Skip to content

Legal

Privacy policy.

How personal data is processed, what cookies are used, what rights you have. This document follows the EU GDPR (RODO in Polish law).

Note: this is an English summary of the binding Polish version at /polityka-prywatnosci/. In case of discrepancy, the Polish version prevails.

1. General information

This policy applies to the website www.bujnowlosa.pl (the "Site"). The operator of the Site is Anna Karwala, email: kontakt@bujnowlosa.pl.

The operator is the Controller of your personal data with respect to information you voluntarily provide on the Site.

The Site processes personal data for the following purposes: handling inquiries sent through the contact form, fulfilling commissioned services, and presenting our offer or information.

The Site collects information about users and their behaviour through: data voluntarily entered in forms, cookies stored on end devices, and server logs maintained by the hosting provider.

2. Selected data protection measures

Pages where you log in or enter personal data are protected at the transmission layer (SSL certificate). Personal data entered on the site is encrypted on your device and can only be decrypted on the destination server.

The Controller rotates administrative passwords periodically and performs regular backups for the protection of stored data.

Regular updates of all software used to process personal data are a core part of data protection.

3. Hosting

The Site is technically hosted on the servers of linuxpl.com (H88 S.A., based in Poznań, Poland).

For technical reliability, the hosting provider keeps server-level logs. Logged data may include: resources identified by URL, request time, response time, client station name (per HTTP protocol), error information for HTTP transactions, referring URL, browser information, and IP address.

The hosting provider applies multiple safeguards: disk arrays, fire suppression and access control, power generators and UPS systems, on-site monitoring and specialised climate control.

4. Your rights and additional information on data use

In some situations the Controller may transfer your personal data to other recipients, if it is necessary to perform a contract with you or to fulfil the Controller's legal obligations.

This applies to the following recipient groups: the hosting provider, authorised staff, and marketing service providers.

Your personal data processed by the Controller is kept no longer than necessary to perform the related activities, as defined by separate regulations (such as accounting law). Marketing data is processed for no longer than 3 years.

You have the right to request from the Controller:

  • access to your personal data;
  • rectification;
  • erasure;
  • restriction of processing;
  • and data portability.

You have the right to object to processing carried out on the basis of the Controller's legitimate interests, as set out above.

You may file a complaint about the Controller's actions with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Providing personal data is voluntary, but necessary for the operation of the Site.

5. Information collected in forms

The Site collects information voluntarily provided by users, including personal data where such data is provided.

The Site may also record connection parameters (timestamp, IP address).

In some cases the Site may record information that helps associate form data with the email address of the user filling in the form. In such cases the user's email may appear inside the URL of the page containing the form.

Data entered in a form is processed for the purpose of the form's specific function, such as processing a service inquiry, commercial contact, or registering services.

6. Controller logs

Information about user behaviour on the Site may be logged. This data is used solely to administer the Site.

7. Relevant marketing techniques

The operator uses Google Analytics for statistical traffic analysis. No personal data is transferred to the service provider - only anonymised information. The service relies on cookies stored on the user's end device.

The operator may use remarketing techniques which adapt advertising to user behaviour on the Site. This may give the impression that personal data is being used for tracking. In practice no personal data is transferred - only cookies are used.

8. About cookies

The Site uses cookies. Cookies are data files - particularly text files - stored on the end device of a Site User, intended for use with the Site's web pages.

Cookies are used for the following purposes:

  • maintaining the user's session (after sign-in), so the user does not have to re-enter login and password on each subpage of the Site;
  • achieving the purposes described above under "Relevant marketing techniques".

Two main types of cookies are used: "session" cookies and "persistent" cookies. Session cookies are temporary files stored on the user's end device until sign-out, until the user leaves the website, or until the software (web browser) is closed.

Web browser software typically allows cookie storage on the user's end device by default.

Cookies stored on the Site User's end device may also be used by entities cooperating with the Site operator - notably Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Cookie management - how to give and withdraw consent

If you do not want to receive cookies, change your browser settings. Disabling cookies that are essential for authentication, security or preference handling may make it harder - and in extreme cases impossible - to use websites.

To manage cookie settings, select the browser you use and follow its instructions:

  • Edge
  • Internet Explorer
  • Chrome
  • Safari
  • Firefox
  • Opera

Mobile devices:

  • Android
  • Safari (iOS)
  • Windows Phone

Document compliant with the EU GDPR (RODO). Questions? Write to me.

Send an inquiry