The privacy policy describes the principles of processing information about you, including personal data and cookies.

1. General Information

This policy applies to the website operating at the following URL: grafapol.pl
The operator of the website and the administrator of personal data is: GRAFAPOL-BIS Tadeusz Chlebowicz Trakt Brzeski 5 Street, 05-077 Zakręt, Poland
Contact email address of the operator: biuro@grafapol.pl
The operator is the administrator of your personal data in relation to data voluntarily provided on the website.
The website uses personal data for the following purposes:
- Handling inquiries through forms
- Presenting offers or information
The website collects information about users and their behavior in the following ways:
By voluntarily entering data into forms, which are then entered into the operator's systems.
By storing cookie files (so-called "cookies") on end-user devices.

2. Selected Data Protection Methods Used by the Operator

Places for logging in and entering personal data are protected in the transmission layer (SSL certificate). This ensures that personal data and login data entered on the website are encrypted on the user's computer and can only be read on the target server.
The operator periodically changes their administrative passwords.
An essential element of data protection is the regular update of all software used by the operator for processing personal data, which includes regular updates of programming components.

3. Hosting

The website is hosted (technically maintained) on the operator's server: zenbox.pl

4. Your Rights and Additional Information on Data Use

In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfill obligations incumbent on the Administrator. This applies to such groups of recipients:
- authorized employees and associates who use data to achieve the website's purpose
Your personal data processed by the Administrator will not be stored for longer than necessary to perform activities related to them, as specified by separate regulations (e.g., accounting regulations). In the case of marketing data, they will not be processed for more than 3 years.
You have the right to request from the Administrator:
- access to your personal data,
- rectification,
- erasure,
- restriction of processing,
- and data portability.

You have the right to object to the processing specified in point 3.3 c) regarding the processing of personal data for the purpose of pursuing the legitimate interests of the Administrator, including profiling. However, the right to object cannot be exercised if there are overriding legitimate grounds for processing, overriding your interests, rights, and freedoms, particularly for establishing, pursuing, or defending legal claims.
You have the right to lodge a complaint with the President of the Personal Data Protection Office, Stawki 2 Street, 00-193 Warsaw.
Providing personal data is voluntary but necessary to use the website's services.
Actions may be taken towards you that involve automated decision-making, including profiling, to provide services under a contract and for the Administrator's direct marketing.
Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer them outside the European Union territory.

5. Information in Forms

The website collects information voluntarily provided by the user, including personal data, if provided.
The website may store information about connection parameters (time stamps, IP address).
In some cases, the website may store information that facilitates linking data in the form with the user's email address when completing the form. In this case, the user's email address appears within the URL of the page containing the form.
Data provided in the form is processed for the purpose arising from the specific form's function, e.g., to handle service requests, commercial contacts, service registrations, etc. Each time, the context and description of the form clearly inform you of its purpose.

6. Administrator's Logs

Information about user behavior on the website may be subject to logging. This data is used for website administration purposes.

7. Key Marketing Techniques

The operator employs statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not transmit personal data to the service provider but only anonymized information. The service relies on the use of cookies on the user's device. In terms of user preference information collected by the Google advertising network, users can view and edit the information derived from cookies using the following tool: https://www.google.com/ads/preferences/
The operator uses remarketing techniques that allow for the customization of advertising messages based on user behavior on the website. This may create an illusion that user's personal data are being used for tracking, but in practice, no personal data is transferred from the operator to advertising providers. The technological condition for such actions is the enabled use of cookies.

8. Information About Cookies

The website uses cookies.
Cookies (often referred to as "cookies") are computer data, specifically text files, stored on the end device of the Service User and intended for the use of the website. Cookies typically contain the name of the website they come from, the duration of their storage on the end device, and a unique number.
The entity placing cookies on the Service User's end device and accessing them is the Service operator.
Cookies are used for the following purposes:
- maintaining the user's session on the Service (after logging in), allowing the user not to re-enter their login and password on every subpage of the Service;
- achieving the goals specified above in the "Key Marketing Techniques" section;
Two fundamental types of cookies are used within the Service: "session cookies" and "persistent cookies." "Session cookies" are temporary files stored on the user's end device until they log out, leave the website, or close the web browser software. "Persistent cookies" are stored on the user's end device for a time specified in the cookie parameters or until they are deleted by the user.
Web browsing software (web browser) usually allows cookies to be stored on the user's end device by default. Service Users can change their settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this topic can be found in the web browser's help or documentation.
Limitations on the use of cookies may affect some functionalities available on the Service's websites.
Cookies placed on the Service User's end device may also be used by entities cooperating with the Service operator, particularly concerning companies such as Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), and Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice?

If a user does not wish to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for the authentication, security, and maintaining user preferences processes may make it difficult and, in extreme cases, may prevent the use of websites.
To manage cookie settings, select the internet browser you are using from the list below and follow the instructions:
- Edge
- Internet Explorer
- Chrome
- Safari
- Firefox
- Opera
Mobile devices:
- Android
- Safari (iOS)
- Windows Phone