1. General Information This policy pertains to the website located at the URL: iliada.pl The operator of the service and the data controller is: Paweł Korczak – Przedsiębiorstwo Handlowo Usługowe, ul. Topolowa 2, 28-100 Busko-Zdrój Contact email address of the operator: biuro@iliada.pl The operator is the data controller for your personal data voluntarily provided on the website. The service uses personal data for the following purposes:
- Handling inquiries through forms
- Presentation of offers or information The service collects information about users and their behavior as follows:
- Through voluntarily provided data in forms that are entered into the operator’s systems.
- By storing cookie files (so-called “cookies”) on end-user devices.
2. Selected Data Protection Methods Applied by the Operator Places where personal data is entered and logged in are secured in the transmission layer (SSL certificate). This encryption ensures that personal data and login data entered on the website are encrypted on the user’s computer and can only be read on the target server. User passwords are stored in hashed form, which is a one-way process, making it impossible to reverse. This is a modern standard for storing user passwords. The operator periodically changes their administrative passwords. To protect data, the operator regularly creates backup copies. Regularly updating all software used by the operator for personal data processing is an important element of data protection, including regular updates of software components.
3. Hosting The service is hosted (technically maintained) on servers operated by another company.
4. Your Rights and Additional Information about Data Usage In some situations, the administrator has the right to transfer your personal data to other recipients when necessary to fulfill a contract with you or to fulfill obligations imposed on the administrator. This applies to groups of recipients such as:
- Hosting company on the basis of entrustment
- Payment operators
- Authorized employees and collaborators who use the data to fulfill the purpose of the website’s operation
- Marketing companies on behalf of the administrator Your personal data processed by the administrator will not be retained longer than necessary for activities related to them as specified by separate regulations (e.g., accounting). In the case of marketing data, the data will not be processed for more than 3 years. You have the right to request from the administrator:
- Access to your personal data
- Correction of your personal data
- Deletion of data
- Limitation of processing
- Data portability You also have the right to object to the processing of your personal data, including profiling, based on the legitimate interests pursued by the administrator, provided that there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, especially the establishment, exercise, or defense of legal claims. You have the right to lodge a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw, regarding the actions of the administrator. Providing personal data is voluntary but necessary to use the service. Automated decision-making, including profiling, may be used to provide services under a contract and for direct marketing by the administrator.
Personal data is not transferred to third countries within the meaning of data protection regulations, meaning that it is not transmitted outside the European Union territory.
5. Information in Forms The service collects information provided voluntarily by the user, including personal data if provided. In some cases, the service may store information facilitating the linking of data in the form with the user’s email address filling out the form. In such a case, the user’s email address appears inside the URL address of the page containing the form. Data provided in the form is processed for the purpose arising from the specific form’s function, e.g., to process a service request or commercial contact, or to register services, etc. Each time, the context and description of the form clearly inform what it is used for.
6. Administrator’s Logs Information about user behavior on the website may be subject to logging. This data is used for website administration.
7. Important Marketing Techniques The operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not transmit personal data to this service, only anonymized information. The service relies on the use of cookies on the user’s end device. Regarding user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/ The operator uses remarketing techniques, allowing for the adjustment of advertising messages to the user’s behavior on the website. This may create the illusion that the user’s personal data is being used for tracking, but in practice, no additional personal data is transferred from the operator to advertisers. The technological condition for such actions is the enabling of cookie files. The operator uses the Facebook pixel. This technology allows Facebook (Facebook Inc. based in the USA) to know that a registered user is using the service. In this case, it is based on data for which the operator is the administrator, and no additional personal data is transferred by the operator to Facebook. The service relies on the use of cookies on the user’s end device. The operator uses solutions to study user behavior by creating heat maps and recording actions on the website. This information is anonymized before it is sent to the service provider, so they do not know which specific individual these actions concern. In particular, passwords and other personal data are not recorded.
8. Information about Cookies The service uses cookies. Cookies are computer data, especially text files, that are stored on the User’s end device and are intended for using the website’s pages. Cookies usually contain the name of the website from which they originate, the time of storage on the end device, and a unique number. The entity that places cookies on the User’s end device and accesses them is the service operator. Cookies are used for the following purposes:
- Maintaining the user’s session on the service (after logging in), thanks to which the user does not have to enter their login and password on each subpage of the service again.
- Achieving the goals set out above in the “Important Marketing Techniques” section. Two basic types of cookies are used within the service: “session” (session cookies) and “permanent” (persistent cookies). “Session” cookies are temporary files that are stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). “Permanent” cookies are stored on the user’s end device for the time specified in the cookie file parameters or until they are deleted by the user. The web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Users of the service can change their cookie settings. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the web browser. Limiting the use of cookies may affect some functionalities available on the service’s web pages. Cookies placed on the user’s end device may also be used by cooperating with the operator of the service, in particular, this applies to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).