1. General Information
1. This policy applies to the website functioning at the following URL: oen.com.pl
2. The operator of the website and the Data Controller is: OEN SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Logistyczna 11A, 62-080 Sady, Wielkopolskie, Poland
3. The operator’s contact e-mail address: mateusz.wieczorek@oen.com.pl
4. The Operator is the Controller of your personal data with respect to data voluntarily provided through the Website.
5. The Website uses personal data for the following purposes:
- Running a newsletter
- Handling enquiries via the contact form
- Provision of ordered services
- Presentation of offers or information
6. The Website collects information about users and their behaviour in the following ways:
a) Through data voluntarily entered into forms, which are then entered into the Operator’s systems
b) By storing cookies on end devices.
2. Selected Data Protection Methods Used by the Operator
1. Login areas and the entry of personal data are protected at the transmission layer (SSL certificate). As a result, personal data and login details entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This protects the data in case of theft of the database from the server.
3. User passwords are stored in hashed form. The hashing function is one-way – it is not possible to reverse it, which is currently a modern standard for storing user passwords.
4. The Operator periodically changes its administrative passwords.
5. In order to protect data, the Operator regularly makes security backups.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, in particular regular updates of software components.
3. Hosting
1. The Website is hosted (technically maintained) on the Operator’s servers: home.pl
2. For the purpose of technical reliability, the hosting company maintains server logs. Records may include:
- resources identified by a URL (addresses of requested resources – pages, files)
- time of request
- time of response
- client station name – identification carried out by the HTTP protocol
- information about errors that occurred during the HTTP transaction
- URL address of the previously visited page (referrer link) – if the user entered the Website via a hyperlink
- information about the user’s browser
- IP address information
- diagnostic information related to the process of ordering services via the Website
- information related to handling e-mail sent to and from the Operator.
4. Your Rights and Additional Information on Data Use
1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary for the performance of a contract concluded with you or to fulfil obligations imposed on the Controller. This applies to the following groups of recipients:
- the hosting company on the basis of an entrustment agreement
- operators of online chat solutions
- authorised employees and associates who use data in order to achieve the purpose of the Website
- companies providing marketing services for the Controller.
2. Your personal data is processed by the Controller no longer than is necessary to perform related activities defined by separate legal provisions (e.g. accounting regulations). With respect to marketing data, processing will not last longer than 3 years.
3. You have the right to request from the Controller:
- access to your personal data
- rectification of your data
- erasure of your data
- restriction of processing
- and data portability.
4. You have the right to object to processing referred to in point 3.2 in relation to the processing of personal data for the purposes of legitimate interests pursued by the Controller, including profiling. The right to object cannot be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO ul. Stawki 2, 00-193 Warsaw, Poland).
6. Providing personal data is voluntary, but necessary for the operation of the Website.
7. Automated decision-making, including profiling, may be carried out with respect to you in order to provide services under the concluded contract and for the Controller’s direct marketing.
8. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer it outside the European Union.
5. Information in Forms
1. The Website collects information provided voluntarily by the user, including personal data, if provided.
2. The Website may record information about connection parameters (time indication, IP address).
3. In certain cases, the Website may store information facilitating the linking of data in the form to the e-mail address of the user completing the form. In such cases, the user’s e-mail address appears within the URL of the page containing the form.
4. Data provided in forms is processed for the purpose arising from the specific function of the form, e.g. to handle a service request or business contact, registration of services, etc. Each time the context and description of the form clearly indicate its purpose.
6. Administrator Logs
1. Information about user behaviour on the Website may be logged. This data is used for website administration.
7. Important Marketing Techniques
1. The Operator uses statistical analysis of site traffic via Google Analytics (Google Inc., USA). The Operator does not transfer personal data to the provider of this service, only anonymised information. The service relies on cookies stored on the user’s device. Regarding user preference information collected by Google’s advertising network, the user may view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/
2. The Operator uses remarketing techniques to adjust advertising messages to the user’s behaviour on the site. This may give the impression that the user’s personal data is being tracked, but in practice no personal data is transferred from the Operator to advertising providers. The technical condition for such actions is the enabled handling of cookies.
3. The Operator uses the Facebook Pixel. This technology causes Facebook (Facebook Inc., USA) to know that a registered person is using the Website. It is based on data for which Facebook is itself the controller. The Operator does not transfer any additional personal data to Facebook. The service relies on cookies stored on the user’s device. The service relies on cookies stored on the user’s device.
4. The Operator uses solutions to analyse user behaviour by creating heat maps and recording behaviour on the Website. This information is anonymised before it is sent to the service provider, so that they do not know which natural person it concerns. In particular, passwords and other personal data are not recorded.
5. The Operator uses solutions automating the operation of the Website in relation to users, e.g. sending an e-mail to a user after visiting a specific subpage, provided that the user has consented to receiving commercial correspondence from the Operator.
8. Cookie Information
1. The Website uses cookies.
2. Cookies are IT data, in particular text files, stored on the Website User’s end device, intended for use on the Website. Cookies usually contain the name of the website which they originate from, the time of storage on the end device, and a unique number.
3. The entity placing cookies on the Website User’s end device and accessing them is the Website Operator.
4. Cookies are used for the following purposes:
a) maintaining the Website User’s session (after logging in), so that the user does not have to re-enter login and password on each subpage
b) implementing purposes set out above in the section “Important Marketing Techniques”.
5. The Website uses two basic types of cookies: “session cookies” and “persistent cookies”. Session cookies are temporary files stored on the User’s device until logging out, leaving the website, or closing the web browser. Persistent cookies are stored on the User’s device for the time specified in the cookie parameters or until deleted by the User.
6. Web browsers (internet browsers) usually allow cookies to be stored on the User’s device by default. Users of the Website may change these settings. The web browser allows cookies to be deleted. It is also possible to block cookies automatically. Detailed information on this can be found in the browser’s help or documentation.
7. Restrictions on the use of cookies may affect some of the functionalities available on the Website.
8. Cookies placed on the Website User’s end device may also be used by third-party entities cooperating with the Operator, in particular companies such as Google (Google Inc., USA), Facebook (Facebook Inc., USA), Twitter (Twitter Inc., USA).
9. Cookie Management – How to Give and Withdraw Consent in Practice?
1. If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, and user preference maintenance may hinder or, in extreme cases, prevent the use of websites.
2. To manage cookie settings, choose your web browser from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera
Mobile devices:
- Android
- Safari (iOS)
Windows Phone
This policy template was generated free of charge for informational purposes, based on our knowledge, industry practices and legal regulations applicable on 14 August 2018. We recommend verifying this template before using it on your website. The template is based on the most common situations on websites but may not fully or accurately reflect the specific nature of your website. Please read the generated document carefully and, if necessary, adapt it to your situation or seek legal advice. We do not accept responsibility for the consequences of using this document, as only you have influence over whether all the information contained herein is truthful. Please also note that a Privacy Policy, even the best, is only one element of your care for personal data and user privacy on your website.