Privacy Policy

1. General Information

1. This policy applies to the Website operating at: aligator.com.pl
2. The operator of the website and the Administrator of personal data is: FIRMA PRODUKCYJNO-HANDLOWO-USŁUGOWA “ALIGATOR” JERZY PRZEMYSKI, Lesser Poland Voivodeship, Kraków County, Kraków, ul. Sielska 14, 30-421, VAT No. 6790174268, REGON 350670531
3. The operator’s contact email address: sprzedaz@aligator.com.pl
4. The Operator is the Administrator of your personal data in relation to data provided voluntarily on the Website.
5. The Website uses personal data for the following purposes:
• Handling enquiries submitted via the contact form
• Fulfilment of ordered services
• Presentation of offers or information
6. The Website collects information about users and their behaviour in the following ways:
   1. Through data voluntarily entered in forms, which is then entered into the Operator’s systems.
   2. By saving cookie files on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login areas and personal data entry points are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the site are encrypted on the user’s device and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the Operator with the key can read it. This protects data in the event of the database being stolen from the server.
3. User passwords are stored in hashed form. The hashing function works in one direction — it cannot be reversed, which represents the current modern standard for storing user passwords.
4. The Operator periodically changes their administrative passwords.
5. To minimise the risk of unauthorised access to data, the Operator uses complex passwords containing lower and upper case letters, digits and special characters, no shorter than 8 characters.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
7. To protect data, the Operator regularly performs backups.

3. Hosting

1. The Website is hosted (technically maintained) on the operator’s server: home.pl
2. The hosting company, in order to ensure technical reliability, maintains logs at the server level. The following may be recorded:
   • Resources identified by URL (addresses of requested resources – pages, files),
   • Time of request arrival,
   • Time of response,
   • Client station name – identification via HTTP protocol,
   • Information about errors occurring during HTTP transactions,
   • URL of the page previously visited by the user (referrer link) – in cases where access to the Website occurred via a link,
   • Information about the user’s browser,
   • Information about IP address,
   • Diagnostic information related to the process of self-ordering services via recorders on the site,
   • Information related to handling email directed to the Operator and sent by the Operator.

4. Your Rights and Additional Information on How Data is Used

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if this is necessary to perform the contract concluded with you or to fulfil obligations incumbent on the Administrator. This applies to the following recipient groups:
   • The hosting company on a data processing basis
   • Operators of online chat solutions
   • Companies providing marketing services on behalf of the Administrator
2. Your personal data is processed by the Administrator no longer than necessary to perform the related activities defined by separate regulations (e.g. on keeping accounts). With regard to marketing data, data will not be processed for longer than 3 years.
3. You have the right to request from the Administrator:
   • Access to personal data concerning you,
   • Rectification thereof,
   • Erasure,
   • Restriction of processing,
   • And data portability.
4. You have the right to object to the processing referred to in point 3.3 c) regarding the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling, although the right to object will not be exercisable where there are valid legally justified grounds for processing that override your interests, rights and freedoms, in particular the establishment, pursuit or defence of claims.
5. You have the right to lodge a complaint about the Administrator’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Provision of personal data is voluntary but necessary to use the Website.
7. You may be subject to automated decision-making, including profiling, for the purpose of providing services under the concluded contract and for the purpose of direct marketing carried out by the Administrator.
8. Personal data is transferred to third countries within the meaning of data protection regulations. This means we send it outside the European Union.

5. Information in Forms

1. The Website collects information voluntarily provided by the user, including personal data if provided.
2. The Website may save information about connection parameters (timestamp, IP address).
3. The Website may, in some cases, save information facilitating the linking of form data with the email address of the user completing the form. In such a case, the user’s email address appears within the URL of the page containing the form.
4. Data provided in the form is processed for the purpose arising from the function of the specific form, e.g. to process a service request or for commercial contact, service registration, etc. In each case, the context and description of the form clearly informs what it is used for.

6. Administrator Logs

1. Information about user behaviour on the website may be subject to logging. This data is used for the purpose of administering the website.

7. Significant Marketing Techniques

1. The Operator uses statistical traffic analysis on the website via Google Analytics (Google Inc., based in the USA). The Operator does not pass personal data to this service provider, only anonymised information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

8. Cookie Policy

1. The Website uses cookies.
2. Cookies are IT data, in particular text files, which are stored on the Website User’s end device and are intended for use on the Website’s pages. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
3. The entity placing cookies on the Website User’s end device and accessing them is the Website operator.
4. Cookies are used for the following purposes:
   1. Maintaining the Website User’s session (after logging in), thanks to which the user does not have to re-enter their login and password on each subpage;
   2. Achieving the purposes specified above in the “Significant Marketing Techniques” section;
5. The Website uses two main types of cookies: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the User’s end device until they log out, leave the website or turn off the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
6. Web browsing software (web browser) usually allows cookies to be stored on the User’s end device by default. Website Users can change settings in this regard. The web browser enables the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this subject is contained in the browser’s help or documentation.
7. Restrictions on the use of cookies may affect some functionalities available on the Website’s pages.
8. Cookies placed on the Website User’s end device may also be used by entities cooperating with the Website operator, in particular: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice

1. If the user does not want to receive cookies, they can change their browser settings. We note that disabling cookie support necessary for authentication processes, security and maintaining user preferences may make it difficult, and in extreme cases impossible, to use websites.
2. To manage cookie settings, select your web browser from the list below and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone