HIBERUS POLAND Privacy Policy

1. General information

This policy applies to the E-mail Website operating at the url address: hiberus.pl
The Website Operator and the Personal Data Controller is: Hiberus Poland Sp. z o.o. Plac Teatralny 1/22, 50-051 Wrocław, Poland.
Operator’s e-mail contact address: biuro@hiberus.pl
The Operator is the Controller of your personal data in relation to the data provided voluntarily on the Website.
The Website uses personal data for the following purposes:
- Running a newsletter
- Online chat
- Handling inquiries via the form
- Implementation of the ordered services
- Presentation of the offer or information about the company
The website performs the functions of obtaining information about users and their behavior in the following way:
1. Through data voluntarily entered in forms, which are entered into the Operator’s systems.
2. By storing cookies on end devices.

2. Selected methods of data protection used by the Operator

The login and personal data entry locations are protected in the transmission layer (SSL certificate). This ensures that the personal data and login data entered on the website are encrypted on the user’s computer and can only be read on the target server.
The operator periodically changes its administrative passwords.
To protect data, the Operator regularly makes backup copies.
An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

3. Web Hosting

The Website is hosted (technically maintained) on the operator’s servers: home.pl
Registration data of hostingowej:
home.pl S.A. with its registered office in Szczecin, 4 Zbożowa Street, 70-653 Szczecin, registered in the District Court – Centre in Szczecin, XIII Commercial Division of the National Court Register under KRS 0000431335, REGON: 811158242, NIP: 852-21-03-252, share capital in the amount of PLN 1,294,000 fully paid up.
At https://home.pl, you can learn more about web hosting and check the privacy policy of the hosting company.
Web Hosting Company:
- applies data loss protection measures (e.g. disk arrays, regular backups),
- applies adequate measures to protect processing sites in the event of fire (e.g. special fire extinguishing systems),
- applies adequate measures to protect processing systems in the event of a sudden power failure (e.g. double power supply paths, generators, UPS voltage maintenance systems),
- applies physical access protection measures to data processing sites (e.g. access control, monitoring),
- applies measures to ensure appropriate environmental conditions for servers as elements of the data processing system (e.g. control of environmental conditions, specialized air conditioning systems),
- applies organizational solutions to ensure the highest possible level of protection and confidentiality (training, internal regulations, password policies, etc.),
- appointed the Data Protection Officer.
The hosting company keeps logs at the server level to ensure technical reliability. The following may be enrolled:
- resources specified by URL identifier (addresses of requested resources – pages, files),
- time of receipt of the request,
- response time,
- name of the client’s station – identification carried out by the HTTP protocol,
- information about errors that occurred during the execution of HTTP transactions,
- URL address of the page previously visited by the user (referrer link) – if the transition to the Website was made through a link,
- information about the user’s browser,
- IP address information,
- diagnostic information related to the process of self-ordering services through the recorders on the website,
- information related to the handling of e-mail addressed to the Operator and sent by the Operator.

4. Your rights and additional information about how your data is used

In some situations, the Administrator has the right to transfer your personal data to other recipients, if it is necessary to perform the contract concluded with you or to perform the obligations incumbent on the Administrator. This applies to the following audiences:
- hosting company on the basis of entrustment
- postal operators
- online chat solution operators
- authorized employees and associates who use the data to achieve the purpose of the website
- companies providing marketing services to the Administrator
Your personal data processed by the Administrator no longer than it is necessary to perform the related activities specified in separate regulations (e.g. on accounting). With regard to marketing data, the data will not be processed for longer than 3 years.
You have the right to request from the Administrator:
- access to personal data concerning you,
- rectify them,
- romove,
- restriction of processing and data portability.
You have the right to object to the processing indicated in point 3.3 c) to the processing of personal data for the purpose of exercising legitimate interests pursued by the Administrator, including profiling, while the right to object cannot be exercised if there are important legitimate grounds for the processing, overriding interests, rights and freedoms, in particular to determine pursuing or defending claims.
The Administrator’s actions may be complained to the President of the Office for Personal Data Protection, 2 Stawki Street, 00-193 Warsaw.
Providing personal data is voluntary, but necessary to operate the Website.
Activities involving automated decision-making, including profiling, may be undertaken in relation to you in order to provide services under the concluded contract and for the purpose of direct marketing by the Administrator.
Personal data is not transferred from third countries within the meaning of the data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

