1. General information

  1. This policy applies to the website at the url: https://novimodular.com/
  2. The operator of the website and the Controller of personal data is: NOVI GROUP SPÓLKA Z OGRANICZONA ODPOWIEDZIALNOSCIA, VAT ID: PL9482631300, 1905 Roku 21/101, 26-600 Radom, Poland
  3. Contact e-mail address of the operator: biuro@novipawilony.pl
  4. The Operator is the Controller of your personal data in respect of data provided voluntarily on the website.
  5. The website uses personal data for the following purposes:
    • Running a newsletter
    • Running a comment system
    • Running online chat conversations
    • Handling enquiries submitted through a form
    • Preparing, packing and shipping goods
    • Delivering the services ordered
    • Presenting an offer or information
  6. The website collects information about users and their behaviour in the following ways:
    • Through data entered voluntarily into forms, which is then entered into the Operator systems.
    • By saving cookie files on end devices.

2. Selected data protection measures used by the Operator

  1. Login pages and pages where personal data is entered are protected at the transmission layer (SSL certificate). Personal data and login details entered on the site are therefore encrypted on the user computer and can only be read on the destination server.
  2. User passwords are stored in hashed form. A hashing function works one way - it cannot be reversed, which is the current standard for storing user passwords.
  3. The Operator makes regular backups in order to protect data.
  4. Regular updating of all software used by the Operator to process personal data is an important element of data protection, and in particular means regular updates of programming components.

3. Hosting

  1. The website is hosted (technically maintained) on the servers of: cyberFolks.pl

4. Your rights and further information about how data is used

  1. In some situations the Controller has the right to pass your personal data to other recipients where this is necessary to perform the contract concluded with you or to fulfil obligations resting on the Controller. This concerns the following groups of recipients:
    • the hosting company, on a data processing basis
    • authorised employees and associates who use the data in order to operate the site
    • companies providing marketing services for the Controller
  2. Your personal data is processed by the Controller no longer than is necessary to carry out the activities connected with it as set out in separate regulations (for example on keeping accounts). Marketing data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to the personal data concerning you,
    • its rectification,
    • its erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing indicated in point 3.3 c) against the processing of personal data for the purposes of legitimate interests pursued by the Controller, including profiling, although the right to object cannot be exercised where compelling legitimate grounds for processing exist which override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. A complaint about the actions of the Controller may be lodged with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary, but necessary in order to use the website.
  7. Actions consisting of automated decision-making, including profiling, may be taken in relation to you, in order to provide services under the contract concluded and for the purposes of direct marketing by the Controller.
  8. Personal data is not transferred to third countries within the meaning of data protection law. This means that we do not send it outside the European Union.

5. Information in forms

  1. The website collects information provided voluntarily by the user, including personal data where it is provided.
  2. The website may record information about connection parameters (time stamp, IP address).
  3. In some cases the website may record information that makes it easier to link the data in a form with the e-mail address of the user filling it in. In such a case the user e-mail address appears within the url of the page containing the form.
  4. Data given in a form is processed for the purpose arising from the function of the particular form, for example in order to handle a service request or a commercial enquiry, to register services and so on. In each case the context and the description of the form make clear what it is for.

6. Operator logs

  1. Information about user behaviour on the site may be logged. This data is used in order to administer the site.

7. Significant marketing techniques

  1. The Operator uses statistical analysis of site traffic through Google Analytics (Google Inc., based in the USA). The Operator does not pass personal data to the provider of this service, only anonymised information. The service relies on cookies on the user end device. As regards information about user preferences gathered by the Google advertising network, the user may view and edit the information derived from cookies using the tool at: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques which allow advertising messages to be matched to user behaviour on the site. This may give the impression that the user personal data is being used to track them, but in practice no personal data is passed from the Operator to advertising providers. The technical condition for such activity is that cookie support is enabled.
  3. The Operator uses the Facebook pixel. This technology means that Facebook (Facebook Inc., based in the USA) knows that a person registered with it is using the website. It relies in this case on data for which it is itself the controller; the Operator does not pass any additional personal data to Facebook. The service relies on cookies on the user end device.
  4. The Operator uses a solution that studies user behaviour by creating heat maps and recording behaviour on the site. This information is anonymised before it is sent to the service provider, so that the provider does not know which natural person it concerns. In particular, passwords entered and other personal data are not recorded.

8. Information about cookies

  1. The website uses cookies.
  2. Cookies are computer data, in particular text files, stored on the end device of a user of the website and intended for use with the pages of the website. Cookies usually contain the name of the website they come from, how long they are stored on the end device, and a unique number.
  3. The entity placing cookies on the end device of a user of the website and gaining access to them is the operator of the website.
  4. Cookies are used for the following purposes:
    • maintaining a session of a user of the website (after logging in), so that the user does not have to enter their login and password again on every subpage;
    • achieving the purposes set out above under “Significant marketing techniques”;
  5. Two basic types of cookie are used on the website: session cookies and persistent cookies. Session cookies are temporary files stored on the end device of the User until they log out, leave the website or close the software (the web browser). Persistent cookies are stored on the end device of the User for the time set out in the cookie parameters or until the User deletes them.
  6. Web browsing software (a web browser) usually allows cookies to be stored on the end device of the User by default. Users of the website may change these settings. A web browser allows cookies to be deleted. It is also possible to block cookies automatically. Detailed information on this is contained in the help or the documentation of the web browser.
  7. Restrictions on the use of cookies may affect some of the functionality available on the pages of the website.
  8. Cookies placed on the end device of a user of the website may also be used by entities cooperating with the operator of the website, in particular by: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing cookies - how to give and withdraw consent in practice

  1. If a user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it harder, and in extreme cases impossible, to use websites.
  2. To manage cookie settings, choose the web browser you use from the list below and follow the instructions:
    • Edge
    • Internet Explorer
    • Chrome
    • Safari
    • Firefox
    • Opera
  3. Mobile devices:
    • Android
    • Safari (iOS)
    • Windows Phone