Privacy policy

Privacy Policy

1. General Information

This policy applies to the website operating at the URL: illuma.com.pl.
The operator of the website and the controller of personal data is:

ILLUMA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Ul. Przemysłowa 6, 35-105 Rzeszów, Poland

The operator’s contact email address:
maciej.kedzior@pretor.info.pl

The Operator is the Controller of your personal data with regard to data voluntarily provided on the Website.

The Website collects information about users and their behavior in the following ways:

  • Through data voluntarily entered into forms, which are then entered into the Operator’s systems.

  • Through saving cookies on users’ end devices (so-called “cookies”).

2. Selected Data Protection Methods Used by the Operator

Places where personal data is entered and login pages are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the website are encrypted on the user’s device and can only be read on the target server.

3. Hosting

The Website is hosted (technically maintained) on the operator’s servers: zenbox.pl.

Hosting provider registration details:
Zenbox sp. z o.o., with its registered office in Częstochowa at ul. Dąbrowskiego 7, 42-200 Częstochowa, entered into the National Court Register maintained by the District Court in Częstochowa, 17th Commercial Division of the National Court Register, under KRS number 0000414281.

At https://zenbox.pl you can learn more about hosting services and review the hosting provider’s privacy policy.

The hosting company:

  • applies data loss protection measures (e.g. disk arrays, regular backups),

  • applies adequate protection measures for processing locations in the event of fire (e.g. specialized fire suppression systems),

  • applies adequate protection measures for processing systems in the event of sudden power failure (e.g. dual power supply paths, generators, UPS systems),

  • applies physical access protection measures to data processing locations (e.g. access control, monitoring),

  • ensures appropriate environmental conditions for servers as elements of data processing systems (e.g. environmental monitoring, specialized air-conditioning systems),

  • applies organizational measures to ensure the highest possible level of protection and confidentiality (training, internal regulations, password policies, etc.),

  • has appointed a Data Protection Officer.

To ensure technical reliability, the hosting company keeps server-level logs. These logs may include:

  • resources identified by URL (addresses of requested resources – pages, files),

  • request arrival time,

  • response sending time,

  • client workstation name – identification via the HTTP protocol,

  • information about errors that occurred during HTTP transactions,

  • URL of the page previously visited by the user (referrer link), if access to the Website occurred via a link,

  • information about the user’s browser,

  • information about the IP address,

  • diagnostic information related to the process of self-ordering services via on-site registrars,

  • information related to handling email correspondence sent to and from the Operator.

4. Your Rights and Additional Information on the Use of Data

Your personal data is processed by the Controller no longer than necessary to perform activities specified by separate regulations (e.g. accounting regulations). Marketing data will not be processed for longer than 3 years.

You have the right to request from the Controller:

  • access to your personal data,

  • rectification of your data,

  • erasure of your data,

  • restriction of processing,

  • data portability.

You have the right to object to the processing referred to in point 3.3(c), concerning the processing of personal data for the purposes of legitimate interests pursued by the Controller, including profiling. This right may not be exercised if there are valid legally justified grounds for processing that override your interests, rights, and freedoms, in particular the establishment, exercise, or defense of legal claims.

You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

Providing personal data is voluntary but necessary for using the Website.

Automated decision-making, including profiling, may be carried out with respect to you for the purpose of providing services under the concluded agreement and for the Controller’s direct marketing purposes.

Personal data is transferred to third countries within the meaning of data protection regulations, which means that it is transferred outside the European Union.

5. Information in Forms

The Website collects information voluntarily provided by users, including personal data, if such data is provided.
The Website may record information about connection parameters (timestamp, IP address).

In some cases, the Website may store information facilitating the linking of form data with the email address of the user completing the form. In such cases, the user’s email address appears within the URL of the page containing the form.

Data provided in forms is processed for purposes resulting from the function of a given form, e.g. handling a service request, commercial contact, service registration, etc. Each time, the context and description of the form clearly indicate its purpose.

6. Administrator Logs

Information about user behavior on the Website may be logged. This data is used for website administration purposes.

7. Essential Marketing Techniques

8. Information About Cookies

The Website uses cookies.

Cookies are IT data, in particular text files, stored on the end device of the Website User and intended for use with the Website’s pages. Cookies usually contain the name of the website they originate from, their storage time on the end device, and a unique number.

The entity placing cookies on the Website User’s end device and accessing them is the Website Operator.

Cookies are used for the following purposes:

  • maintaining the Website user session (after logging in), so the user does not have to re-enter login and password on each subpage;

  • achieving the purposes described above in the section “Essential Marketing Techniques”.

Two main types of cookies are used within the Website: “session cookies” and “persistent cookies.”
Session cookies are temporary files stored on the User’s end device until logout, leaving the website, or closing the browser.
Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.

Web browsers usually allow cookies to be stored on the User’s end device by default. Users may change their settings in this regard. Browsers allow the deletion of cookies and may also block cookies automatically. Detailed information is available in the browser’s help or documentation.

Restrictions on the use of cookies may affect some of the functionalities available on the Website.

Cookies placed on the User’s end device may also be used by entities cooperating with the Website Operator, in particular companies such as: Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice

If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, or maintaining user preferences may hinder or, in extreme cases, prevent the use of the website.