The Website collects information provided voluntarily by the user, including personal data, if provided.
The service can save information about the connection parameters (time stamp, IP address).
In some cases, the Website may save information that facilitates the connection of data in the form with the e-mail address of the user filling in the form. In this case, the user’s email address appears inside the URL of the page containing the form.
The data provided in the form are processed for the purpose resulting from the function of a specific form, e.g. in order to process a service request or commercial contact, register services, etc. Each time, the context and description of the form clearly informs what it is for.

6. Administrator logs

Information about the behavior of users on the website may be subject to logging. This data is used for the purpose of administering the website.

7. Relevant Marketing Techniques

The operator uses a statistical analysis of website traffic through Google Analytics (Google Inc., based in the USA). The Operator does not transfer personal data to the operator of this service, but only anonymized information. The service is based on the use of cookies on the user’s end device. With regard to the information about the user’s preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques to match advertising messages to the user’s behaviour on the website, which may give the illusion that the user’s personal data is used to track them, but in practice no personal data is transferred from the Operator to the advertising operators. The technological condition for such activities is that cookies are enabled.
The Operator uses remarketing techniques to match advertising messages to the user’s behaviour on the website, which may give the illusion that the user’s personal data is used to track them, but in practice no personal data is transferred from the Operator to the advertising operators. The technological condition for such activities is that cookies are enabled.

8. Information about cookies

The website uses cookies.
Cookies are IT data, in particular text files, which are stored on the Website User’s end device and are intended for the use of the Website. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device and a unique number.
The entity that places cookies on the Website User’s end device and obtains access to them is the Website operator.
Cookies are used for the following purposes:
1. maintaining the Website user’s session (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the Website;
2. To achieve the objectives set out above in the “Relevant Marketing Techniques” section;
The Website uses two basic types of cookies: session cookies and persistent cookies. “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website or turning off the software (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
The software for browsing websites (web browser) usually allows cookies to be stored on the User’s end device by default. Website Users can change the settings in this regard. Your web browser allows you to delete cookies. It is also possible to automatically block cookies Detailed information on this subject can be found in the help or documentation of the web browser.
Restrictions on the use of cookies may affect some of the functionalities available on the Website.
Cookies placed on the Website User’s end device may also be used by entities cooperating with the Website operator, in particular the following companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to give and withdraw consent in practice?

If you do not want to receive cookies, you can change your browser settings. We reserve that disabling cookies necessary for authentication, security, and maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites
To manage your cookie settings, select the web browser you are using from the list below and follow the instructions:
Mobile devices:

You have the right to request that HIBERUS POLAND delete your personal data without undue delay. HIBERUS POLAND will delete your personal data without undue delay if one of the following circumstances applies:

you have withdrawn your consent to the processing of personal data and there is no other basis for processing, e.g. withdrawal of consent to send a newsletter/conduct telephone marketing to you,
an effective objection has been made to the processing, e.g. in the scope of the processing of your personal data for the purpose of marketing in the form of traditional (paper) correspondence,
your personal data has been processed unlawfully,
your personal data must be erased in order for HIBERUS POLAND to comply with a legal obligation,
your data has been collected in connection with the provision of information society services.

Right to restriction of processing You have the right to request from HIBERUS POLAND the restriction of the processing of your personal data in the following cases:

you question the accuracy of the personal data – restriction of processing for a period enabling HIBERUS POLAND to verify the accuracy of the data;
the processing is unlawful, and you oppose the erasure of the personal data and request the restriction of their use instead;
HIBERUS POLAND already needs your personal data for the purposes of the processing, but you need it for the establishment, exercise or defence of legal claims;
you have objected to the processing pursuant to Article 21(1) GDPR – until it has been determined whether the legitimate interest of HIBERUS POLAND overrides the grounds for your objection.