Hosting

  1. The Service is hosted (technically maintained) on servers of the hosting provider: other company
  2. In order to ensure technical reliability, the hosting provider keeps server-level logs. The following may be recorded:
    • resources identified by URL (addresses of requested resources – pages, files),
    • time of request,
    • time of response,
    • client station name – identification via HTTP protocol,
    • information about errors occurring during HTTP transactions,
    • URL of the previously visited page (referrer link) if the user came via a link,
    • browser information,
    • IP address information,
    • diagnostic information related to self-service ordering processes,
    • information related to email correspondence sent to or by the Operator.

4. Your rights and additional information about data use

  1. In some cases, the Data Controller may transfer your personal data to other recipients if necessary to perform a contract with you or fulfill legal obligations. This applies to the following groups:
    • hosting company under data processing agreement
  2. Your personal data processed by the Controller will not be stored longer than necessary for legal obligations (e.g. accounting regulations). For marketing purposes, data will not be processed longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification,
    • deletion,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to data processing described in section 3.2, including profiling, where processing is based on legitimate interests. This right does not apply if there are overriding legitimate grounds for processing.
  5. You may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary but necessary to use the Service.
  7. Automated decision-making, including profiling, may be carried out for service provision and direct marketing purposes.
  8. Personal data is not transferred outside the European Union.

5. Form information

  1. The Service collects information voluntarily provided by users, including personal data if provided.
  2. The Service may store connection parameters (time stamp, IP address).
  3. In some cases, the Service may store information linking form data with the user’s email address. In such cases, the email address may appear in the URL of the form page.
  4. Data provided in forms is processed for the purpose resulting from the specific form function (e.g. service request handling, contact, registration). The context and description of each form clearly indicate its purpose.

6. Administrator logs

  1. User activity within the Service may be logged. This data is used for system administration.

7. Key marketing techniques

  1. The Operator uses statistical analysis via Google Analytics (Google Inc., USA). Only anonymized data is processed. The service uses cookies. Users can manage Google ad preferences here: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques to match advertisements to user behavior. No personal data is transferred to advertising operators. Cookies are required for this functionality.
  3. The Operator uses the Facebook Pixel. This allows Facebook (Facebook Inc., USA) to recognize that a registered user has visited the Service. The Operator does not transfer additional personal data to Facebook. Cookies are used.
  4. The Operator may use automated communication systems (e.g. sending emails after visiting selected pages), provided the user has consented to marketing communication.

8. Information about cookies

  1. The Service uses cookies.
  2. Cookies are IT data, especially text files stored on the user’s device and used by websites. They typically include the website name, storage time, and a unique identifier.
  3. The entity placing cookies and accessing them is the Service operator.
  4. Cookies are used for:
    1. maintaining user sessions (after login), so users do not need to re-enter credentials on each page,
    2. marketing purposes described above.
  5. The Service uses session cookies and persistent cookies. Session cookies are temporary and deleted after logout or browser closure. Persistent cookies remain until their expiration or manual deletion.
  6. Browsers typically allow cookies by default. Users can change settings or disable cookies, but this may affect website functionality.
  7. Cookies may also be used by partners such as Google, Facebook, and Twitter.

9. Managing cookies – how to give and withdraw consent

  1. If you do not want cookies, you can change your browser settings. Disabling essential cookies may limit or prevent website functionality.
  2. Instructions for managing cookies:

    3. Mobile devices: