I. GENERAL INFORMATION

1. This policy applies to the Website, operating at URL: jaskolkadom.com

2. The Website Operator and the Personal Data Controller is: 2eat z sp. z o.o. ul. Grodziska 8, 60-363 Poznań

3. The Operator’s contact e-mail address: majordomus@jaskolkadom.com

4. The Operator is the Controller of your personal data with respect to the data you voluntarily provide on the Website:

a). First name and surname,

b). E-mail address,

c). Phone number,

As the Controller, we process personal data for the following purposes:

a). the performance of the contract for the provision of services and to take necessary actions at your request before the conclusion of the Contract (Article 6(1)(b) of the GDPR);

b). fulfilment of the Controller’s legal obligations, such as issuing and storing invoices (Article 6(1)(c) of the GDPR);

c). marketing of services provided by the Controller (Article 6(1)(a) of the GDPR);

d). pursuing possible claims by the Controller in connection with damage you have caused to the Controller and protection against your claims against the Controller (Article 6(1)(f) of the GDPR).

6. We process all data processed for accounting purposes and tax reasons for five years counted from the end of the calendar year in which the tax liability arose. In the case of personal data processed on your express consent, we will keep it until you withdraw your consent, but for no longer than five years.

7. The Website uses personal data for the following purposes:

a). Running a newsletter

8. The Website performs the functions of retrieval of information about users and their behaviour in the following ways:

a). Through data voluntarily entered in the forms, which are entered into the Operator’s systems.

b). By storing cookies on the end devices.

II. SELECTED DATA PROTECTION METHODS USED BY THE OPERATOR

1. The login and personal data entry sites are protected in the transmission layer (SSL certificate). It ensures that personal data and login information entered on the website are encrypted on the user’s computer and can only be read on the target server.

2. Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. It protects the data in case the database is stolen from the server.

3. User passwords are stored in hashed form. The hash function works unidirectionally – it is not possible to reverse its operation, which is now the modern standard for storing user passwords.

4. The Operator periodically changes its administrative passwords.

5. In order to protect the data, the Operator regularly makes security copies.

6. An important element of data protection is the regular updates of any software used by the Operator to process personal data, which means, in particular, regular updates of programming components.

III. HOSTING

The Website is hosted (technically maintained) on the Operator’s servers: cyberFolks.pl

IV. YOUR RIGHTS AND ADDITIONAL INFORMATION ABOUT HOW WE WILL USE YOUR DATA

1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary for the purposes of performance of the contract concluded with you or to fulfill obligations incumbent on the Controller. It applies to the following groups of recipients:

• hosting company based on commissioned processing
• couriers
• postal operators
• law firms and debt collectors
• banks
• payment operators
• public authorities
• authorised employees and associates who use the data to ensure the fulfilment of the website’s purpose
• companies providing marketing services to the Controller

2. You have the right to request from the Controller:

• access to personal data concerning you,
• its correction,
• deletion,
• processing restriction,
• withdrawal of consent,
• and data portability.

3. At any time, you have the right to withdraw your consent to the processing of the personal data which we process solely on the basis of your consent. Withdrawal of consent will not affect the legality of the processing performed before the withdrawal.

4. You have the right to object to the processing of your personal data for the purpose of carrying out the legitimate interests pursued by the Controller, including profiling, whereby the right to object will not apply if there are valid legitimate grounds for processing that override your interests and rights, in particular the establishment, assertion or defense of claims.

You may lodge a complaint against the Controller’s actions with the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.

6. Provision of personal data is voluntary, but necessary to operate the Website.

7. Automated decision-making, including profiling for the purpose of providing services under the contract concluded and for the purpose of direct marketing by the Controller, may be undertaken in relation to you.

8. Personal data is not transferred from third countries within the meaning of data protection legislation. It means that we do not send it outside the European Union.

V. INFORMATION IN THE FORMS

1. The Website collects information voluntarily provided by the user, including personal data, if provided.

2. The Website can save information about the connection parameters (time stamp, IP address).

3. The Website, in some cases, may record information to help associate the data in the form with the e-mail address of the user who filled out the form. In this case, the user’s e-mail address appears inside the URL of the page containing the form.

