Privacy Policy

§1 Personal data administrator

1. He is the administrator of personal data
2. House of Ideas LLC, 810 Pony Express RD Cheyenne, WY 82009, USA, email: sklep@houseofcotton.pl
3. This privacy policy applies to the website https://houseofcotton.pl/
4. With regard to social media profiles related to the Administrator's website, in accordance with the jurisprudence of the Court of Justice of the European Union, the social network provider is a co-administrator of personal data together with the administrator of a given profile. Details regarding the processing of personal data by individual providers of social networking sites can be found below:
   1. Facebook
   2. Instagram
   3. YouTube

§2 Contact regarding the processing of personal data

1. As part of the implementation of the personal data protection system, the Administrator did not appoint a personal data protection officer, because it was not mandatory.
2. In matters related to the protection of personal data and privacy, it is possible to contact us at the e-mail address sklep@houseofcotton.pl. In the field of social media, you can additionally contact directly the administrators of social networking sites where the Administrator maintains their profiles.

§3 Purpose of personal data processing

1. User account support:
   When creating a user account, you must provide the data necessary to set up an account specified in the registration form.
   Providing data is a condition for creating an account.
   As part of editing the account details, you can provide further details, in accordance with the options available within the account.
   In addition, the Administrator's system used to handle user accounts saves the IP number used by the user when registering a user account.
   The data is processed in order to provide the user with the user account service. After deleting the user account, the data goes to the archive for the purpose of possible determination, investigation or defense of claims related to the user account service.
2. Order fulfillment and contract service:
   When placing an order, the user must provide the data necessary for its implementation specified in the order form.
   Providing data is a condition for placing an order.
   The system used to handle the order process saves the IP number used by the user when placing the order.
   Each order is saved in the database, which means that the user's personal data assigned to the order is accompanied by order information, such as the date and time of placing the order, order identification number, transaction ID, subject of the order, price, method and date of payment, date and time of download (for digital content).
   In connection with the conclusion of the contract, the Administrator may also process other personal data of the user to perform the services provided for in the contract that has been concluded. The scope of this data depends on which personal data is needed for the performance of the contract.
   In a situation where the Administrator receives data as part of the performance of the contract, he bases such data processing on a legitimate interest, which in this case is to ensure efficient and effective service of the concluded contract. In this case, it may process the user's identification data and contact details.
   The data is processed in order to conclude and perform the contract. After the contract is performed, the data is stored in the archive for the purpose of possible determination, investigation or defense of claims related to the contract. The data is also included in the accounting documentation for the purposes of fulfilling tax obligations.
3. Actions taken to complete orders by customers:
   Due to the fact that some customers start placing an order but do not finalize it (they do not approve the order and do not conclude it with the Administrator), the Administrator may take actions that will help its customers complete the purchase process.
   For this purpose, it may, for example, send e-mails containing information about an unfinished order and an incentive to complete the transaction.
   For the purposes of the activities described, it may process such personal data as information provided when placing an order, in particular the user's name and surname and e-mail address, as well as information about the contents of the basket, the date of commencement of the transaction and other data left in connection with the initiated process shopping.
   The legal basis for the processing of personal data is art. 6 sec. 1 lit. b GDPR, because these activities are aimed at concluding a contract. In addition, the Administrator sees the basis for processing in his legitimate interest, which in this case is increasing sales.
4. Handling complaints or withdrawal from the contract:
   If the user submits a complaint or withdraws from the contract, he/she provides personal data contained in the content of the complaint or declaration of withdrawal from the contract.
   Providing data is a condition for submitting a statement of withdrawal from the contract or a complaint.
   The data is processed in order to handle the process of withdrawing from the contract or the complaint process. After the completion of such a process, the data is stored in the archive for the purposes of possible determination, investigation or defense of claims related to the handling of the withdrawal process or the complaint process. The data is also included in the accounting documentation for the purposes of fulfilling tax obligations.
5. Newsletter support:
   By subscribing to the newsletter, the user must provide the data necessary to receive it specified in the subscription form.
   Providing data is a condition for receiving the newsletter.
