The Privacy Policy describes the principles of processing information about you, including personal data and cookies.
1. General Information
- This policy applies to the website operating under the URL: https://www.indyk-slask.pl/
- The website operator and personal data administrator is: Indyk-Śląsk Sp. z o.o., ul. Wolności 21, 42-672 Wieszowa; NIP 645-23-87-029 REGON 240241781 KRS 0000232526 District Court in Gliwice, Share Capital 150,000 PLN, BDO 000017053.
- Contact email address of the operator: sekretariat@indyk-slask.pl
- The operator is the administrator of your personal data in relation to the data voluntarily provided on the website.
- The website uses personal data for the following purposes:
- Operating a comment system
- Operating an online forum
- Displaying user ads
- Handling inquiries via the contact form
- Presenting offers or information
- The website performs the functions of obtaining user information and their behavior in the following ways:
- Through data voluntarily entered in forms, which are entered into the operator’s systems.
- By saving cookies on end devices.
2. Selected Data Protection Methods Used by the Operator
- Login and personal data entry areas are protected in the transmission layer (SSL certificate). As a result, personal data and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
- User passwords are stored in hashed form. The hashing function is one-way – it is not possible to reverse its operation, which is a contemporary standard for storing user passwords.
- The operator periodically changes its administrative passwords.
- To protect data, the operator regularly performs backups.
- A crucial element of data protection is the regular update of all software used by the operator for processing personal data, which specifically includes regular updates of software components.
3. Hosting
- The website is hosted (technically maintained) on the operator’s servers: hostido.pl
4. Your Rights and Additional Information on Data Usage
- In certain situations, the administrator has the right to transfer your personal data to other recipients if it is necessary to perform the agreement with you or to fulfill the administrator’s obligations. This applies to the following groups of recipients:
- hosting companies on an entrusted basis
- comment system operators
- authorized employees and collaborators who use the data to achieve the purpose of the website
- companies providing marketing services to the administrator
- Your personal data will be processed by the administrator no longer than necessary to carry out related activities specified by separate regulations (e.g., on accounting). In relation to marketing data, the data will not be processed for more than 3 years.
- You have the right to request from the administrator:
- access to your personal data,
- its rectification,
- deletion,
- restriction of processing,
- and data portability.
- You have the right to object to the processing specified in point 3.3(c) regarding the processing of personal data for the purpose of legitimate interests pursued by the administrator, including profiling, provided that the objection right cannot be exercised if there are valid, legally justified grounds for processing that override your interests, rights, and freedoms, in particular establishing, pursuing, or defending claims.
- You have the right to lodge a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
- Providing personal data is voluntary, but necessary for the operation of the website.
- Automated decision-making, including profiling, may be carried out in relation to you for the purpose of providing services under the concluded agreement and for the administrator’s direct marketing.
- Personal data is not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.