Privacy policy

1. General Information

1. This policy applies to the website operating at the URL: azap.pl
2. The website operator and personal data administrator is: P.P.H.U AZAP, Cementowa 2, 26-052 Nowiny
3. Contact email address of the operator: azap@azap.pl
4. The Operator is the Administrator of your personal data with regard to data provided voluntarily on the Website.
5. The Website uses personal data for the following purposes:
   • Conducting online chat conversations
   • Handling inquiries through the form
   • Providing ordered services
   • Debt collection
   • Presenting offers or information
6. The Website collects information about users and their behavior in the following ways:
   1. Through data voluntarily entered in forms, which are entered into the Operator’s systems.
   2. By saving cookie files (“cookies”) on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the Operator with the encryption key can read it. This protects the data in case the database is stolen from the server.
3. User passwords are stored in a hashed form. The hashing function works one-way – it cannot be reversed, which is a modern standard for storing user passwords.
4. The Operator periodically changes its administrative passwords.
5. To protect data, the Operator regularly creates backup copies.
6. An essential element of data protection is the regular updating of all software used by the Operator to process personal data, particularly programming components.

3. Hosting

1. The Website is hosted (technically maintained) on the servers of the operator: cyberFolks.pl
2. To ensure technical reliability, the hosting company keeps server logs. These logs may include:
   • Resources identified by URLs (addresses of requested resources – pages, files),
   • Time of the request,
   • Time of the response,
   • Name of the client’s station – identification via the HTTP protocol,
   • Information about errors that occurred during the execution of the HTTP transaction,
   • URL of the previously visited page (referrer link) – if the Website was accessed through a link,
   • Information about the user’s browser,
   • IP address information,
   • Diagnostic information related to the self-ordering process via forms on the site,
   • Information related to email correspondence directed to and sent by the Operator.

4. Your Rights and Additional Information on Data Usage

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the agreement concluded with you or to fulfill the Administrator’s obligations. This applies to the following groups of recipients:
   • Hosting company on an outsourcing basis
   • Couriers
   • Postal operators
   • Insurers
   • Law firms and debt collectors
   • Banks
   • Online chat service providers
   • Companies providing marketing services to the Administrator
2. Your personal data is processed by the Administrator for no longer than necessary to perform the related activities defined by separate regulations (e.g., accounting). For marketing data, the data will not be processed for more than 3 years.
3. You have the right to request from the Administrator:
   • Access to your personal data,
   • Correction of data,
   • Deletion of data,
   • Restriction of processing,
   • And data portability.
4. You have the right to object to the processing specified in point 3.2 regarding the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling. The right to object cannot be exercised if there are legally justified grounds for processing that override your interests, rights, and freedoms, particularly for establishing, pursuing, or defending claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary but necessary to use the Website.
7. You may be subject to automated decision-making, including profiling, to provide services under the concluded agreement and for direct marketing conducted by the Administrator.
8. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.

5. Information in Forms

1. The Website collects information voluntarily provided by the user, including personal data, if provided.
2. The Website may save information about connection parameters (timestamp, IP address).
3. In some cases, the Website may save information that makes it easier to link form data with the user’s email address filling out the form. In such cases, the user’s email address appears within the URL of the page containing the form.
4. Data provided in the form is processed for the purpose resulting from the function of a specific form, e.g., to handle a service request or business contact, service registration, etc. Each time, the context and description of the form clearly inform the user about its purpose.

6. Administrator Logs

1. User behavior information on the Website may be logged. This data is used to administer the site.

7. Important Marketing Techniques

1. The Operator uses statistical traffic analysis through Google Analytics (Google Inc. based in the USA). The Operator does not provide personal data to this service, only anonymized information. The service uses cookies stored on the user’s device. Users can view and edit their preferences related to cookies collected by Google Ads at: https://www.google.com/ads/preferences/
2. The Operator uses remarketing techniques to tailor advertising messages to the user’s behavior on the site. Although this may create the impression of tracking personal data, no personal data is transferred from the Operator to advertising operators. The technical condition for such actions is the enabled handling of cookies.
3. The Operator uses the Facebook Pixel. This technology means that Facebook (Facebook Inc., USA) knows that a registered user is using the Website. In this case, it is based on data for which Facebook is the administrator, and the Operator does not provide additional personal data. This service uses cookies stored on the user’s device.
4. The Operator uses tools to study user behavior by creating heatmaps and recording behavior on the Website. This information is anonymized before being sent to the service operator so that they cannot identify the person. Passwords and other personal data are not recorded.