This is a translation of the Polish document. In case of any discrepancy, the Polish version prevails.
1. General information
This privacy policy applies to the website available at https://vitaflow.com.pl/ (the "Website").
The operator of the Website and controller of personal data is PULSE GLOBAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, NIP: 9462755849, ul. Hoża 86/410 (the "Controller" or "Operator").
Operator's contact number: +48 883 583 158.
The Operator is the controller of your personal data with regard to data voluntarily provided on the Website.
The Website uses personal data for the following purposes:
- running a newsletter;
- handling enquiries sent via the form;
- providing ordered services;
- presenting offers or information.
The Website obtains information about users and their behaviour:
- through data voluntarily entered in forms and saved in the Operator's systems;
- by saving cookies on end devices.
2. Data protection methods used by the Operator
Places where login and personal data are entered are protected in the transmission layer with an SSL certificate. As a result, personal data and login data entered on the website are encrypted on the user's device and can only be read on the target server.
The Operator changes administrative passwords periodically.
To protect data, the Operator regularly makes backup copies.
3. Hosting
The Website is hosted, i.e. technically maintained, on the servers of Hostinger (Hostinger International Ltd.).
The hosting company keeps server-level logs to ensure technical reliability. The following may be recorded:
- resources identified by URL, including addresses of requested pages and files;
- time of the request;
- time of the response;
- the name of the client station identified via HTTP;
- information about errors during HTTP transactions;
- the URL of the page previously visited by the user (referrer), if the Website was reached via a link;
- information about the user's browser;
- information about the IP address;
- diagnostic information related to self-ordering services via forms on the website;
- information related to handling e-mail sent to and by the Operator.
4. Your rights and additional information on the use of data
In some situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to perform the agreement concluded with you or to fulfil the Controller's obligations.
Recipients may include authorised employees and associates who use the data to the extent necessary to perform tasks related to the operation of the Website.
Your personal data are processed by the Controller no longer than necessary to perform the related activities and obligations under separate regulations, e.g. accounting. Data used for marketing purposes will not be processed for longer than 3 years.
You have the right to request from the Controller:
- access to your personal data;
- rectification of data;
- erasure of data;
- restriction of processing;
- data portability.
You also have the right to object to the processing of personal data based on the Controller's legitimate interests, including profiling.
An objection may not be taken into account if there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular related to establishing, exercising or defending claims.
You may lodge a complaint about the Controller's actions with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
Providing personal data is voluntary but may be necessary to use certain functions of the Website.
Automated decisions, including profiling, may be made with regard to you in order to provide services under the agreement and for the Controller's direct marketing.
Personal data are not transferred to third countries within the meaning of data protection regulations, i.e. they are not sent outside the European Union.
5. Information provided in forms
The Website collects information voluntarily provided by the user, including personal data, if provided.
The Website may record information about connection parameters, such as a timestamp and IP address.
In some cases, the Website may save information making it easier to link data in a form with the user's e-mail address. In that case the user's e-mail address may appear in the URL of the page containing the form.
Data provided in a form are processed for the purpose resulting from the function of that form, e.g. handling a service request, sales contact or registration of services. The context and description of each form explain its purpose.
6. Controller's logs
Information about users' behaviour on the Website may be logged. These data are used to administer the Website.
7. Important marketing techniques
The Operator analyses website traffic statistically using Google Analytics, provided by Google Inc., USA.
The Operator does not transfer personal data to the operator of this service, only anonymised information. The service uses cookies saved on the user's end device.
Information about user preferences collected by the Google advertising network can be viewed and edited with the Google Ads Settings tool.
The Operator uses remarketing techniques that allow advertising messages to be matched to the user's behaviour on the Website. This may give the impression that the user's personal data are used to track them, but the Operator does not transfer any additional personal data to advertising operators. The technological condition for such activities is that cookies are enabled.
The Operator uses the Facebook pixel. This technology allows Facebook, provided by Facebook Inc., USA, to recognise that a user registered there uses the Website. Facebook uses data for which it is itself the controller. The Operator does not transfer any additional personal data to Facebook. The service uses cookies saved on the user's end device.
The Operator may use solutions that automate the operation of the Website, e.g. sending an e-mail to a user after they visit a particular page, if they have previously consented to receiving commercial correspondence from the Operator.
8. Cookies
The Website uses cookies.
Cookies are computer data, in particular text files, stored on the Website user's end device and intended for using the Website's pages.
Cookies usually contain the name of the website they come from, how long they are stored on the end device and a unique number.
The entity placing cookies on the user's end device and accessing them is the Website Operator.
Cookies are used for the following purposes:
- maintaining the user's session after logging in, so that the user does not have to re-enter login and password on every page;
- the purposes described in "Important marketing techniques".
The Website uses two basic types of cookies:
- session cookies – temporary files stored on the user's end device until logging out, leaving the website or closing the browser;
- persistent cookies – files stored on the user's end device for the time specified in their parameters or until deleted by the user.
Web browsers usually allow cookies to be stored on the user's end device by default.
The user can change browser settings, delete cookies or block them automatically. Details are available in the help or documentation of the browser.
Restricting cookies may affect some functions of the Website.
Cookies placed on the user's end device may also be used by entities cooperating with the Website Operator, in particular Google Inc. (USA), Facebook Inc. (USA) and Twitter Inc. (USA).
9. Managing cookies – giving and withdrawing consent
If the user does not want to receive cookies, they can change their browser settings.
Disabling cookies needed for authentication, security or maintaining user preferences may make it difficult, and in extreme cases impossible, to use the website.
To manage cookie settings, follow the instructions of your browser's manufacturer (Microsoft Edge, Google Chrome, Safari, Mozilla Firefox, Opera; on mobile devices: Android, Safari on iOS).