   In addition, the mailing system saves the IP number used by the user when subscribing to the newsletter, determines his approximate location, the e-mail client he uses to handle e-mail and tracks his actions taken in connection with messages sent to him. Therefore, the Administrator also has information about which messages the user has opened, within which messages he has clicked on links, etc.
   In the mailing system, the Administrator may also define, based on various criteria related to the user's activity, his interests or other preferences, specific groups or segments of newsletter recipients that affect the type of messages he receives as part of the newsletter.
   The data provided by the user in connection with the subscription to the newsletter are used to send him the newsletter, and the legal basis for their processing is the performance of the contract for the provision of electronic services, as well as the legally justified interest of the Administrator, which in this case is the implementation of marketing purposes.
   As for the processing of information that does not come from the user, but has been collected automatically by the mailing system, the Administrator relies in this respect on his legitimate interest consisting in analyzing the behavior of newsletter subscribers in order to optimize mailing activities.
   At any time, the user may unsubscribe from receiving the newsletter by clicking on the dedicated link in each message sent as part of the newsletter, or simply by contacting the Administrator.
   Unsubscribing from the newsletter does not lead to the deletion of user data from the mailing system. The data is stored in the archive for the purpose of possible determination, investigation or defense of claims related to the newsletter, as well as to ensure the possibility of demonstrating that the newsletter activities were conducted in accordance with the law.
6. Comment/feedback support:
   When adding a comment / opinion, the user must provide the data necessary to publish the comment / opinion and receive it specified in the form intended for issuing a comment / opinion.
   Providing data is a condition for the publication of a comment / opinion.
   In addition, the comment/feedback system saves the IP number used by the user when submitting a comment/feedback.
   The comment/feedback system may be operated by a third party provider. In such a situation, the use of the system is subject to the regulations and privacy policy of the external provider. Detailed information on third-party tools can be found in the section dedicated to the tools used by the Administrator.
   The data is processed in order to publish a comment / opinion, which is the legitimate interest of the Administrator.
   The comment or opinion added by the user along with his data made public as part of the settings will be visible on the website. A comment or opinion can be modified or deleted at any time. The deleted comment/opinion together with the user's data goes to the archive for the purpose of possible determination, investigation or defense of claims related to the comment/opinion.
7. Contact and correspondence service:
   By contacting the Administrator via available means of communication, e.g. e-mail, social messengers, chats, etc., the user naturally provides his personal data contained in the content of correspondence.
   Providing data is a condition for establishing contact.
   In addition, the communication system saves the IP number used by the user when sending the message.
   The communication system (e.g. chat, messenger) may be operated by an external provider. In such a situation, the use of the system is subject to the regulations and privacy policy of the external provider. Detailed information on third-party tools can be found in the section dedicated to the tools used by the Administrator.
   The data is processed for the purpose of communication, which is the legitimate interest of the Administrator. After the communication is completed, the data is stored in the archive for the purpose of possible determination, investigation or defense of claims related to the conducted communication.
8. Implementation of tax and accounting obligations:
   In connection with the performance of the contract, the Administrator also performs various tax and accounting obligations, in particular in the form of issuing an invoice, including the invoice in its accounting documentation, storing documentation, etc.
   In order to issue an invoice, it processes, among others, such data as name and surname, company, business address, tax identification number.
   Providing data required by tax law is necessary to fulfill the indicated obligations.
9. Creating an archive:
   For the needs of the activity, the Administrator may create archives: both in traditional and digital form. The archives receive personal data that has been processed in connection with the user, and their scope may vary depending on what data was sent to the Administrator and what scope of data is justified in terms of archiving. In this case, the Administrator relies on its legitimate interest in ordering and organizing personal data carriers.
10. Defending, establishing or pursuing claims:
    Using the Administrator's website, as well as concluding a contract with him, may give rise to specific claims on each of the parties in the future. Therefore, the Administrator is entitled to process personal data in order to defend, establish or pursue claims. As part of this purpose, it may process any personal data that is related to a given claim, therefore their scope may vary depending on what the given claim relates to. In this case, the Administrator relies in this respect on its legitimate interest in protecting its interests.
