0
GIFTYMOMENTY

Privacy policy

1. General information and Controller details

  1. This policy applies to the Website available at: https://giftymomenty.pl/
  2. The Website operator and Personal Data Controller is: Leoana Anna Piwońska, 16, 36-060 Wola Cicha, Podkarpackie, Poland. NIP: 8132637193, REGON: 180333727.
  3. Operator’s contact email address: anapiwonska@gmail.com
  4. Personal data on the Website are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the GDPR) and relevant national legislation.
  5. The Operator is the Controller of personal data you provide voluntarily on the Website.
  6. The Website uses and processes personal data for the following purposes:
    • fulfilling ordered services and sales contracts,
    • handling enquiries submitted through the contact form,
    • meeting legal obligations, including accounting and tax obligations,
    • sending newsletters and conducting marketing activities with the user’s prior consent.
  7. The Website collects information about users and their behaviour as follows:
    1. through data voluntarily entered in forms and submitted to the Operator’s systems,
    2. by storing cookies on users’ devices.

2. Selected data protection measures used by the Operator

  1. Login and personal data entry areas are protected during transmission by an SSL certificate. Personal data and login details entered on the Website are encrypted on the user’s computer and can only be read on the destination server.
  2. The Operator periodically changes administrative passwords.
  3. The Website uses two-factor authentication as an additional form of login protection.
  4. The Operator regularly creates backups to protect data.

3. Hosting

  1. The Website is hosted and technically maintained on the servers of: lh.pl
  2. The hosting company keeps server-level logs to ensure technical reliability. These may record:
    • resources identified by URL (addresses of requested pages and files),
    • the time a request arrives,
    • the time a response is sent,
    • the client station name identified through the HTTP protocol,
    • errors occurring during HTTP transactions,
    • the URL of the page previously visited by the user (referrer), when the Website is reached through a link,
    • information about the user’s browser,
    • IP address information,
    • diagnostic information relating to self-service ordering through registration tools on the Website,
    • information relating to emails sent to and by the Operator.

4. Your rights and additional information about data use

  1. In some circumstances, the Controller may pass your personal data to other recipients where necessary to perform a contract with you or meet the Controller’s obligations. These include:
    • courier companies and logistics operators,
    • electronic payment system operators,
    • the Controller’s accounting service,
    • providers of hosting and IT services for the Website.
  2. The Controller processes your personal data no longer than necessary to perform the relevant activities required by separate legislation, such as accounting rules. Marketing data will not be processed for longer than three years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You may object to the processing of personal data for the Controller’s legitimate interests, including profiling. This right does not apply where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, particularly the establishment, exercise or defence of legal claims.
  5. You may lodge a complaint about the Controller with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary to use Website services and fulfil orders.
  7. You may be subject to automated decision-making, including profiling, for the provision of services under a contract and for the Controller’s direct marketing.
  8. Personal data may be transferred to third countries outside the European Union within the meaning of data protection law, particularly when using services from companies such as Google or Facebook that provide appropriate safeguards, such as Standard Contractual Clauses.

5. Information submitted through forms

  1. The Website collects information voluntarily provided by users, including personal data where supplied.
  2. The Website may record connection information, including timestamps and IP addresses.
  3. In some cases, the Website may record information that links form data to the email address of the user completing it. In such cases, the user’s email address appears within the URL of the page containing the form.
  4. Data submitted through a form are processed for that form’s purpose, such as handling a service request or sales enquiry, or registering services. The context and description of each form clearly explain its purpose.

6. Controller logs

  1. Information about user behaviour on the Website may be logged. These data are used to administer the Website.

7. Key marketing techniques

  1. The Operator uses Google Analytics (Google Inc., based in the USA) to analyse Website traffic statistically. The Operator provides the service with anonymised information rather than personal data. The service uses cookies on the user’s device. Users can view and edit information about their preferences collected by Google’s advertising network using this tool: https://www.google.com/ads/preferences/

8. Information about cookies

  1. The Website uses cookies.
  2. Cookies are computer data, particularly text files, stored on a Website user’s device and intended for use with the Website. They usually contain the originating website’s name, their storage duration and a unique number.
  3. The Website Operator places cookies on the user’s device and accesses them.
  4. Cookies are used for:
    1. maintaining the user’s session after login, so the user does not need to re-enter their login and password on every page;
    2. the purposes described above under “Key marketing techniques”;
  5. The Website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the user’s device until they log out, leave the Website or close their browser. Persistent cookies remain for the duration specified in their parameters or until the user deletes them.
  6. Web browsers usually allow cookies to be stored on a user’s device by default. Users can change these settings. Browsers allow cookies to be deleted or blocked automatically. Detailed information is available in the browser’s help or documentation.
  7. Restricting cookies may affect some Website functions.
  8. Cookies placed on the user’s device may also be used by organisations working with the Website Operator, particularly Google (Google Inc., USA), Facebook (Facebook Inc., USA) and Twitter (Twitter Inc., USA).

9. Managing cookies — how to give and withdraw consent

  1. If you do not wish to receive cookies, you can change your browser settings. Disabling cookies required for authentication, security or remembering preferences may make using websites difficult or, in extreme cases, impossible.
  2. To manage cookie settings, choose your browser below and follow its instructions:

    Mobile devices: