This policy applies to the website operating at: avograna.com
The operator of the website and the Administrator of personal data is: AVOGRANA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Jana Heweliusza 23, 62-020 Zalasewo, Poland.
Operator's contact email address: mwilinski@avograna.com
The Operator is the Administrator of your personal data with respect to data provided voluntarily on the Website.
The Website uses personal data for the following purposes:
The Website collects information about users and their behaviour in the following ways:
Login pages and data entry areas are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the Website are encrypted on the user's device and can only be read by the target server.
Personal data stored in the database is encrypted so that only the Operator, who holds the encryption key, can access it. This protects data in the event of a database breach.
The Operator performs regular data backups as part of its data protection measures.
A key element of data protection is the regular updating of all software used by the Operator to process personal data, including regular updates of software components.
The Website is hosted (technically maintained) on servers provided by a third-party hosting company.
To ensure technical reliability, the hosting provider maintains server-level logs. The following data may be recorded:
In certain situations, the Administrator may transfer your personal data to third parties where this is necessary to perform a contract concluded with you or to fulfil the Administrator's legal obligations. This applies to the following categories of recipients:
Your personal data will not be processed by the Administrator for longer than is necessary to carry out the activities associated with it, as defined by applicable regulations (e.g. accounting laws). In relation to marketing data, data will not be processed for longer than 3 years.
You have the right to request from the Administrator:
You have the right to object to the processing referred to in section 3.2, where personal data is processed on the basis of the Administrator's legitimate interests, including profiling. This right may not apply where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular for the establishment, exercise or defence of legal claims.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Providing personal data is voluntary, but necessary for the Website to function properly.
Automated decision-making, including profiling, may be applied to you for the purpose of delivering services under a concluded contract and for the Administrator's direct marketing activities.
Personal data may be transferred to third countries within the meaning of data protection regulations, meaning it may be transferred outside the European Union.
The Website collects information voluntarily provided by the user, including personal data where submitted.
The Website may record connection parameters (timestamp, IP address).
In some cases, the Website may save information that helps associate form data with the email address of the user completing the form. In such cases, the user's email address may appear within the URL of the page containing the form.
Data submitted via forms is processed for the purpose arising from the function of a given form — for example, to handle a service request or a commercial enquiry, or to register for services. The context and description of each form clearly indicates its purpose.
Information about user behaviour on the Website may be logged. This data is used for website administration purposes.
The Operator uses statistical traffic analysis via Google Analytics (Google Inc., USA). The Operator does not transmit personal data to this service provider — only anonymised information. The service operates using cookies stored on the user's end device. Users can view and edit cookie-based preference data collected by Google's advertising network at: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques to tailor advertising messages to user behaviour on the Website. While this may appear to involve tracking using personal data, no personal data is transferred from the Operator to advertising providers. This functionality requires cookies to be enabled.
The Operator uses the Facebook Pixel. This technology allows Facebook (Facebook Inc., USA) to recognise that a registered Facebook user has visited the Website. It is based on data for which Facebook itself acts as administrator — the Operator does not transfer any additional personal data to Facebook. The service operates using cookies stored on the user's end device.
The Operator uses a solution that analyses user behaviour through heatmaps and session recordings. This information is anonymised before being sent to the service provider, so the provider cannot identify the individual concerned. In particular, passwords and other personal data entered by users are not recorded.
The Operator uses automation tools that may, for example, send an email to a user after they visit a specific page, provided the user has consented to receiving commercial communications from the Operator.
The Operator may use profiling within the meaning of data protection regulations.
The Website uses cookies.
Cookies are pieces of data, in particular text files, stored on the user's end device and intended for use with websites. Cookies typically contain the name of the website they originate from, their storage duration on the end device, and a unique identifier.
The entity placing cookies on the user's end device and accessing them is the Website Operator.
Cookies are used for the following purposes:
The Website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the user's end device until they log out, leave the website, or close their browser. Persistent cookies are stored on the user's end device for the period specified in the cookie parameters, or until deleted by the user.
Web browsers typically allow cookies to be stored on the user's end device by default. Users may change these settings at any time. Browsers also allow cookies to be deleted or automatically blocked. For details, refer to your browser's help documentation.
Restricting cookies may affect certain features available on the Website.
Cookies placed on the user's end device may also be used by the Operator's partners, in particular: Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).
If you do not wish to receive cookies, you may change your browser settings. Please note that disabling cookies required for authentication, security, or user preference functions may limit or, in extreme cases, prevent the use of the Website.