HONOURABLE USER!

For the sake of your privacy and sense of security, we have prepared this Privacy Policy, in which we present the rules for the handling of personal data and the use of cookies and other technologies in connection with the use of our website.

The information in the Privacy Policy has been compiled in accordance with the guidelines of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter RODO) and the legal provisions governing the provision of electronic services.

CHAPTER 1 DEFINITIONS.

Administrator - Grzyb Tartak Sp. z o.o., Siedliska 24D, 23-460 Józefów, KRS: 0001030966, NIP: 9182183955, Regon: 525201930, tel. 791 900 885, e-mail: grzybtartak@gmail.com

Service - the website operating at the address:www.tartakgrzyb.pl

User - any Internet user visiting the Website.

CHAPTER 2 PERSONAL DATA.

1. Who is the controller of the Users' personal data?

The Administrator is the administrator of the User's personal data.

2. How do I contact the Administrator?

By email to: grzybtartak@gmail.com

3 How do we obtain data about Users and their behaviour?

1. By storing cookies (so-called "cookies") on end devices.

2. By saving logs at web server level.

4 For what purposes and on what basis do we use the data?

1. data stored in cookies.

a. Data processed for functional purposes:

• cookies used for the correct, technical operation of the Website,

• the legal basis of the processing is the necessity of the processing for the Administrator's legitimate interest - improving the structure and content of the Website.

b. Data processed for analytical purposes:

• cookies used to create statistics to help understand how Users use the Website,

• the legal basis of the processing is the necessity of the processing for the Administrator's legitimate interest - improving the structure and content of the Website.

2. data recorded in server logs.

a. The data recorded in the server logs are processed for technical purposes.

b. The legal basis for the processing is the necessity of the processing for the Administrator's legitimate interest - ensuring the correct operation of the Website.

5. Is the provision of data necessary and what are the possible consequences of not providing the data?

The provision of data is, in principle, voluntary; however, the failure to provide certain information may result in the impossibility of taking certain actions or achieving a certain purpose.

The provision of data that is not necessary for the Administrator takes place on the basis of a decision of the User himself, i.e. after he has given his consent to the processing of this data.

6 Data recipients.

(1) The Administrator informs that in connection with the Website it uses the services of partners, i.e. entities supporting its activities.

2. the Administrator's partners.

a. The entity that operates the server infrastructure and provides technical support for the Service.

b. Provider of statistical and analytical tools. For more information, please see the section "Cookies" below.

7 Transfers of data to third countries.

1 In connection with the Administrator's use of automated tools provided by the supplier Google, User data may be transferred to third countries, i.e. outside the European Economic Area, in particular to the United States of America (USA).

(2) The Tool Provider shall guarantee an adequate level of data protection by using appropriate safeguards, in particular by applying the standard data protection clauses adopted by the European Commission as referred to in Article 46(2)(c) of the RODO.

8. For how long do we process personal data?

1 With regard to cookies, until they are deleted by the user from the browser or until they expire, which shall be for a period of no more than 12 months.

2. in terms of server logs for 2 months.

9. What rights does the user have?

1 Right of access to personal data: You have the right to request access to your personal data processed by the Administrator.

2 Right to rectification: the User has the right to request the Administrator to rectify, complete or update the personal data concerning him/her without delay.

3 Right to erasure ("right to be forgotten"): the User has the right - provided there are circumstances provided for by law - to request the Administrator to erase personal data concerning him/her. Depending on the situation: The Administrator shall carry out the deletion without delay or refuse to do so if there are legal grounds for further processing of the User's data and these are overridden by the User's interests.

4 Right to restrict processing: You have the right to restrict the processing of your data. Processing may be restricted to fulfil only specific purposes.

5 Right to data portability: you have the right to receive your personal data in a commonly used machine-readable format and have the right to send this data to another party.

6 Right to object: the User has the right to object to the processing of his/her personal data based on the legitimate interests of the Administrator. In this case, the Administrator must cease processing the User's personal data unless the User demonstrates that there are valid, legitimate grounds for the processing which override the User's interests, rights and freedoms or grounds for establishing, asserting or defending claims.

7 Right to withdraw consent: A user whose data is processed by the Administrator on the basis of an expressed consent has the right to withdraw it at any time, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.

8 Right to lodge a complaint with a supervisory authority: A user whose data is processed by the Administrator has the right to lodge a complaint with a supervisory authority. In Poland, within the meaning of the RODO, the supervisory authority is the President of the Office for Personal Data Protection.

10. profiling.

(1) The Administrator informs that it does not profile Users on the Website, on the basis of which decisions could be made that produce legal effects towards Users or affect them in a similarly significant manner.

11. data security.

(1) Data will not be communicated to other third parties, except that the Administrator may be obliged to provide information collected by the Service to authorised public authorities on the basis of lawful requests.

(2) The controller shall ensure the confidentiality and protection of the personal data provided to it.

a. Collects personal data with due care and protects it from unauthorised access.

b. It shall implement appropriate technical and organisational measures to ensure adequate protection of personal data, including the use of an encrypted connection via an SSL certificate.

