1. General Information

This policy applies to the website operating under the URL: tatra-duvet.pl. The website operator and the Data Controller is: Zakład Pierzarski Wojciech Pyżyński, Lubomyśle 1, 62-561 Ślesin, NIP: 6651863372, Regon: 311095971. The operator's contact email address: biuro@pyzynski.pl. The operator is the Administrator of your personal data concerning the data voluntarily provided in the Service. The Service uses personal data for the following purposes: - Fulfillment of ordered services The Service collects information about users and their behavior in the following ways: - Through data voluntarily entered in forms, which are entered into the Operator's systems. - By storing cookies (so-called "cookies") on end devices.

2. Selected Data Protection Methods Used by the Operator

Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal and login data entered on the website are encrypted on the user's computer and can only be read on the target server. To protect data, the Operator regularly makes backups. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which includes regular updates of software components.

3. Hosting

The Service is hosted (technically maintained) on the servers of the operator: cyberFolks.pl. The hosting company maintains logs at the server level to ensure technical reliability. These logs may include: - Resources specified by URL identifier (addresses of requested resources – pages, files), - The time the request arrives, - The time the response is sent, - The name of the client station – identified by the HTTP protocol, - Information about errors that occurred during the execution of HTTP transactions, - The URL address of the page previously visited by the user (referrer link) – if the transition to the Service was via a link, - Information about the user's browser, - Information about the IP address, - Diagnostic information related to the process of self-ordering services through recorders on the site, - Information related to the handling of email correspondence addressed to and sent by the Operator.

4. Your Rights and Additional Information on Data Usage

In some situations, the Administrator has the right to transfer your personal data to other recipients, if necessary to fulfill the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to the following groups of recipients: - Couriers - Postal operators - Payment operators - Authorized employees and associates who use the data to achieve the purpose of the website's operation Your personal data processed by the Administrator are not stored longer than necessary to perform the related activities specified by separate regulations (e.g., accounting regulations). With respect to marketing data, the data will not be processed for more than 3 years. You have the right to request from the Administrator: - Access to personal data concerning you, - Rectification, - Deletion, - Limitation of processing, - Data portability. You have the right to object to the processing indicated in point 3.2 regarding the processing of personal data to perform legally justified interests pursued by the Administrator, including profiling, but the right of objection cannot be exercised in the case of legally justified grounds for processing, overriding your interests, rights, and freedoms, particularly the determination, pursuit, or defense of claims. Complaints about the Administrator's actions can be submitted to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw. Providing personal data is voluntary but necessary for the Service's operation. Automated decision-making, including profiling, may be applied to you to provide services under the concluded agreement and for the Administrator's direct marketing. Personal data are not transferred to third countries within the meaning of personal data protection regulations. This means we do not send them outside the European Union.

5. Information in Forms

The Service collects information provided voluntarily by the user, including personal data, if provided. The Service may save information about connection parameters (timestamp, IP address). The Service, in some cases, may save information facilitating the linking of data in the form with the user's email address filling out the form. In such a case, the user's email address appears inside the URL of the page containing the form. Data provided in the form are processed for the purpose resulting from the function of the specific form, e.g., for service request handling or commercial contact, service registration, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Administrator Logs

User behavior information in the service may be logged. These data are used to administer the service.

7. Important Marketing Techniques

The operator uses statistical traffic analysis on the site through Google Analytics (Google Inc., based in the USA). The operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user's end device. Within the scope of user preference information collected by Google's advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

8. Information About Cookies

The Service uses cookies. Cookies (so-called "cookies") are IT data, especially text files, which are stored on the user's end device and are intended for using the website's pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number. The entity placing cookies on the user's end device and accessing them is the Service operator. Cookies are used for the following purposes: - Maintaining the Service user's session (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the Service; - Achieving the objectives set out above in the "Important Marketing Techniques" section; The Service uses two basic types of cookies: "session" cookies and "persistent" cookies. "Session" cookies are temporary files stored on the user's end device until logging out, leaving the website, or turning off the software (web browser). "Persistent" cookies are stored on the user's end device for the time specified in the cookie parameters or until deleted by the user. Web browsing software (web browser) usually allows cookies to be stored on the user's end device by default. Service users can change settings in this regard. The web browser allows deleting cookies. It is also possible to automatically block cookies. Detailed information on this subject is provided in the help or documentation of the web browser. Restrictions on the use of cookies may affect some functionalities available on the Service's web pages. Cookies placed on the user's end device can also be used by entities cooperating with the Service operator, particularly Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

If the user does not want to receive cookies, they can change their browser settings. We reserve that disabling cookies necessary for authentication, security, maintaining user preferences processes may make it difficult, and in extreme cases may prevent the use of websites. To manage cookie settings, select the web browser you use from the list below and follow the instructions: - Edge - Internet Explorer - Chrome - Safari - Firefox - Opera

Mobile devices: - Android - Safari (iOS) - Windows Phone