Privacy Policy

This privacy policy sets out the principles of processing information about you, including personal data and cookies, i.e., so-called cookies.

1. General Information This policy applies to the Website, operating under the URL: palacbaranowice.zory.pl The operator of the website and the Data Controller is: Zespół Parkowo-Pałacowy in Żory-Baranowice, ul. Zamkowa 97, 44-240 Żory The operator’s email contact address: web@pifpafdesign.pl The operator is the Administrator of your personal data in relation to data voluntarily provided in the Service. The website uses personal data for the following purposes:

   • Presentation of the offer or information The website acquires information about users and their behavior in the following way:
   • Through data voluntarily entered in forms, which are entered into the Operator’s systems.
   • By storing cookie files (so-called “cookies”) on end-users’ devices.

2. Selected Data Protection Methods Used by the Operator Login and personal data entry areas are protected in the transmission layer (SSL certificate). This encrypts personal data and login data entered on the website on the user’s computer and can only be read on the target server. User passwords are stored in a hashed form. The hashing function works in one direction – it is not possible to reverse its operation, which is currently a modern standard in the field of storing user passwords. The operator periodically changes its administrative passwords.

3. Hosting The service is hosted (technically maintained) on the operator’s servers: cyberFolks.pl To ensure technical reliability, the hosting company keeps logs at the server level. These may include:

   • resources identified by URL (addresses of requested resources – pages, files),
   • time of request arrival,
   • time of sending the response,
   • client station name – identification performed by the HTTP protocol,
   • information about errors that occurred during the HTTP transaction,
   • URL address of the page previously visited by the user (referer link) – if the Service was accessed via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information related to the self-ordering process through recorders on the page,
   • information related to the handling of emails sent to and by the Operator.

4. Your Rights and Additional Information on How Data Is Used In certain situations, the Administrator has the right to transfer your personal data to other recipients, if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to such groups of recipients:

   • hosting company on the basis of entrustment,
   • authorized employees and associates, who use the data to achieve the purpose of the website. Your personal data processed by the Administrator will not be processed longer than is necessary to carry out the related activities specified by separate regulations (e.g., on accounting). Regarding marketing data, the data will not be processed for more than 3 years. You have the right to request from the Administrator:
   • access to personal data concerning you,
   • their rectification,
   • deletion,
   • processing restriction,
   • and data portability. You have the right to object in terms of the processing indicated in point 3.2 to the processing of personal data in order to carry out the legally justified interests pursued by the Administrator, including profiling, provided that the right of objection will not be able to be exercised if there are valid legally justified grounds for processing, overriding your interests, rights and freedoms, in particular for establishing, pursuing or defending claims. Complaints to the Administrator’s actions can be filed to the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw. Providing personal data is voluntary, but necessary for the Service’s operation. Activities consisting of automated decision-making, including profiling, for the provision of services within the concluded contract, and for conducting direct marketing by the Administrator, may be undertaken in relation to you. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.

5. Information in Forms The Service collects information voluntarily provided by the user, including personal data, if they are provided. The Service may save information about connection parameters (time marking, IP address). In some cases, the Service may save information facilitating the linking of data in the form with the user’s email address filling out the form. In this case, the user’s email address appears inside the url of the page containing the form. Data provided in the form are processed for the function of the specific form, e.g., to process a service request or business contact, service registration, etc. Each time the context and description of the form in a readable way informs what it is used for.

6. Administrator Logs Information on users’ behavior in the service may be logged. This data is used to administer the site.

7. Essential Marketing Techniques The operator employs statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not transfer personal data to the service operator, only anonymized information. The service is based on the use of cookies in the user’s end device. In terms of information about the user’s preferences gathered by the Google advertising network, the user can view and edit the information derived from cookies using the tool: https://www.google.com/ads/preferences/

8. Information on Cookies The service uses cookies. Cookies (so-called “cookies”) are IT data, in particular text files, that are stored in the Service User’s end device and are intended for use with the Service’s websites. Cookies usually contain the name of the website from which they originate, the duration of their storage on the end device, and a unique number. The entity placing cookies on the Service User’s end device and accessing them is the service operator. Cookies are used for the following purposes:

   • maintaining a session of the Service user (after logging in), so the user does not have to re-enter their login and password on every subpage of the Service;
   • achieving the goals outlined above in the “Essential Marketing Techniques” section. The Service uses two basic types of cookies: “session” (session cookies) and “permanent” (persistent cookies). “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser). “Permanent” cookies are stored on the User’s end device for the time specified in the cookies’ parameters or until they are deleted by the User. Web browsing software (web browser) usually allows by default for storing cookies on the User’s end device. Service Users can make changes to these settings. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject is provided in the help or documentation of the web browser. Restrictions on the use of cookies may affect some of the functionalities available on the website of the Service. Cookies placed in the Service User’s end device may also be used by entities cooperating with the Service operator, in particular this applies to the companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice? If the user does not wish to receive cookies, they may change their browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may hinder, and in extreme cases, prevent the use of www sites. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera
   • Mobile devices:
     • Android
     • Safari (iOS)
     • Windows Phone This sample policy was generated for free, for informational purposes, based on our knowledge, industry practices, and legal regulations in force as of 2018-08-14. We recommend checking the policy sample before using it on your site. The sample is based on the most common situations on websites, but may not reflect the full and precise specifics of your website. Read the generated document carefully and adjust it to your situation or seek legal advice if necessary. We do not take responsibility for the consequences of using this document, as only you have influence on whether all the information contained in it is true. Also, note that the Privacy Policy, even the best one, is only one element of your care for personal data and user privacy on the website.