(3) The Administrator shall take all necessary measures to ensure that also its partners and all cooperating entities guarantee the application of appropriate security measures when processing the Administrator's data.

CHAPTER 3 COOKIES

1 What are cookies?

(1) Cookies are short texts sent from the website you are visiting to your browser. They usually contain the name of the originating website, the storage time and a unique number.

2 The website uses cookies.

(3) Cookies are stored on the User's terminal device (e.g. computer, tablet, smartphone) to remember the visit to the Website. This makes the Service easier and more pleasant to use on subsequent visits.

4 Cookies do not alter the settings of the user's device.

2 For what purposes do we access the information contained in cookies?

For functional purposes - to collect information showing how Users use the Website. This type of files helps, among other things, to remember User preferences, making it easier to use the Website on a subsequent visit.

2. for analytical purposes - to create statistics on traffic on the Website and to check the sources of this traffic. This type of file makes it possible, among other things, to obtain information on navigation paths and the popularity of individual tabs.

3 On what basis do we use cookies?

(1) The Administrator uses cookies on the basis of the User's consent, except when cookies are necessary for the proper, technical operation of the Website.

(2) Cookies that are not necessary for the proper functioning of the Website remain blocked until the User gives his/her consent. Individual settings are made during the first visit to the Website by means of a message with check boxes.

4 Access to data from cookies.

(1) Cookies can be read by the Administrator's website (own cookies) or its partners' websites (third-party cookies).

(2) Custom cookies - are used for the purposes of the Administrator. They serve to optimise the User's experience when using the Website.

Cookies of partners (third parties) - The Administrator uses external tools to support the functioning of the Website. For this reason, cookies may also be read by the tool provider Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter Google). Google tools used by the Administrator include the Google Analytics code, which uses Google files as part of the Google Analytics service and is used to analyse traffic on the Website. The tools collect such information as the type of devices and browsers used by the Users to visit the Website, the subpages displayed, the time spent on the Website, the source of access to the Website, as well as geographic and demographic data (approximate location, age range, gender, interests determined on the basis of the User's activity on the Website). It is possible for the User to block Google Analytics tools by installing a browser add-on provided by Google on the website:https://tools.google.com/dlpage/gaoptout?hl=pl

(4) The Administrator informs that as a result of the use of automatic tools, it obtains only data of an aggregate and anonymous nature. They do not contain any identifying characteristics of visitors to the Website. The Administrator receives statistical analyses on the basis of which it optimises the Website. However, the use of external tools means that the User's browser also records cookies from the tool provider. The Administrator has no influence on the scope and use of this data - the provider becomes an independent data controller. Information on Google's privacy policy is available at:https://policies.google.com/privacy?hl=pl

5. manage, block and delete cookies.

1 The User individually determines the use of cookies by managing the consents given within the privacy settings of the Website.

(2) You may change your use of cookies at any time, including blocking or deleting those from the Website or other sites. To achieve this, you must change your privacy settings on the Website or in the web browser you use.

(3) As part of the management of cookies, the Service User can make changes to their browser settings. Examples of the possibilities below.

a. The user may block the automatic handling of cookies or be informed whenever they are placed on the device.

b. The user may block the cookies of partners (third parties) while accepting the cookies used exclusively by the Administrator.

4 The way in which cookies are managed varies depending on the type of Internet browser. You can generally find detailed information on how to manage cookies in the "Help" section of your chosen web browser.

(5) The Administrator informs that disabling or restricting the use of cookies may prevent you from using some of the functions available on the Website.

6 How long do we keep cookies?

(1) In terms of storage time, the cookies used on the Website can be divided into two types.

a. Session cookies - deleted when the browser session ends, i.e. when the browser is closed.

b. Persistent cookies - stored on the User's terminal equipment and enabling recognition of the User's browser on subsequent access to the Website. The maximum time that cookies are stored on a User's device is 12 months.

(2) The duration of storage of cookies by partners (third parties) is specified in the materials they provide, including their privacy policies. For example, more information on the storage periods for cookies by Google is available here:https://policies.google.com/technologies/cookies#how-google-uses-cookies

CHAPTER 4. SERVER LOGS.

(1) Independently of cookies, the Website automatically records information transmitted by web browsers (server logs) on its server with each visit by a User.

2. the extent of information recorded in the form of server logs.

a. User's IP address.

b. Information about the Internet browser and the operating system the User is using.

c. The URL of a website previously visited by the User, if the Website was accessed via a link.

d. Amount of data transferred.

e. Date and time of access.

3. description of the information in the server logs.

a. They are of an aggregate and anonymous nature, i.e. they are not associated with specific persons browsing the resources of the Website and are not used to identify Users.

b. They are saved and stored on the server.

c. They are used solely for the purpose of managing the server, i.e. diagnosing any problems related to the operation of the server and generating statistics useful for the effective administration of the Website.

CHAPTER 5 FINAL PROVISIONS.

The Administrator reserves the right to amend this Privacy Policy. Changes may be justified e.g. by the development of the Website's functionality, technological progress or changes in the relevant legislation.

2 If you have any questions or opinions about the Administrator's privacy policy, please send them to the following e-mail address:grzybtartak@gmail.com