11. Create ad audiences:
    The user's e-mail address stored in our database may be sent to a specific advertising system (e.g. Facebook Ads, LinkedIN Ads) in order to create a group of advertising recipients using this e-mail address.
    When using this feature, the email address is hashed before it is sent to the respective system to create a group of recipients.
    The e-mail address will be used in the matching process conducted by the respective advertising system.
    The advertising system does not share the email address with third parties or other advertisers and deletes the email address immediately after the matching process is completed.
    The advertising system implements processes and procedures that ensure confidentiality and security of the e-mail address sent to it and the set of user IDs that make up the group of recipients created using the e-mail address, among others, by using technical and physical security measures.
    Creating a group of advertising recipients using the user's e-mail address is the Administrator's legitimate interest, which in this case is the implementation of its marketing goals.
12. Social media support:
    If the user follows the Administrator's profiles on social media or interacts with the content published by him in social media, the Administrator naturally sees the user's data that is publicly available in his social profile. The administrator processes this data only within a given social networking site and only for the purpose of operating a given social networking site, which is its legitimate interest.
    If the user contacts the Administrator via private message, he naturally provides him with his personal data contained in the content of the correspondence, in particular the image and name and surname. In this case, the user's data is processed in order to contact him, and the basis for processing is the legitimate interest of the Administrator.
    It may happen that the Administrator will be the party initiating contact with the user via social media in order to offer cooperation, then his data will be processed in order to search for potential contractors, offer and establish cooperation, which is the Administrator's legitimate interest.
    Messages sent to the Administrator via social media are automatically archived thanks to the tools available within individual social networking sites and are available to him until they are deleted by the user. He has access to all messages exchanged with the Administrator in the tab with private messages.
    The user's use of social networking sites is subject to the regulations and privacy policies of the administrators of these websites, and these administrators provide for him, fully independently and independently of the Administrator, electronic services.
13. Self-marketing using only Anonymous Information:
    The administrator conducts marketing activities using tools provided by external suppliers. As part of marketing tools, he has access only to Anonymous Information. The processing of Anonymous Information is based on a legitimate interest, which consists in creating marketing activities based on Anonymous Information and targeting advertisements within external systems based on Anonymous Information, for the purposes of marketing own products and services. From the level of tools, he can only view a set of statistics and information not assigned to specific people.
    Detailed information on third-party tools can be found in the section dedicated to the tools used by the Administrator.
14. Organization of promotional campaigns:
    In order to increase the sale of products / services, the Administrator may conduct various promotional campaigns, including in cooperation with external partners. The rules related to the organization of promotional campaigns are set out in separate regulations. The scope of personal data that will be processed in connection with the organization of a promotional campaign may vary depending on the type of promotional campaign.
    The legal basis for the processing of the user's personal data is the legitimate interest of the Administrator, which in this case is marketing and increasing the sale of own products.
15. Providing additional features using only Anonymous Information:
    On the Administrator's pages, video or audio players, social widgets, comments module, chat, newsletter forms or other tools provided by third parties may be embedded. All of these tools process Anonymous Information. The processing of Anonymous Information is based on a legitimate interest, which in this case consists in ensuring the possibility of using additional functions on the website. There is no access to other information from the tools level, moreover, this information is not needed by the Administrator for anything - Anonymous Information is processed only so that additional functions can work. Detailed information on third-party tools can be found in the section dedicated to the tools used by the Administrator.
16. Implementation of obligations related to the protection of personal data:
    As the administrator of personal data, the Administrator is obliged to fulfill the obligations related to the protection of personal data. Therefore, it may process the user's personal data as long as it is necessary to perform these duties (e.g. when considering a request regarding the user's personal data). The scope of data depends on what data is needed to fulfill the obligation and prove compliance with the GDPR. In addition, in this case, the Administrator also relies on his legitimate interest, which consists in securing the data necessary to demonstrate accountability.