4. The data provided in the form is processed for the purpose resulting from the function of the specific form, e.g. to process a service request, business contact, service registration, etc. Each time, the context and description of the form clearly informs what it is for.

VI. CONTROLLER’S LOGS

Information about user behaviour on the Website may be subject to logging. This data is used for the Website administration purposes.

VII. RELEVANT MARKETING TECHNIQUES

1. The Operator uses the website traffic statistical analysis through Google Analytics (Google Inc., based in the U.S.). The Operator does not transmit personal data to the provider of this service; it only transmits anonymised information. The service is based on the use of cookies on the user’s end device. In respect of information about user preferences collected through the Google advertising network, the user can view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/

2. The Operator uses remarketing techniques to tailor advertising messages to the user’s behaviour on the website, which may create the illusion that the user’s personal data is being used to track the user, but, in fact, no personal data is transferred from the Operator to the advertising operators. A technological prerequisite for such activities is that cookies are enabled.

3. The Operator uses the Facebook pixel. This technology means that Facebook (Facebook Inc., based in the U.S.) knows that a person registered with it is using the Website. In this case, it relies on data in respect of which it is the controller. The Operator does not pass on any additional personal data to Facebook. The service is based on the use of cookies on the user’s end device.

4. The Operator uses a solution that examines user behaviour through heat mapping and recording behaviour on the website. This information is anonymised before it is sent to the service provider so that it does not know which individual it relates to. In particular, typed passwords and other personal data are not recorded.

5. The Operator uses a solution that automates the operation of the Website with respect to users, e.g. that can send an e-mail to a user after visiting a specific page, provided that the user has agreed to receive commercial correspondence from the Operator.

VIII. INFORMATION ABOUT COOKIES

1. The website uses cookies.

2. Cookies are information technology data, in particular text files, that are stored in the end device of the Website User and are intended for the use of the Website. Cookies typically include the name of the website from which they are derived, the length of time they are stored on the end device, and a unique number.

3. The entity placing cookies on the end device of the Website User and gaining access to them is the Website provider.

4. Cookies are used for the following purposes:

a). maintaining a session of the Website user (after logging in), thanks to which the user does not have to re-enter his/her login and password on each page of the Website;

b). to achieve the objectives set forth above, under “Relevant marketing techniques”;

5. The Website uses two principal types of cookies: “session cookies” and “persistent cookies”. Session cookies are temporary files that are stored in the end device of the User until the User logs out, exits the website, or disables the software (the web browser). Persistent cookies are stored in the end device of the User for a period of time specified in the cookie settings or until the User deletes them.

6. By default, the web browsing software (web browser) typically allows cookies to be stored on the end device of the User. The Website Users can change the settings in this area. The web browser allows you to delete cookies. You can also block cookies automatically. See your web browser’s help or documentation tab for details.

7. Restrictions on the use of cookies may affect some of the functionalities available on the Website pages.

8. Cookies placed in the Website User’s end device may also be used by entities cooperating with the Website Operator; in particular, this applies to the following companies: Google (Google Inc. based in the U.S.), Facebook (Facebook Inc. based in the U.S.), Twitter (Twitter Inc. based in the U.S.).

IX. MANAGING COOKIES – HOW TO GRANT AND WITHDRAW CONSENT IN PRACTICE?

1. If you do not wish to receive cookies, you can change your browser settings. Please note that disabling the use of cookies necessary for authentication, security or maintaining user preferences may make it difficult and, in extreme cases, prevent the use of the web pages

2. To manage your cookie settings, select the web browser you are using from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

3. Mobile devices:

• Android
• Safari (iOS)
• Windows Phone

X. OTHER PROVISIONS

1. We will amend this Privacy Policy when necessary due to:

• entry into force of new regulations,
• new guidelines for authorities responsible for the supervision of personal data.

2. The Policy may also be modified if the technology used to process personal data changes, and if the methods, purposes or legal basis for processing personal data change.

3. If you have questions about the Policy, please e-mail us at office@jaskolkadom.com.

4. This document was last updated on July 29, 2022.