Privacy Policy

1. General Information
This policy applies to the website operating at the URL: hekladesign.webflow.io
The operator of the website and the Administrator of personal data is: Aleksandra Kowalczyk
The contact email address for the operator: hekladesign11@gmail.com
The operator is the Administrator of your personal data in relation to the data voluntarily provided on the website.
The website uses personal data for the following purposes:

• Handling inquiries through forms
• Presentation of offers or information

The website collects information about users and their behavior in the following ways:

• Through data voluntarily entered in forms, which is then entered into the operator's systems.
• By storing cookies (so-called "cookies") on users' devices.

2. Selected Data Protection Methods Used by the Operator
An important element of data protection is the regular update of any software used by the operator for processing personal data, which primarily involves regular updates of software components.

3. Hosting
The website is hosted (technically maintained) on the operator's servers: cyberFolks.pl
The hosting company maintains logs on the server level to ensure technical reliability. The following data may be logged:

• Resources identified by URL (requested resources – pages, files),
• Time of query arrival,
• Time of response sent,
• Client station name – identification performed via the HTTP protocol,
• Information about errors during HTTP transaction processing,
• URL of the previously visited page (referer link) – if the website was accessed via a link,
• Information about the user's browser,
• Information about the user's IP address,
• Diagnostic information related to the process of self-ordering services through registration forms on the page,
• Information related to the handling of email correspondence sent to and from the operator.

4. Your Rights and Additional Information on Data Usage
In some cases, the administrator has the right to share your personal data with other recipients if necessary to fulfill the contract with you or to carry out obligations imposed on the administrator. This may include:

• Hosting company under the terms of entrustment,
• Postal service providers

Your personal data will be processed by the administrator for no longer than necessary to perform related actions determined by separate regulations (e.g., accounting). Regarding marketing data, data will not be processed for longer than 3 years.
You have the right to request from the administrator:

• Access to your personal data,
• Rectification,
• Deletion,
• Restriction of processing,
• Data portability.

You also have the right to object to the processing of your data under point 3.2 for the purpose of fulfilling the administrator's legitimate interests, including profiling, unless there are important legal grounds for processing, which take precedence over your interests, rights, and freedoms, particularly for the establishment, exercise, or defense of legal claims.
You can file a complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary, but necessary for the website's functionality.
Automated decision-making, including profiling, may take place to provide services under the contract or for direct marketing by the operator.

5. Information in Forms
The website collects information provided voluntarily by users, including personal data if provided.
The website may record connection parameters (time stamps, IP address).
The website may, in some cases, record information that facilitates linking form data with the user's email address. In such cases, the email address appears in the URL of the page containing the form.
The data provided in the form is processed for the purpose defined by the specific form, such as service request handling, business contact, service registration, etc. The form's context and description clearly inform users of its purpose.

6. Administrator’s Logs
User behavior on the website may be logged. This data is used for website administration.

7. Key Marketing Techniques
The operator uses statistical analysis of website traffic via Google Analytics (Google Inc., USA). The operator does not provide personal data to the service provider, only anonymized information. The service relies on the use of cookies on the user's device.
Users can review and edit information related to Google network cookies using the tool: https://www.google.com/ads/preferences/
The operator uses remarketing techniques, allowing tailored advertising based on user behavior on the site, but no personal data is transferred to advertising operators.
The operator uses the Facebook Pixel, which allows Facebook to know that a registered user has visited the website. This is based on data for which Facebook is the administrator. The operator does not transfer additional personal data to Facebook.
The operator uses solutions that track user behavior by creating heat maps and recording on-site behavior. These are anonymized before being sent to the service provider. Specific actions like entering passwords or other personal data are not recorded.

8. Cookie Information
The website uses cookies.
Cookies are data, especially text files, stored on the user’s device to use the website’s services. Cookies usually contain the website name, the duration they are stored on the user’s device, and a unique number.
The entity placing cookies on the user’s device and accessing them is the operator of the website.
Cookies are used for:

• Keeping user sessions active (after logging in), so users don’t need to re-enter login credentials on each page,
• Performing marketing and statistical functions.

The website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary and stored until the user logs out, leaves the website, or closes the browser. Persistent cookies remain stored for a specified time or until deleted by the user.
Users can change their browser settings to block cookies or delete them. Detailed information is provided in the browser's help or documentation.

9. Managing Cookies – How to Express and Withdraw Consent
If users do not want to receive cookies, they can change their browser settings. However, please note that disabling cookies necessary for authentication, security, and maintaining user preferences may impair, and in some cases, prevent, the use of the website.