§4 Information held about the user

The scope of the processed data is described in relation to each processing purpose. Information in this regard can be found above, in point 3 of the Privacy Policy. The data includes information such as:
• first name and last name,
• e-mail adress,
• Phone number,
• IP address,
• address for service,
• billing,
• Bank account number,
• details of the placed order,
• data collected in the mailing system,
• data related to the added comment / opinion,
• information visible in social media profiles,
• information contained in correspondence,
• Anonymous Information.

§5 Source of personal data

1. In most cases, the user provides them to the Administrator himself, e.g. when placing an order.
2. In addition, some information about the user may be automatically collected by the tools used by the Administrator, described in detail in the section devoted to the tools used.
3. In exceptional cases, the Administrator may also obtain the user's personal data from other sources, e.g. when the entity that employs him indicates his data as a contact person in matters related to the concluded contract.

§6 Data security

1. The administrator cares about the security of users' personal data. The risks associated with individual data processing processes have been analyzed, and then appropriate security and personal data protection measures have been implemented. The condition of the technical infrastructure is monitored on an ongoing basis, the staff is trained, the procedures used are analyzed and the necessary improvements are introduced.

§7 Period of storing personal data

1. The administrator processes users' personal data for as long as it is justified within the given purpose of personal data processing, therefore the processing periods vary depending on the purpose. Termination of data processing for one purpose does not necessarily lead to the complete deletion or destruction of personal data, because the same set of data may be processed for another purpose, for the period indicated for it. Complete deletion or destruction of data takes place when the implementation of all purposes is completed and in other cases indicated in the GDPR.
2. Below is a description of the processing periods:

• User account - data related to the user's account are processed for the duration of the user's account;
• Execution of orders and the concluded contract - data related to the contract are processed for the time necessary to conclude and perform the contract;
• Actions taken by customers to complete orders - data related to unfinished orders will be processed for a maximum period of 6 months from the date when the order was placed;
• Complaints and withdrawals from the contract - data related to complaints and withdrawal from the contract are processed for the time necessary to handle the complaint or withdrawal from the contract;
• Newsletter - data related to the newsletter will be processed for the period of using the newsletter;
• Comments / opinions - data related to posting a comment / opinion will be processed until the comment or opinion is deleted;
• Contact and correspondence handling - data related to correspondence handling will be processed for the duration of the contact between the user and the Administrator;
• Tax and accounting obligations - data related to the performance of tax and accounting obligations will be processed for the time provided for in the provisions of the tax law, usually 5 years from the end of the tax year;
• Archive - data related to the archive will be processed until the information contained in the archive is no longer useful;
• Determination, investigation and defense of claims - data related to claims will be processed until the claims expire, the limitation period for claims may vary in the light of applicable law (e.g. in the case of entrepreneurs it may be 3 years, and in the case of consumers 6 years) ;
• Recipient groups - data related to recipient groups will be processed until they become useless or the user successfully raises an objection;
• Analysis and statistics - data related to analytics and statistics will be processed until they become useless or the user successfully raises an objection;
• Own marketing - data related to own marketing will be processed until it becomes useless or the user successfully raises an objection;
• Organization of promotional campaigns - we process data related to the organization of promotional campaigns for the time necessary to carry out the promotional campaign;
• Additional tools - data related to additional tools will be processed until they become useless or the user successfully raises an objection;
• Obligations related to the protection of personal data - data related to the protection of personal data will be processed until they become useless, the user successfully raises an objection or the limitation period for liability as the personal data administrator expires.

3. If the Administrator processes the user's personal data on the basis of the consent given to him by the user, he may withdraw such consent at any time: either through his actions or by contacting the Administrator using the contact details provided. Withdrawal of consent does not affect the lawfulness of the processing that was made on the basis of consent before its withdrawal.

§8 Recipients of personal data

External service providers that are involved in the processing of your personal data are:

• hosting provider - for the purpose of storing data on the server;
• mailing system provider - for the purposes of using the mailing system;
• invoicing system provider - for the purposes of issuing an invoice;
• supplier of the CRM system - for the purpose of improving work;
• chat provider - for contact via chat;
• pop-up display system provider - for the purpose of displaying pop-ups;
• customer service system provider - for the purpose of improving the customer service process;
• provider of a landing page management tool - for the purpose of collecting data via landing pages;
• provider of cloud computing - for the use of cloud solutions;
• accounting office - for the purposes of using accounting services;
• law firm - for the purposes of providing legal services to us;
• technical support - for the purposes of technical work related to those areas where data is processed;
• an entity that executes orders, a courier company, Poczta Polska - for the purposes of logistic handling of orders, the subject of which is a physical product;
• payment processor - for the purpose of processing payments for orders;
• other subcontractors, in particular providers of IT solutions - for the purposes of cooperation with various subcontractors who may have access to the user's personal data if they provide services related to such access.

