Privacy policy

The Privacy Policy describes the principles for processing information about you, including personal data.

1. General information

1. This policy applies to the website operating at the following URL: https://www.polsonic.com
2. The website operator and the Personal Data Controller is: Polsonic Palczyński Spółka Jawna, ul. Gidzińskiego 1B, 02-293 Warsaw, Poland, NIP: 5210090087
3. The operator’s contact email address is:
4. The Operator is the Controller of your personal data with respect to data provided voluntarily on the Website.
5. The Website uses personal data for the following purposes:
• Handling inquiries submitted via forms
• Presentation of offers or information
6. The Website collects information about users and their behavior in the following ways:
• Through data voluntarily entered in forms, which is then entered into the Operator’s systems
• By saving cookies on end-user devices (so-called “cookies”)

2. Selected data protection methods used by the Operator

1. Places where personal data is entered and login areas are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the website are encrypted on the user’s device and can only be read on the target server.
2. User passwords are stored in hashed form. The hashing function works in a one-way manner, meaning it is not possible to reverse it, which is currently a standard practice for storing user passwords.
3. The Operator periodically changes its administrative passwords.
4. To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers, and special characters, with a minimum length of 8 characters.
5. The Website uses two-factor authentication, which provides an additional layer of protection for logging into the Website.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.
7. To protect data, the Operator regularly performs backups.

3. Hosting

1. The Website is hosted (technically maintained) on the servers of: cyberFolks.pl
2. The hosting company, in order to ensure technical reliability, keeps server-level logs. The following data may be recorded:
• resources identified by URL (addresses of requested resources – pages, files),
• time of request arrival,
• time of response dispatch,
• client workstation name – identification via the HTTP protocol,
• information about errors that occurred during HTTP transaction processing,
• URL of the previously visited page (referer link) – if the Website was accessed via a link,
• information about the user’s browser,
• information about the IP address,
• diagnostic information related to the process of self-ordering services via website forms,
• information related to the handling of email correspondence sent to and from the Operator.

4. Your rights and additional information on how data is used

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfill obligations incumbent upon the Administrator. This applies to the following groups of recipients:
• hosting company – on the basis of a data processing agreement
• authorized employees and collaborators who use the data to achieve the purpose of the website’s operation
• companies providing marketing services to the Administrator
2. Your personal data is processed by the Administrator no longer than necessary to perform activities related to it, as specified by separate regulations (e.g. accounting regulations). With regard to marketing data, the data will not be processed for longer than 3 years.
3. You have the right to request from the Administrator:
• access to your personal data,
• rectification of your data,
• erasure of your data,
• restriction of processing,
• data portability.
4. You have the right to object to processing referred to in point 3.3 c) with regard to the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling. The right to object may not be exercised if there are valid legally justified grounds for processing that override your interests, rights, and freedoms, in particular for the establishment, exercise, or defense of legal claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.
6. Providing personal data is voluntary, but necessary for the operation of the Website.
7. Automated decision-making, including profiling, may be carried out with respect to you for the purpose of providing services under a concluded contract and for the purpose of the Administrator’s direct marketing.
8. Personal data is transferred to third countries within the meaning of data protection regulations. This means that we transfer it outside the European Union.

5. Information in forms

1. The Website collects information voluntarily provided by the user, including personal data, if such data is provided.
2. The Website may store information about connection parameters (timestamp, IP address).
3. In some cases, the Website may store information facilitating the linking of data entered in a form with the email address of the user completing the form. In such cases, the user’s email address appears within the URL of the page containing the form.
4. Data provided in forms is processed for the purpose resulting from the function of a given form, e.g. for handling a service request, commercial contact, service registration, etc. Each time, the context and description of the form clearly indicate its purpose.

6. Administrator logs

1. Information about users’ behavior on the Website may be logged. This data is used for administering the Website.

7. Important marketing techniques

1. The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc., headquartered in the USA). The Operator does not transfer personal data to the service provider, only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, users can view and edit information resulting from cookies using the tool available at: https://www.google.com/ads/preferences/
2. The Operator uses solutions that analyze user behavior by creating heat maps and recording behavior on the website. This information is anonymized before being sent to the service provider, so that it cannot be linked to a specific natural person. In particular, entered passwords and other personal data are not recorded.