Privacy Policy

Privacy Policy

This Privacy Policy describes the rules we apply for processing information about you, including personal data and cookies, i.e. so-called cookies.

1. General information

  1. This policy applies to the Website operating at the following URL: www.nafta.pl
  2.  The operator of the website and the controller of personal data is: INVESTIMUS sp. z o.o Lwowska 21 685-23-26-534
  3. Contact email address for the operator: damian.pawlus@nafta.pl
  4.  The operator is the Controller of your personal data with regard to the data you provide voluntarily through the Website.
  5. The Website processes personal data for the following purposes:
    • Running a newsletter
    • Handling inquiries via the form
  6. The Website carries out the function of collecting information about users and their behaviour in the following way:
    1.  Through data entered voluntarily into forms, which are then entered into the Operator’s systems.
    2. By saving cookie files (so-called “cookies”) on end-user devices.

2. Selected data protection methods used by the Operator

  1. Places where users log in and enter personal data are protected at the transmission layer (SSL certificate). As a result, personal data and login data entered on the website are encrypted on the user’s computer and can be read only on the target server.
  2. To minimise the risk of unauthorised access to data, the Operator uses complex passwords containing uppercase and lowercase letters, digits and special characters, not shorter than 8 characters.
  3. A significant element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
  4. To protect data, the Operator regularly performs backup copies.

3. Hosting

  1. The Website is hosted (technically maintained) on the Operator’s server: progreso.pl
  2. To ensure technical reliability, the hosting company keeps server logs. The following may be recorded:
    • resources identified by the URL (addresses of requested resources – pages, files),
    • the time the request was received,
    • the time the response was sent,
    • the name of the client station – identified using the HTTP protocol,
    • information about errors that occurred during the execution of HTTP transactions,
    • the URL address of the page previously visited by the user (referrer link) – where the transition to the Service took place via a link,
    • information about the user’s browser,
    • information about the IP address,
    • diagnostic information related to the process of ordering services independently via registrars on the website,
    • information related to handling electronic mail addressed to the Operator and sent by the Operator.

4. Your rights and additional information about how data is used

  1. In certain situations, the Administrator has the right to share your personal data with other recipients if this is necessary to perform the agreement concluded with you or to fulfil obligations imposed on the Administrator. This applies to the following groups of recipients:
    • a hosting company on the basis of entrustment
  2.  Your personal data processed by the Administrator will not be kept for longer than is necessary to carry out the activities associated with it, as specified by separate regulations (e.g. those concerning accounting). With respect to marketing data, data will not be processed for longer than 3 years.
  3. You have the right to request that the Administrator:
    • access to your personal data,
    • their rectification,
    • their deletion,
    • the restriction of processing,
    • and the portability of data.
  4.  You have the right to object to processing referred to in section 3.3(c) against the processing of personal data for the purpose of carrying out legally justified interests pursued by the Administrator, including profiling, provided that the right to object cannot be exercised where there are important legally justified grounds for processing that override your interests, rights and freedoms, in particular for the establishment, pursuit or defence of legal claims.
  5.  You may lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, regarding the Administrator’s actions.
  6. Providing personal data is voluntary, but necessary to operate the Service.
  7.  With respect to you, automated decision-making may be carried out, including profiling, for the purpose of providing services under the concluded agreement and for the Administrator to run direct marketing.
  8.  Personal data is transferred from third countries within the meaning of personal data protection regulations. This means that we transfer it outside the territory of the European Union.

5. Information in forms

  1.  The service collects information provided voluntarily by the user, including personal data, if it is provided.
  2. The service may store connection details (time stamp, IP address).
  3.  In some cases, the service may store information that makes it easier to link the data in a form to the user’s email address entered in the form. In such a case, the user’s email address appears within the URL of the page containing the form.
  4.  Data provided in a form is processed for the purpose resulting from the specific form’s function, for example to process a service request or for business contact, service registration, etc. In each case, the form’s context and description clearly inform you what it is used for.

6. Administrator logs

  1.  Information about users’ activity on the website may be logged. This data is used to administer the website.

7. Relevant marketing techniques

  1. The operator uses statistical traffic analysis through Google Analytics (Google Inc., based in the USA). The operator does not pass personal data to the operator of this service; only anonymised information is provided. The service is based on the use of cookies on the user’s end device. As regards the information about user preferences collected by Google’s advertising network, the user may view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/
  2. The operator uses a solution that examines users’ behaviour by creating heat maps and recording behaviour on the website. This information is anonymised before being sent to the operator of the service, so they do not know which specific natural person it relates to. In particular, recorded content does not include entered passwords or other personal data.

8. Information about cookies

  1. The website uses cookies.
  2.  Cookies (so-called “cookies”) are IT data, in particular text files, stored on the user’s end device and intended for using the website pages. Cookies usually contain the name of the website from which they originate, the duration for which they are stored on the end device, and a unique number.
  3.  The party placing cookies on the user’s end device and accessing them is the operator of the website.
  4. Cookies are used for the following purposes:
    1.  maintaining the user’s session on the Website (after signing in), so that the user does not have to enter their login and password again on every page of the Website;
    2. achieving the objectives set out above in the section "Relevant marketing practices";
  5.  Two main types of cookies are used within the website: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the user’s end device until the user logs out, leaves the website, or turns off the software (web browser). “Persistent” cookies are stored on the user’s end device for the period specified in the cookies’ settings or until they are deleted by the user.
  6.  Web-browsing software (web browser) typically allows the storage of cookies on the user’s end device by default. Website users may change these settings. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this topic is available in the web browser help or documentation.
  7.  Restrictions on the use of cookies may affect some features available on the website pages.
  8.  Cookies placed on the user’s end device and used on the website may also be used by entities cooperating with the operator of the website; in particular, this applies to the following companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing cookies – how to express and withdraw consent in practice?

  1.  If a user does not want to receive cookies, they can change their browser settings. We note that disabling cookies required for authentication, security, and maintaining the user’s preferences may make it difficult, and in extreme cases may prevent, use of the website pages
  2. To manage cookie settings, choose from the list below the web browser you use and follow the instructions:Mobile devices:

This privacy policy template has been generated free of charge for informational purposes, based on our knowledge, industry best practices and the legal regulations in force as at 2018-08-14. We recommend reviewing the template before using it on your website. The template is based on the most common situations found on websites, but it may not fully reflect the complete and precise specifics of your website. Read the generated document carefully and, if necessary, adapt it to your situation or seek legal advice. We do not accept liability for any consequences of using this document, as only you can ensure that all information contained in it is accurate. Please also note that even the best Privacy Policy is only one element of your responsibility for users’ personal data and privacy on your website.

Scroll to Top