Privacy policy

1. General Information

1. This policy applies to the website operating under the URL: smartkeeper.pl
2. The operator of the website and the Data Administrator is: Piotr Maciej Winniczuk, ul. WARSZAWSKA 162/— 32-086 WĘGRZCE MAŁOPOLSKIE
3. Contact email address of the operator: office@smartkeeper.pl
4. The operator is the Administrator of your personal data with respect to data voluntarily provided on the website.
5. The website uses personal data for the following purposes:
   • Handling inquiries via the form
   • Presenting an offer or information
6. The website performs user and behavior information acquisition in the following ways:
   1. Through data voluntarily entered into forms, which are entered into the operator’s systems.
   2. Through the storage of cookies (so-called “cookies”) on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the operator with the key can read it. This protects the data in case the database is stolen from the server.
3. User passwords are stored in a hashed form. The hashing function works one-way, meaning it cannot be reversed, which is currently the standard for storing user passwords.
4. The operator periodically changes its administrative passwords.
5. To protect data, the operator regularly makes backup copies.

3. Hosting

1. The website is hosted (technically maintained) on servers of the operator: hekko.pl
2. Registration data of the hosting company: cyber_Folks S.A., based in Poznań, Franklina Roosevelta 22, 60-829 Poznań, registered in the National Court Register by the District Court in Poznań – Nowe Miasto and Wilda in Poznań, 8th Commercial Division of the National Court Register under KRS No. 0000612359, REGON 364261632, NIP 7822622168, share capital of PLN 225,541 fully paid.
3. You can learn more about hosting and check the hosting company’s privacy policy at https://hekko.pl.
4. The hosting company:
   • applies measures to protect against data loss (e.g., disk arrays, regular backups),
   • applies adequate measures to protect processing locations against fire (e.g., special fire extinguishing systems),
   • applies adequate measures to protect processing systems against sudden power outages (e.g., dual power paths, generators, UPS systems),
   • applies physical security measures to protect access to processing locations (e.g., access control, monitoring),
   • ensures appropriate environmental conditions for servers as elements of the data processing system (e.g., environmental control, specialized air conditioning systems),
   • implements organizational solutions to ensure a high level of data protection and confidentiality (training, internal regulations, password policies, etc.),
   • has appointed a Data Protection Officer.
5. To ensure technical reliability, the hosting company maintains server-level logs. Logs may include:
   • resources identified by URL identifiers (addresses of requested resources – pages, files),
   • time of request arrival,
   • time of response,
   • client station name – identification realized by the HTTP protocol,
   • information about errors that occurred during the HTTP transaction,
   • URL address of the page previously visited by the user (referrer link) – if the transition to the website occurred via a link,
   • user browser information,
   • IP address information,
   • diagnostic information related to the process of self-ordering services via recorders on the website,
   • information related to handling email correspondence directed to and sent by the operator.

4. Your Rights and Additional Information About Data Usage

1. In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfill obligations imposed on the Administrator. This applies to the following groups of recipients:
   • hosting company on an entrustment basis
   • authorized employees and collaborators who use data to achieve the purpose of the website’s operation
   • companies providing marketing services to the Administrator
2. Your personal data processed by the Administrator will not be retained longer than necessary to perform the related activities specified by separate regulations (e.g., accounting rules). For marketing data, data will not be processed for more than 3 years.
3. You have the right to request from the Administrator:
   • access to your personal data,
   • correction of data,
   • deletion of data,
   • restriction of processing,
   • and data transfer.
4. You have the right to object to the processing specified in point 3.2 of personal data for the purpose of legitimate interests pursued by the Administrator, including profiling. The right to object cannot be exercised if there are valid legitimate grounds for processing overriding your interests, rights, and freedoms, particularly establishing, asserting, or defending claims.
5. You can lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary but necessary to use the website.
7. Automated decision-making, including profiling, may take place in relation to you to provide services under the concluded agreement and for direct marketing conducted by the Administrator.
8. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer them outside the European Union.

5. Information in Forms

1. The website collects information voluntarily provided by the user, including personal data, if provided.
2. The website may save information about connection parameters (time stamp, IP address).
3. The website may, in some cases, save information facilitating the association of data in the form with the user’s email address. In such cases, the user’s email address appears within the URL of the page containing the form.
4. Data provided in the form is processed for purposes resulting from the function of the specific form, e.g., to handle a service request.