1. If necessary, the user's data may be made available to a legal adviser or advocate bound by professional secrecy. The need may result from the need to use legal assistance requiring access to the user's personal data.
2. Personal data may also be transferred to tax offices to the extent necessary to fulfill tax, settlement and accounting obligations. This applies in particular to any declarations, reports, statements and other accounting documents in which the user's personal data is included.
3. In addition, if necessary, the user's personal data may be made available to entities, authorities or institutions authorized to access data under the law, such as police, security services, courts, prosecutor's offices.
4. User data is made available to courier companies to the extent necessary to deliver the order. These companies become independent controllers of your personal data.
5. As far as Anonymous Information is concerned, it is available to providers of tools or plug-ins that collect Anonymous Information. The providers of these tools are independent administrators of the data collected in them and may share this data on the terms set out by them in their own regulations and privacy policies, which the Administrator has no influence on.
6. Part of the user's personal data processing operations may involve their transfer to third countries.
7. The user's personal data is transferred to third countries in connection with the use of tools that use resources located in third countries, in particular in the USA. The providers of these tools guarantee an adequate level of protection of personal data through appropriate compliance mechanisms provided for by the GDPR, in particular through the use of standard contractual clauses.
8. Currently, your personal data is transferred to third countries in connection with our use of the following solutions:
   • • • mailing system: MailerLite (UK)
       • email: Google (USA)
       • data backup: Google (USA)
       • ad audiences: Facebook (Ireland)
9. In addition, Anonymous Information collected in connection with the use of the tools indicated in the attachment to this privacy policy may be transferred to third countries, in particular the USA.

§9 User rights

1. The GDPR grants users the following potential rights related to the processing of their personal data:

• the right to access your data and receive a copy thereof;
• the right to rectify (correct) your data;
• the right to delete data (if, in the user's opinion, there are no grounds for his data to be processed, he may request that it be removed);
• the right to limit data processing (the user may request that the Administrator limit the processing of data only to their storage or performance of actions agreed with him, if in his opinion the Administrator has incorrect data or processes them unjustifiably);
• the right to object to data processing (the user has the right to object to data processing on the basis of a legitimate interest; he should indicate a particular situation that, in his opinion, justifies the cessation of processing covered by the objection; the Administrator will stop processing user data for these purposes, unless he can demonstrate that the grounds for data processing by him override the user's rights or that his data is necessary for him to establish, pursue or defend claims);
• the right to transfer data (the user has the right to receive from the Administrator in a structured, commonly used machine-readable format personal data that he provided to him on the basis of a contract or his consent; he can order him to send this data directly to another entity);
• the right to withdraw consent to the processing of personal data, if such consent was previously given;
• the right to lodge a complaint with the supervisory body (if the user finds that the Administrator processes data unlawfully, he or she may submit a complaint to the President of the Office for Personal Data Protection or other competent supervisory body).

§10 Cookies

1. The Administrator's website, like almost all other websites, uses cookies.
2. Cookies are small text information stored on the user's end device (e.g. computer, tablet, smartphone), which can be read by the Administrator's ICT system (own cookies) or third party ICT systems (third party cookies). Cookie files may contain and store specific information, which can then be accessed by ICT systems for specific purposes.
3. Some cookies used by the Administrator are deleted after the end of the web browser session, i.e. after it is closed (so-called session cookies). Other cookies are stored on the user's end device and make it possible to recognize his browser the next time he visits the website (persistent cookies).
4. The Administrator uses cookies on the basis of the user's consent, except when cookies are necessary for the proper provision of electronic services to him.
5. Cookies that are not necessary for the proper provision of electronic services remain blocked until the user agrees to the use of cookies. During his first visit to a given Website, a message is displayed asking for his consent along with the option of managing cookie files, i.e. deciding which cookies he accepts and which he wants to block.
6. The user can manage cookie settings in his web browser. Can block all or selected cookies. It can also block cookies for specific websites. At any time, it can also delete previously saved cookies and other website and plug-in data.
7. Web browsers also offer the option of using incognito mode. The user can use it if he does not want information about visited pages and downloaded files to be saved in the browsing and download history. Cookies created in incognito mode are deleted when all windows of this mode are closed.
8. Browser plug-ins are also available to control cookies. The option to control cookies may also be provided by additional software, in particular anti-virus packages, etc.
9. The administrator also allows you to control cookies directly from the website. A special mechanism for managing cookies has been implemented, which allows the user to block cookies that he does not want.
10. Disabling or limiting the use of cookies may prevent the use of some of the functions available on the websites and cause difficulties in using the Websites, as well as many other websites that use cookies. For example, if social network plug-in cookies are blocked, buttons, widgets, social functions implemented on the Websites may become unavailable.
11. Own cookies are used to ensure the proper functioning of individual website mechanisms, such as remembering the contents of the basket for a certain period of time after adding selected products to it, correct sending of forms visible on the pages, handling of newsletter forms, etc. Own cookies also store information about defined by the user with cookie settings made from the level of the cookie management mechanism.
12. The list of tools that require the use of cookies and the description of the cookies used can be found in the attachment to this Privacy Policy.

