Privacy Policy

1. General information

  1. This policy applies to the website Service operating at the following URL address: drogadoprawka.pl
  2. Operator’s e-mail contact address: [email protected]
  3. The Operator is the Administrator of your personal data in relation to the data voluntarily provided in the Service.
  4. The Service uses personal data for the following purposes:
    • Handling enquiries via the form
  5. The Service performs functions of obtaining information about users and their behaviour in the following way:
    1. Through data voluntarily entered in forms, which are entered into the Operator’s systems.
    2. By saving cookies on end devices (so-called “cookies”).

2. Selected data protection methods used by the Operator

  1. Login and personal data entry areas are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login details entered on the website are encrypted on the user’s computer and can be read only on the target server.
  2. Personal data stored in the database are encrypted in such a way that only the Operator, who holds the key, can read them. Thanks to this, the data are protected in case the database is stolen from the server.
  3. User passwords are stored in hashed form. The hashing function works one-way - it is not possible to reverse it, which is currently the modern standard for storing user passwords.
  4. The Operator periodically changes their administrative passwords.
  5. To protect data, the Operator regularly makes backup copies.
  6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

3. Hosting

  1. The Service is hosted (technically maintained) on the servers of the operator: Hostido.pl

4. Your rights and additional information about how data are used

  1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the agreement concluded with you or to fulfil obligations incumbent on the Administrator. This applies to the following groups of recipients:
    • hosting company on the basis of entrustment
    • public authorities
    • authorised employees and associates who use the data in order to achieve the purpose of the website’s operation
  2. Your personal data are processed by the Administrator no longer than is necessary to perform activities related to them as specified in separate regulations (e.g., accounting). With regard to marketing data, the data will not be processed for longer than 3 years.
  3. You have the right to request from the Administrator:
    • access to your personal data,
    • rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object, with regard to processing indicated in point 3.2, to the processing of personal data for the purpose of pursuing the legitimate interests carried out by the Administrator, including profiling; however, the right to object may not be exercised where there are compelling legitimate grounds for the processing overriding your interests, rights and freedoms, in particular the establishment, pursuit or defence of claims.
  5. You have the right to lodge a complaint regarding the Administrator’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary, but necessary for the operation of the Service.
  7. Activities involving automated decision-making, including profiling, may be carried out in relation to you for the purpose of providing services under the concluded agreement and for the purpose of the Administrator’s direct marketing.
  8. Personal data are not transferred to third countries within the meaning of personal data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

  1. The Service collects information voluntarily provided by the user, including personal data, if they are provided.
  2. The Service may save information about connection parameters (timestamp, IP address).
  3. In some cases, the Service may save information facilitating linking the data in the form with the e-mail address of the user filling in the form. In such a case, the user’s e-mail address appears within the URL address of the page containing the form.
  4. Data provided in the form are processed for the purpose resulting from the function of the specific form, e.g., to carry out the process of handling a service request or commercial contact, service registration, etc. Each time, the context and description of the form clearly indicate what it is used for.

6. Administrator logs

  1. Information about users’ behaviour in the Service may be logged. These data are used for the purpose of administering the Service.

7. Important marketing techniques

  1. The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc. based in the USA). The Operator does not provide personal data to the operator of this service, only anonymised information. The service is based on the use of cookies on the user’s end device. With regard to information about the user’s preferences collected by Google’s advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

8. Information about cookies

  1. The Service uses cookies.
  2. Cookies (so-called “cookies”) are IT data, in particular text files, which are stored on the Service User’s end device and are intended for use of the Service’s websites. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.
  3. The entity placing cookies on the Service User’s end device and obtaining access to them is the Service operator.
  4. Cookies are used for the following purposes:
    1. maintaining the Service user session (after logging in), thanks to which the user does not have to re-enter login and password on each subpage of the Service;
    2. achieving the purposes set out above in the “Important marketing techniques” section;
  5. Two main types of cookies are used within the Service: “session” (session cookies) and “persistent” (persistent cookies). “Session” cookies are temporary files that are stored on the User’s end device until logging out, leaving the website, or switching off the software (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
  6. Web browsing software (a web browser) usually allows cookies to be stored on the User’s end device by default. Service users may change the settings in this regard. The web browser enables cookies to be deleted. Automatic blocking of cookies is also possible. Detailed information on this is provided in the help or documentation of the web browser.
  7. Restrictions on the use of cookies may affect some of the functionalities available on the Service’s websites.
  8. Cookies placed on the Service User’s end device may also be used by entities cooperating with the Service operator, in particular companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to give and withdraw consent in practice?

  1. If the user does not want to receive cookies, they may change their browser settings. We reserve that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases may make it impossible to use websites
  2. To manage cookie settings, select from the list below the web browser you use and follow the instructions:

    Mobile devices: