Privacy Policy

General Information

• This policy applies to the Website operating at the following URL: https://eljotfirma.pl.
• The Website Operator and the Personal Data Controller is: Firma „ELJOT” Jacek Leśnik, Goranin 15, 62-561 Ślesin, NIP: 665 001 10 96, REGON: 31 019 01 60.
• The operator’s contact e-mail address is: kontakt@eljotfirma.pl.
• The Operator is the Controller of your personal data provided voluntarily through the Website.
• The Website uses personal data for the following purposes:
  • Conducting online chat conversations.
  • Handling inquiries via the contact form.
  • Presenting offers or information.
• The Website collects information about users and their behavior in the following ways:
  • Through data voluntarily entered in forms, which are subsequently entered into the Operator’s systems.
  • By saving cookie files (so-called “cookies”) on end-user devices.

Selected Data Protection Methods Used by the Operator

• Places for logging in and entering personal data are protected in the transmission layer (SSL certificate).
• As a result, personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the target server.
• User passwords are stored in a hashed form. The hashing function is one-way – it is impossible to reverse it, which is a modern standard for storing user passwords.
• The Operator periodically changes its administrative passwords.
• To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers, and special characters, at least 8 characters long.
• A critical element of data protection is the regular update of all software used by the Operator for personal data processing, specifically including regular updates of programming components.
• The Operator regularly performs backup copies to protect the data.

Hosting

• The Website is hosted (technically maintained) on the operator’s server: lh.pl.
• To ensure technical reliability, the hosting company maintains server-level logs, which may record:
  • Resources identified by the URL (addresses of requested resources – pages, files).
  • Time of the incoming query.
  • Time of sending the response.
  • Client station name – identification via the HTTP protocol.
  • Information about errors that occurred during the HTTP transaction.
  • The URL of the previously visited page (referrer link) – if the Website was accessed via a link.
  • Information about the user’s browser.
  • Information about the IP address.
  • Diagnostic information related to the process of self-ordering services through registrars on the site.
  • Information related to handling e-mails directed to and sent by the Operator.

Your Rights and Additional Information on Data Use

• In certain situations, the Controller has the right to transfer your personal data to other recipients if necessary to perform a contract with you or to fulfill the Controller’s obligations.
• This applies to the following recipient groups:
  • The hosting company (on the basis of data processing entrustment).
  • Authorized employees and associates who use the data to fulfill the purpose of the website.
  • Online chat solution operators.
  • Companies providing marketing services to the Controller.
• Personal data is processed by the Controller for no longer than necessary to perform the activities specified in separate regulations (e.g., accounting).
• Marketing data will not be processed for longer than 3 years.
• You have the right to request from the Controller:
  • Access to your personal data.
  • Rectification of data.
  • Erasure of data.
  • Restriction of processing.
  • Data portability.
• You have the right to object to processing for the purpose of the Controller’s legitimate interests, including profiling; however, the right to object cannot be exercised if there are valid, legally justified grounds for processing that override your interests, rights, and freedoms, particularly for establishing, investigating, or defending claims.
• A complaint against the Controller’s actions may be lodged with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.
• Providing personal data is voluntary but necessary for the operation of the Website.
• Automated decision-making, including profiling, may be undertaken to provide services under the concluded contract and for direct marketing by the Controller.
• Personal data is transferred to third countries as defined by data protection regulations, meaning they are sent outside the European Union.

Information in Forms

• The Website collects information provided voluntarily by the user, including personal data if provided.
• The Website may record connection parameter information (timestamp, IP address).
• In some cases, the Website may store information to help link the data in the form with the e-mail address of the user completing the form; in such cases, the user’s e-mail address appears within the URL of the page containing the form.
• Data provided in the form is processed for purposes resulting from the function of the specific form (e.g., service request, sales contact, service registration).

Administrator Logs

• Information regarding user behavior on the website may be logged; this data is used for website administration purposes.

Essential Marketing Techniques

• The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc., USA).
• The Operator does not transfer personal data to this service provider, only anonymized information.
• The service is based on cookies stored on the user’s end device.
• The Operator uses the Facebook Pixel. This technology informs Facebook (Facebook Inc., USA) that a registered user is using the Website.
• Facebook acts as a separate controller for this data; the Operator does not transfer additional personal data to Facebook.

Information About Cookies

• The Website uses cookies, which are IT data, specifically text files, stored on the User’s end device.
• Cookies are used to maintain the user’s session (after logging in) and for marketing purposes.
• Two main types of cookies are used: “session” (temporary) and “persistent” (stored for a specified time or until deleted).
• Web browsers usually allow cookie storage by default, but users can change these settings or delete cookies.
• Restricting cookies may affect some Website functionalities.
• Cookies may also be used by entities cooperating with the Operator, such as Google, Facebook, and Twitter.

Cookie Management – How to Give and Withdraw Consent in Practice?

• Users who do not wish to receive cookies can change their browser settings.
• Disabling cookies necessary for authentication, security, or preferences may make using the website difficult or impossible.