§11 Final provisions

1. The Privacy Policy enters into force on the day of its publication on the Website.
2. The Administrator reserves the right to make changes to the Privacy Policy, which come into force on the day of their publication on the Website, in particular due to technological changes and changes in the law.
3. This Privacy Policy is effective from January 1, 2023.

Annex to the Privacy Policy - a list of tools that use Cookies

1. Google Tag Manager:
   The administrator uses the Google Tag Manager tool provided by the American company Google LLC, which is used to manage tags and load scripts on the website.
   Google Tag Manager as a tool itself does not collect any information other than those necessary for its proper operation, but it is responsible for loading other scripts described below.
2. Google Analytics:
   The administrator uses the Google Analytics tool provided by the American company Google LLC. In order to use Google Analytics, a special Google Analytics tracking code has been implemented in the website code. The tracking code uses cookies for the Google Analytics service. At any time, the user can block the Google Analytics tracking code by installing a browser add-on provided by Google.
   Google Analytics automatically collects information about user activity on our website. As part of Google Analytics, we only have access to Anonymous Information.
   Thanks to the information collected in this way, the Administrator can conduct analyzes of user behavior on its website and keep related statistics, and then draw conclusions from these statistics in order to design solutions that improve the efficiency of the website.
3. Meta Pixel:
   The administrator uses the Meta advertising system provided by the American company Meta Platform Inc. In order to target users with personalized advertisements in terms of their behavior on the website, the Administrator implemented Pixel Meta as part of the website, which automatically information about users' activity on the website, then sent to the Meta advertising system.
   As part of the advertising system, the Meta Administrator has access only to Anonymous Information.
   Thanks to the information collected in this way, it is able to display advertisements to users as part of the Meta advertising system, depending on their behavior on the website, and to measure the effectiveness of advertising campaigns in order to draw conclusions allowing for the optimization of these campaigns in terms of effectiveness.
   Meta Platform Inc. may combine information collected using Pixel Meta with other information about users collected as part of their use of websites managed by the company (e.g. Facebook, Instagram) and use for their own purposes, including marketing. Such Meta activities are not dependent on the Administrator, and you can search for information about them directly in the Meta privacy policy. You can manage your privacy settings from your Facebook account.
4. Facebook Connect:
   The website uses plug-ins, buttons and other social tools, hereinafter collectively referred to as "plug-ins", related to social networking sites managed by the American company Meta Platform Inc.
   Thanks to this, the user has the opportunity to use selected social functions on the pages, e.g. the like button, share, etc.
   Plugins collect information about user activity on the website. The administrator does not have access to this information.
   The information collected by plug-ins may be used by Meta Platform Inc. for own purposes, such as improving own products, creating user profiles, analyzing and optimizing own activities, targeting ads, on which the Administrator has no real influence.
5. Google Ads:
   The administrator uses the remarketing functions available as part of the Google advertising system provided by the American company Google LLC. When visiting a website, a Google remarketing cookie file is automatically left on the user's device, which collects information about the user's activity on the website.
   Thanks to the information collected in this way, the Administrator is able to display advertisements to users within the Google network depending on their behavior on the website.
   For example, if the user displays a product, information about this fact will be recorded by the remarketing cookie file, which will allow the Administrator to direct an advertisement to the user regarding this product or any other that he considers appropriate.
   This advertisement will be displayed to the user within the Google network while using the Internet, browsing other websites, etc. When using Google Ads, the Administrator uses only Anonymous Information.
   Using Google Ads, the Administrator is only able to define the groups of recipients to whom he would like his ads to reach. On this basis, Google decides when and how to present the advertisement to the user.
6. Pinterest:
   The administrator may use the advertising functions available as part of the Pinterest website provided by the American company Pinterest, Inc. In order to target the user with personalized ads in terms of his behavior on the website, the Administrator implemented the Pinterest Tag as part of the website, which automatically sends information about the user's activity on the website to the Pinterest advertising system.
   As part of the Pinterest advertising system, we only have access to Anonymous Information.
   Thanks to the information collected in this way, the Administrator is able to display advertisements to users as part of the Pinterest advertising system, depending on their behavior on the website, and measure the effectiveness of advertising campaigns in order to draw conclusions allowing for the optimization of these campaigns in terms of effectiveness.
   The information collected by the Pinterest Tag is also used by Pinterest, Inc. to deliver advertising and reporting, improve security on Pinterest, research and product development. This information is also used to generate aggregate and anonymous measurements about the use of the Pinterest advertising service, for example to calculate the total number of conversions made through Pinterest. Details in this regard are described in the Pinterest privacy policy.
7. MailerLite:
   The administrator uses the MailerLite mailing system provided by the Irish company MailerLite Limited. Subscription forms for mailing lists embedded on the pages may use cookie technology to ensure the proper functioning of these forms and measure their conversion. The Administrator has no access to the information collected in MailerLite cookies for the proper functioning of the forms - he is only interested in the form working properly. When it comes to measuring the conversion of subscription forms, the Administrator has access only to anonymous statistical information.
   In addition, we use an additional function of the MailerLite system to control the frequency of displaying pop-ups with mailing list subscription forms to users. For this purpose, a MailerLite cookie is used, which stores information about the pop-up being displayed to the user in order not to display it again for a certain period of time.
   In addition, the Administrator can use an additional function of the MailerLite system - a website builder. The websites created in this way are stored as part of the MailerLite infrastructure and use MailerLite cookies to ensure their proper operation and provide insight into anonymous statistics that allow you to assess the effectiveness of the websites.
8. edron:
   The administrator uses the edrone mailing system provided by the Polish company edrone Sp. z o. o. Subscription forms for mailing lists embedded on websites may use cookie technology to ensure the proper functioning of these forms and measure their conversion. The Administrator has no access to the information collected in edrone cookies for the proper functioning of the forms. When it comes to measuring the conversion of subscription forms, the Administrator has access only to anonymous statistical information.
   In addition, the Administrator uses an additional function of the edrone system, which is tracking behavior on websites of people who are in the Administrator's mailing databases.
   The edrone tracking code is embedded in the website code, which collects information about the activity of users on the website. If the user is in the Administrator's mailing database, the information collected by the tracking code is available to him as part of his user profile. Otherwise, the collected information remains anonymous.
   Thanks to the information collected in this way, the Administrator is able to send e-mails to users tailored to their needs or interests inferred from activities undertaken on the website.
9. YouTube:
   YouTube widgets are embedded on the Administrator's websites, allowing users to play recordings available on YouTube directly from the Administrator's websites. YouTube is operated by the American company Google LLC.
   When the user plays the recording, YouTube saves cookies on his device and receives information that he played the recording from a specific website, even if he does not have a Google account or is not currently logged in. If the user has logged in to a Google account, this service provider will be able to directly assign the visit to the website to his account. The purpose and scope of data collection and their further processing and use by Google, as well as the possibility of contact and the user's rights in this regard and the possibility of making settings that ensure the protection of his privacy are described in Google's privacy policy.
   If you do not want Google to assign the data collected during video playback directly to your profile, you must log out of your account before playing the video. It can also completely prevent the loading of plug-ins on the website by using appropriate extensions for its browser, e.g. blocking scripts.
   Information collected as part of cookies related to YouTube videos embedded on websites are used by Google to ensure the proper and safe functioning of the widget, analysis and optimization in the field of services provided by YouTube, as well as for personalization and advertising purposes. The administrator does not have access to this information. For him, it is only important that the player works properly.
   By playing the recordings available on YouTube, the user uses services provided electronically by Google LLC. Google LLC is an independent entity, independent of the Administrator, providing electronic services to the user. Details regarding the rules of using YouTube, including privacy protection, can be found in the documents provided directly by YouTube: regulations and privacy policy.
10. Vimeo:
    Vimeo widgets are embedded on the Administrator's pages, allowing users to play the recordings available on the pages. Vimeo is operated by the American company Vimeo.com Inc.
    When the user plays the recording, Vimeo saves cookies on his device and receives information that he played the recording from a specific website. The purpose and scope of data collection and their further processing and use by Vimeo, as well as the possibility of contact and his rights in this regard and the possibility of making settings to protect his privacy are described in Vimeo's privacy policy.
    The information collected as part of cookies related to videos embedded on websites is used by Vimeo to ensure the correct and safe functioning of the widget, analysis and optimization in the scope of services provided by Vimeo, as well as for personalization and advertising purposes. The administrator does not have access to this information. For him, it is only important that the player works properly.
    By playing the recordings available on the pages, the user uses the services provided electronically by Vimeo. Vimeo is an independent entity, independent of the Administrator, providing electronic services to the user. Details regarding the rules of using Vimeo, including the protection of privacy, can be found in the documents provided directly by Vimeo: regulations and privacy policy.
11. SoundCloud:
    SoundCloud widgets are embedded on the Administrator's pages, allowing users to play recordings available on the SoundCloud website directly from the pages. SoundCloud is operated by the German company SoundCloud Limited.
    When a user visits a page with an embedded SoundCloud widget, SoundCloud receives certain information, including information about the website visited and interactions with the widget. SoundCloud and the widget can recognize users, in particular using cookie technology. SoundCloud uses the information collected in this way to ensure the correct and secure functioning of the widget, analysis and optimization of the services provided by SoundCloud, as well as for personalization and advertising purposes. The administrator does not have access to this information. For him, it is only important that the player works properly.
    By playing the recordings available on SoundCloud, the user uses services provided electronically by SoundCloud. SoundCloud is an independent entity, independent of the Administrator, providing electronic services to the user. Details regarding the rules of using SoundCloud, including privacy protection, can be found in the documents provided directly by SoundCloud: regulations and privacy policy.
12. hot jar:
    The administrator can use the Hotjar tool to better understand the needs of users and optimize the website in terms of their experience related to its use. The tool is provided by Hotjar Limited.
    Hotjar records each visitor to the site and allows you to play a video recording of their movement on the site, as well as generate the so-called. heat maps. As part of the Hotjar tool, the Administrator does not have access to information that allows us to identify the user, because Hotjar does not record the process of filling out forms intended for the transfer of personal data.
    In order to use Hotjar, the Administrator has implemented a special Hotjar tracking code in the code of our website. The tracking code uses cookies from Hotjar Limited. The information collected as part of cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor the Administrator uses this information to identify users.
    You can object to Hotjar creating your user profile, Hotjar storing information about your use of the site and the use of Hotjar cookies.
    Details regarding the rules of using Hotjar, including privacy protection, can be found in the documents provided directly by Hotjar's privacy policy.
13. Microsoft Clarity:
    The administrator can use the Microsoft Clarity tool to better understand the needs of users and optimize the site in terms of their experience related to using it. The tool is provided by Microsoft Corporation.
    Microsoft Clarity registers each visitor to the website and allows you to play a video recording of their movement on the website, as well as generate the so-called. heat maps. As part of the Microsoft Clarity tool, the Administrator does not have access to information that allows him to identify the user, because Microsoft Clarity does not record the process of filling out forms intended for the transfer of personal data.
    In order to use Microsoft Clarity, the Administrator has implemented a special Microsoft Clarity tracking code in our code. The tracking code uses Microsoft Corporation cookies. The information collected as part of cookies is stored by Microsoft as part of a pseudonymous user profile. Neither Microsoft nor the Administrator use this information to identify users.
    If you are interested in details related to data processing under Microsoft Clarity, we encourage you to read the FAQ section on the Microsoft Clarity website.