Policy

1. General Information
This policy applies to the Website, operating at the address: www.pofadesign.com
The Operator of the Website and the Administrator of personal data is: Grzegorz Stryjczak POFA Design, Rembielińska 2/75, 03-343 Warsaw
The operator’s contact e-mail address is: info@pofadesign.com
The Operator is the Administrator of your personal data with respect to data voluntarily provided on the Website.
The Website uses personal data for the following purposes:

• Handling inquiries via a form

• Presenting an offer or information
  The Website performs functions of obtaining information about users and their behavior in the following way:

• Through data voluntarily entered in forms, which are entered into the Operator’s systems.

• By saving cookie files (so-called “cookies”) on end-user devices.

2. Selected data protection methods used by the Operator

• The places for entering personal data are protected in the transmission layer (SSL certificate). Thanks to this, personal data entered on the site are encrypted on the user’s computer and can only be read on the target server.

• The Operator periodically changes its administrative passwords.

• An important element of data protection is the regular updating of all software used by the Operator for personal data processing, which in particular means regular updates of programming components.

3. Hosting
The service is hosted (technically maintained) on the servers of the operator: cyberFolks.pl

4. Your rights and additional information on how data is used
In some situations, the Administrator has the right to transfer your personal data to other recipients, if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to the following groups of recipients:

• hosting company on a data processing agreement basis

• public authorities

• authorized employees and associates who use the data to achieve the purpose of the site’s operation

• companies providing marketing services for the Administrator
  Your personal data is processed by the Administrator for no longer than is necessary to perform the related activities specified in separate regulations (e.g., on accounting). With regard to marketing data, the data will not be processed for longer than 3 years.
  You have the right to request from the Administrator:

• access to your personal data,

• their rectification,

• erasure,

• restriction of processing,

• and data portability.
  You have the right to object to the processing indicated in point 3.3 c) regarding the processing of personal data for the purpose of legitimate interests pursued by the Administrator, including profiling; however, the right to object cannot be exercised if there are valid legitimate grounds for processing that override your interests, rights, and freedoms, in particular the establishment, exercise, or defense of legal claims.
  A complaint about the Administrator’s actions can be lodged with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  Providing personal data is voluntary, but necessary to use the Service.
  Automated decision-making, including profiling, may be undertaken in relation to you for the purpose of providing services under the concluded contract and for the purpose of direct marketing by the Administrator.
  Personal data is not transferred from third countries within the meaning of personal data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

• The Website collects information provided voluntarily by the user, including personal data, if provided.

• The Website may save information about connection parameters (timestamp, IP address).

• The Website, in some cases, may save information that makes it easier to link the data in the form with the e-mail address of the user filling out the form. In this case, the user’s e-mail address appears within the URL of the page containing the form.

• The data provided in the form is processed for the purpose resulting from the function of a specific form, e.g., to process a service request or business contact, register services, etc. In each case, the context and description of the form clearly inform what it is for.

6. Important marketing techniques
The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques, which allow for adjusting advertising messages to the user’s behavior on the website, which may give the impression that the user’s personal data is used for tracking, but in practice, no personal data is transferred from the Operator to advertising operators. The technological condition for such actions is enabled cookie support.
The Operator uses the Facebook pixel. This technology means that the Facebook service (Facebook Inc. based in the USA) knows that a person registered on it is using the Website. In this case, it is based on data for which it is the administrator itself; the Operator does not transfer any additional personal data to the Facebook service. The service is based on the use of cookies on the user’s end device.
The Operator uses a solution that examines user behavior by creating heat maps and recording behavior on the site. This information is anonymized before it is sent to the service operator so that they do not know which natural person it concerns. In particular, entered passwords and other personal data are not recorded.
The Operator uses a solution that automates the Website’s operation in relation to users, e.g., it can send an email to a user after visiting a specific subpage, provided that the user has consented to receiving commercial correspondence from the Operator.

7. Information about cookies
The Website uses cookie files, which are small text information stored on your computer, tablet, or smartphone. They are saved by the server on the computer of the person visiting the Website. The Administrator gains access to the information contained in them for statistical purposes and to ensure the proper functioning of the Website.
The Administrator processes cookies for the purpose of:

• customizing the information and appearance of the Website to individual preferences

• conducting anonymous statistics.
  Web browsers by default store “cookies” on the User’s end device. You can limit or disable the access of cookies in your browser settings. If you use this option, some functions may be limited or unavailable.
  The Administrator collects the IP addresses of visitors to the Website, which are useful when diagnosing technical problems with the server, creating statistical analyses, or verifying the location of the user, both real and web bots.
  Third-party cookies:
  The Administrator uses the services of third parties for statistics, improvement, and analysis of the Website. Third parties use cookies, and they are used by entities such as Google, Facebook, YouTube, Twitter, Instagram. Our Privacy Policy does not regulate the rules for using cookies by third parties.