Privacy policy

1. General Information

1. This policy applies to the Website operating at the URL: tuyapolska.pl
2. The Service Operator and Personal Data Administrator is: DSB Sp. z o. o., Wrocławska 112, 58-100 Świdnica, NIP: 8842818343.
3. Personal data are processed by the Operator in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR").
4. Operator's contact e-mail address: sklep@tuyapolska.pl
5. The Operator is the Administrator of your personal data with respect to the data provided voluntarily on the Website.
6. The Website uses personal data for the following purposes:
• Handling inquiries via the form
• Preparation, packaging, and shipping of goods
7. The Website collects information about users and their behavior in the following ways:
   1. Through data voluntarily entered in forms, which are entered into the Operator's systems.
   2. By saving cookies (so-called "cookies") on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and personal data entry locations are protected in the transmission layer (SSL certificate). Thanks to this, personal and login data entered on the website are encrypted on the user's computer and can only be read on the destination server.
2. Personal data stored in the database are encrypted in such a way that only the Operator holding the key can read them. Thanks to this, data are protected in case the database is stolen from the server.
3. User passwords are stored in hashed form. The hash function works one way - it is impossible to reverse its operation, which is currently the modern standard for storing user passwords.
4. Two-factor authentication is used on the Website, which constitutes an additional form of login protection to the Website.
5. The Operator periodically changes its administrative passwords.
6. To protect data, the Operator regularly performs security backups.
7. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

3. Hosting

1. The Website is hosted (technically maintained) on the operator's servers: another company
2. The hosting company keeps logs at the server level to ensure technical reliability. The following may be recorded:
   • resources specified by the URL identifier (addresses of requested resources – pages, files),
   • time of request arrival,
   • time of sending the response,
   • client station name – identification carried out by the HTTP protocol,
   • information about errors that occurred during the execution of HTTP transactions,
   • URL address of the page previously visited by the user (referer link) – if the transition to the Website occurred via a link,
   • information about the user's browser,
   • IP address information,
   • diagnostic information related to the process of self-ordering services through registrars on the website,
   • information related to handling e-mails addressed to the Operator and sent by the Operator.

4. Your Rights and Additional Information on How Data Is Used

1. In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations imposed on the Administrator. This applies to such groups of recipients:
   • couriers
   • postal operators
   • payment operators
2. Your personal data are processed by the Administrator no longer than necessary to perform the related activities specified in separate regulations (e.g. on accounting). With regard to marketing data, data will not be processed for longer than 3 years.
3. You have the right to request from the Administrator:
   • access to your personal data,
   • their rectification,
   • erasure,
   • restriction of processing,
   • and data portability.
4. You have the right to object to the processing specified in point 3.2 regarding the processing of personal data for the purpose of legitimate interests pursued by the Administrator, including profiling, provided that the right to object cannot be exercised if there are valid legitimate grounds for processing overriding your interests, rights and freedoms, in particular the establishment, exercise or defense of claims.
5. A complaint against the Administrator's actions may be submitted to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to operate the Website.
7. Automated decision-making, including profiling, may be undertaken in relation to you in order to provide services under the concluded contract and for direct marketing conducted by the Administrator.
8. Personal data are not transferred to third countries within the meaning of personal data protection regulations. This means that we do not send them outside the European Union.

5. Information in Forms

1. The Website collects information provided voluntarily by the user, including personal data, if provided.
2. The Website may save connection parameter information (timestamp, IP address).
3. The Website, in some cases, may save information that facilitates linking data in the form with the e-mail address of the user filling out the form. In this case, the user's e-mail address appears inside the URL address of the page containing the form.
4. Data provided in the form are processed for the purpose resulting from the function of a specific form, e.g., to handle a service request, commercial contact, service registration, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Administrator Logs

1. Information about user behavior on the website may be logged. This data is used to administer the website.

7. Essential Marketing Techniques

1. The Operator applies statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not provide personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user's end device. Regarding information on user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: [https://www.google.com/ads/preferences/](https://www.google.com/ads/preferences/)
2. The Operator uses remarketing techniques, allowing advertising messages to be tailored to the user's behavior on the site, which may give the illusion that the user's personal data is used to track them, but in practice, no personal data is transferred from the Operator to advertising operators. The technological condition for such activities is enabled cookie support.
3. The Operator uses a solution automating the operation of the Website in relation to users, e.g., which can send an email to the user after visiting a specific subpage, provided that they have agreed to receive commercial correspondence from the Operator.

8. Information About Cookies

1. The Website uses cookies.
2. Cookies are IT data, in particular text files, stored on the Website User's end device and intended for using the Website's pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.
3. The entity placing cookies on the Website User's end device and accessing them is the Website operator.
4. Cookies are used for the following purposes:
   1. maintaining the Website user's session (after logging in), thanks to which the user does not have to re-enter their login and password on every subpage of the Website;
   2. achieving the goals specified above in the "Essential Marketing Techniques" section;
5. The Website uses two basic types of cookies: "session" cookies and "persistent" cookies. Session cookies are temporary files stored on the User's end device until logging out, leaving the website, or turning off the software (web browser). Persistent cookies are stored on the User's end device for the time specified in the cookie parameters or until deleted by the User.
6. Web browsing software (web browser) usually allows the storage of cookies on the User's end device by default. Website Users can change settings in this regard. The web browser allows you to delete cookies. Automatic blocking of cookies is also possible. Detailed information on this subject can be found in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some functionalities available on the Website.
8. Cookies placed on the Website User's end device may also be used by entities cooperating with the Website operator, in particular companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Cookie Management – How to Give and Withdraw Consent in Practice?

1. If the user does not want to receive cookies, they can change browser settings. We reserve that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases impossible, to use website pages.
2. To manage cookie settings, select the web browser you are using from the list below and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone