Privacy Policy – onlyaura.pl

1. General Information

This policy applies to the Website operating at: https://onlyaura.pl/ The Operator of the website and Administrator of personal data is: Onlyaura Agency Contact email address of the Operator: kontakt@onlyaura.pl The Operator is the Administrator of your personal data with respect to data voluntarily provided in the Service. The Service uses personal data for the following purposes:

• Handling inquiries via contact form
• Presenting offers or information

The Service collects information about users and their behavior in the following ways:

• Through data voluntarily entered in forms, which is then entered into the Operator’s systems
• Through saving cookie files on end devices

2. Selected Data Protection Methods Used by the Operator

Login pages and personal data entry points are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the website are encrypted on the user’s device and can only be read on the target server.

Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This protects data in the event of a database breach.

The Operator periodically changes its administrative passwords.

An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.

To protect data, the Operator regularly performs backups.

3. Hosting

The Service is hosted (technically maintained) on the operator’s server: seohost.pl

The hosting company, in order to ensure technical reliability, maintains logs at the server level. The following may be recorded:

• Resources identified by URL (addresses of requested resources – pages, files)
• Time of request arrival
• Time of response dispatch
• Client station name – identification carried out via HTTP protocol
• Information about errors that occurred during HTTP transactions
• URL of the page previously visited by the user (referrer link) – if the user arrived at the Service via a link
• Information about the user’s browser
• Information about the IP address
• Diagnostic information related to the process of self-ordering services via website registrars
• Information related to handling of email correspondence directed to and sent by the Operator

4. Your Rights and Additional Information on Data Use

In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to fulfill a contract concluded with you or to meet the obligations incumbent on the Administrator. This applies to the following categories of recipients:

• Hosting company on a data processing entrustment basis

Your personal data is processed by the Administrator no longer than necessary to perform the activities associated with them, as defined by separate regulations (e.g., accounting regulations). With respect to marketing data, data will not be processed for longer than 3 years.

You have the right to request from the Administrator:

• Access to your personal data
• Rectification of your data
• Erasure of your data
• Restriction of processing
• Data portability

You have the right to object to the processing described in point 3.3(c) regarding the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, exercise or defense of legal claims.

You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary but necessary to use the Service.

You may be subject to automated decision-making, including profiling, for the purpose of providing services under a concluded contract and for the purpose of direct marketing carried out by the Administrator.

Personal data is transferred from third countries within the meaning of data protection regulations. This means we transfer it outside the territory of the European Union.

5. Information in Forms

The Service collects information voluntarily provided by the user, including personal data if provided.

The Service may save information about connection parameters (timestamp, IP address).

In some cases, the Service may save information that facilitates linking form data with the email address of the user completing the form. In such cases, the user’s email address appears within the URL of the page containing the form.

Data provided in the form is processed for the purpose arising from the function of the specific form — for example, to handle a service request or commercial contact, register for services, etc. The context and description of each form clearly indicates its purpose.

6. Administrator Logs

Information about user behavior on the website may be subject to logging. This data is used for the purpose of administering the Service.

7. Key Marketing Techniques

The Operator uses statistical traffic analysis on the website via Google Analytics (Google Inc., headquartered in the USA). The Operator does not transmit personal data to the operator of this service — only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, users may view and edit information derived from cookies using the following tool: https://www.google.com/ads/preferences/

The Operator uses the Facebook Pixel. This technology causes the Facebook service (Facebook Inc., headquartered in the USA) to know that a registered person is using the Service. It is based on data for which Facebook itself is the administrator — the Operator does not transmit any additional personal data to the Facebook service. The service is based on the use of cookies on the user’s end device.

The Operator uses a solution that automates the operation of the Service with respect to users — for example, it may send an email to a user after visiting a specific subpage, provided the user has consented to receive commercial correspondence from the Operator.

8. Cookie Information

The Service uses cookie files.

Cookie files (“cookies”) are data files, in particular text files, which are stored on the end device of the Service User and are intended for use with the Service’s web pages. Cookies typically contain the name of the website they originate from, the duration of storage on the end device, and a unique number.

The entity placing cookie files on the end device of the Service User and accessing them is the Operator of the Service.

Cookies are used for the following purposes:

• Maintaining the user’s session (after logging in), so that the user does not have to re-enter their login and password on every subpage of the Service
• Fulfilling the purposes specified above in the “Key Marketing Techniques” section

The Service uses two main types of cookies: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the user’s end device until the user logs out, leaves the website, or closes the browser. Persistent cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.

Web browsing software (internet browser) typically allows cookies to be stored on the user’s end device by default. Service Users may change these settings. The browser allows deletion of cookies, and automatic blocking of cookies is also possible. Detailed information on this topic can be found in the browser’s help documentation.

Restrictions on the use of cookies may affect some functionalities available on the Service’s web pages.

Cookies placed on the end device of the Service User may also be used by entities cooperating with the Operator, in particular the following companies: Google (Google Inc., USA), Facebook (Facebook Inc., USA), Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice

If the user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining user preferences may make it difficult or, in extreme cases, impossible to use the website.

To manage your cookie settings, select your internet browser from the list below and follow the instructions:

Desktop browsers: Edge · Internet Explorer · Chrome · Safari · Firefox · Opera

Mobile devices: Android · Safari (iOS) · Windows Phone