Polityka Prywatności

1. This policy applies to the website operating at the following URL: https://www.visualpromotion.pl
2. The website operator and data controller is: Visual Promotion, Kokotów 976, 32-002 Kokotów
3. The operator’s email address: biuro@vpromotion.pl
4. The Operator is the controller of your personal data in relation to the data you have voluntarily provided on the Website.
5. The website uses personal data for the following purposes:
   • Handling enquiries via the form
   • Presentation of an offer or information
6. The website collects information about users and their behaviour in the following ways:
   1. Through data voluntarily entered into forms, which is then fed into the Operator’s systems.
   2. By storing cookies on end-user devices.

2. Selected data protection methods used by the Operator

1. Login pages and areas where personal data is entered are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the destination server.
2. The operator changes their administrative passwords from time to time.
3. W celu ochrony danych Operator regularnie wykonuje kopie bezpieczeństwa.
4. An important aspect of data protection is the regular updating of all software used by the Controller to process personal data, which in particular involves regular updates to software components.

3. Hosting

1. The website is hosted (and technically maintained) on the operator’s server: home.pl
2. Registration details of the hosting company: home.pl S.A., with its registered office in Szczecin, Zbożowa 4, 70-653 Szczecin. Registered with the District Court – Szczecin Centre, 13th Commercial Division of the National Court Register. Share capital of PLN 1,294,000, fully paid up.
3. Visit https://home.pl to find out more about web hosting and view the hosting company’s privacy policy.
4. Web hosting company:
   • implements measures to protect against data loss (e.g. disk arrays, regular backups),
   • implements appropriate fire safety measures at processing sites (e.g. special fire-suppression systems),
   • implements appropriate measures to protect processing systems in the event of a sudden power failure (e.g. dual power supply circuits, generators, UPS systems),
   • implements physical security measures to control access to data processing sites (e.g. access control, surveillance),
   • implements measures to ensure appropriate environmental conditions for servers as components of the data processing system (e.g. environmental monitoring, specialist air-conditioning systems),
   • implements organisational measures to ensure the highest possible level of security and confidentiality (training, internal regulations, password policies, etc.),
   • appointed a Data Protection Officer.
5. To ensure technical reliability, the hosting company maintains server-level logs. The following may be recorded:
   • resources identified by a URL (addresses of requested resources – pages, files),
   • the time the query was received,
   • the time the reply was sent,
   • client station name – identification carried out via the HTTP protocol,
   • information about errors that occurred during the execution of the HTTP transaction,
   • the URL of the page the user previously visited (referrer link) – if the user accessed the Website via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information relating to the process of self-ordering services via the order forms on the website,
   • information relating to the handling of emails sent to the Operator and sent by the Operator.

4. Your rights and further information on how your data is used

1. In certain situations, the Controller is entitled to disclose your personal data to other recipients if this is necessary to perform the contract concluded with you or to fulfil the Controller’s legal obligations. This applies to the following categories of recipients:
   • persons authorised by us, employees and contractors who need access to personal data in order to carry out their duties,
   • web hosting company,
   • a company specialising in email marketing,
   • a company providing SMS messaging services,
   • companies with which the Controller cooperates in relation to its own marketing,
   • couriers,
   • insurers,
   • law firms and debt collectors,
   • banks,
   • payment service providers,
   • public authorities.
2. Your personal data will be processed by the Controller for no longer than is necessary to carry out the related activities specified in separate regulations (e.g. regarding accounting). With regard to marketing data, such data will not be processed for longer than 3 years.
3. You have the right to request the following from the Controller:
   • access to your personal data,
   • their corrections,
   • deletion,
   • restrictions on processing,
   • and data transfer.
4. You have the right to object to the processing referred to in point 3.3(c) to the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling; however, the right to object cannot be exercised where there are valid legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
5. You may lodge a complaint regarding the Controller’s actions with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary for the use of the Website.
7. Automated decision-making, including profiling, may be carried out in relation to you for the purpose of providing services under the contract and for the purpose of the Controller conducting direct marketing.
8. Personal data is not transferred from third countries within the meaning of data protection legislation. This means that we do not transfer it outside the European Union.

5. Information in the forms

1. The website collects information provided voluntarily by the user, including personal data, where such data is provided.
2. The website may store information about connection details (timestamps, IP address).
3. In some cases, the website may store information that helps link the data in the form to the email address of the user filling in the form. In such cases, the user’s email address appears within the URL of the page containing the form.
4. The data provided in the form is processed for the purpose specified by the form in question, e.g. to handle a service request or commercial enquiry, to register for services, etc. In each case, the context and description of the form clearly state what it is used for.

6. Administrator logs

1. Information regarding user behaviour on the website may be logged. This data is used for the purpose of administering the website.

7. Key marketing techniques

1. The operator uses Google Analytics (Google Inc., based in the USA) to analyse website traffic. The operator does not transfer any personal data to the provider of this service, but only anonymised information. The service relies on the use of cookies on the user’s device. With regard to information about user preferences collected by the Google advertising network, the user can view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/
2. The Operator uses remarketing techniques to tailor advertising messages to users’ behaviour on the website, which may give the impression that users’ personal data is being used to track them; however, in practice, no personal data is transferred from the Operator to advertising providers. The technical prerequisite for such activities is that cookies must be enabled.
3. The Operator uses the Facebook pixel. This technology enables Facebook (Facebook Inc., based in the USA) to recognise that a registered user is using the Website. In this case, the Operator relies on data for which it is the controller; the Operator does not transmit any additional personal data to Facebook. The service relies on the use of cookies on the user’s device