Opens in a new tab

Privacy Policy

1. General information

  1. This policy applies to the website operating at the following URL: lutnikbobak.com
  2. The website operator and the Controller of personal data is:
    Andrzej Bobak, Kiry 16, 34-511 Kościelisko

    NIP: 736-130-95-96
  3. The operator’s contact email address: contact@lutnikbobak.com
  4. The Operator is the Controller of your personal data in relation to data voluntarily provided on the website.
  5. The website uses personal data for the following purposes:
    • Handling inquiries submitted via the contact form
    • Presentation of offers or information
  6. The website collects information about users and their behavior in the following ways:

    1. Through data voluntarily entered in forms, which are then entered into the Operator’s systems.
    2. By storing cookies on end-user devices.

2. Selected data protection methods used by the Operator

  1. Login areas and places where personal data is entered are protected at the transmission layer (SSL certificate).
    As a result, personal data and login details entered on the website are encrypted on the user’s device and can only
    be read on the target server.
  2. Personal data stored in the database is encrypted in such a way that only the Operator, holding the key, can read
    it. This protects the data in the event of a database breach.
  3. User passwords are stored in hashed form. Hashing functions are one-way and cannot be reversed, which is the
    current standard for storing user passwords.
  4. The Operator periodically changes administrative passwords.
  5. To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and
    uppercase letters, numbers, and special characters, with a minimum length of 8 characters.
  6. An important element of data protection is the regular updating of all software used by the Operator to process
    personal data, which in particular means regular updates of software components.
  7. The Operator regularly performs backups.

3. Hosting

  1. The website is hosted (technically maintained) on servers operated by: hostido.pl
  2. In order to ensure technical reliability, the hosting provider keeps server-level logs. These logs may include:

    • resources identified by URL (addresses of requested resources—pages and files),
    • time of request arrival,
    • time of response dispatch,
    • client workstation name – identification via the HTTP protocol,
    • information about errors occurring during HTTP transactions,
    • URL of the previously visited page (referrer) – if access to the website occurred via a link,
    • information about the user’s browser,
    • information about the IP address,
    • diagnostic information related to the process of independently ordering services via the website,
    • information related to handling email correspondence sent to the Operator and sent by the Operator.

4. Your rights and additional information on how data is used

  1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if this
    is necessary to perform a contract concluded with you or to fulfill legal obligations incumbent on the
    Administrator. This applies to the following categories of recipients:

    • hosting provider acting on the basis of a data processing agreement,
    • authorized employees and collaborators who use the data to achieve the purpose of the website,
    • companies providing marketing services to the Administrator.
  2. Your personal data is processed by the Administrator no longer than is necessary to carry out activities related
    to it as specified in separate regulations (e.g. accounting regulations). With regard to marketing data, it will
    not be processed longer than 3 years.
  3. You have the right to request from the Administrator:

    • access to your personal data,
    • rectification of data,
    • erasure of data,
    • restriction of processing,
    • data portability.
  4. You have the right to object, in respect of processing indicated in point 3.3(c), to the processing of personal
    data for the purposes of the legitimate interests pursued by the Administrator, including profiling. The right to
    object may not be exercised where there are compelling legitimate grounds for processing overriding your interests,
    rights, and freedoms, in particular for the establishment, exercise, or defense of legal claims.
  5. You have the right to lodge a complaint with the President of the Personal Data Protection Office,
    ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary for the use of the website.
  7. Automated decision-making, including profiling, may be applied to you for the purpose of providing services under
    the concluded agreement and for direct marketing conducted by the Administrator.
  8. Personal data is not transferred to third countries within the meaning of data protection regulations.
    This means that we do not transfer it outside the European Union.

5. Information in forms

  1. The website collects information voluntarily provided by users, including personal data, if provided.
  2. The website may record information about connection parameters (timestamp, IP address).
  3. In some cases, the website may record information facilitating the linking of form data with the email address of
    the user completing the form. In such cases, the user’s email address may appear within the URL of the page
    containing the form.
  4. Data provided in forms is processed for purposes resulting from the function of a specific form, e.g. handling a
    service request or commercial contact, registration of services, etc. Each time, the context and description of the
    form clearly explains what it is used for.

6. Administrator logs

  1. Information about user behavior on the website may be logged. This data is used for website administration.

7. Essential marketing techniques

8. Information about cookies

  1. The website uses cookies.
  2. Cookies are IT data, in particular text files, stored on the end user’s device and intended for use on the
    website. Cookies usually contain the name of the website they come from, the time they are stored on the end user’s
    device, and a unique identifier.
  3. The entity placing cookies on the user’s device and accessing them is the website operator.
  4. Cookies are used for:

    1. maintaining the user’s session on the website (after login), so the user does not have to re-enter the login and
      password on each subpage of the website;
    2. achieving the purposes described above in the section “Essential marketing techniques”.
  5. The website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary
    files stored on the user’s device until logout, leaving the website, or closing the browser. Persistent cookies are
    stored on the user’s device for the period specified in cookie settings or until deleted by the user.
  6. Web browsing software (an internet browser) usually allows cookies to be stored on the user’s device by default.
    Users may change these settings. The browser also allows cookies to be deleted. Automatic blocking of cookies is
    also possible. Detailed information is available in the browser help or documentation.
  7. Restrictions on the use of cookies may affect some functionalities available on the website.
  8. Cookies placed on the user’s device may also be used by entities cooperating with the website operator, in
    particular by: Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).

9. Managing cookies – how to give and withdraw consent in practice

  1. If the user does not want to receive cookies, they may change their browser settings. Please note that disabling
    cookies necessary for authentication, security, or maintaining user preferences may hinder—and in extreme cases may
    prevent—use of the website.
  2. To manage cookie settings, select the browser you use from the list below and follow the instructions:

    Mobile devices: