Privacy policy

This privacy policy describes the principles of processing information about you, including personal data and cookies (so-called cookies).

1. General Information

  1. This policy applies to the website functioning under the URL: avalon-machines.pl
  2. The operator of the service and the Administrator of personal data is: Avalon Machines Sp. z o.o., ul. Grunwaldzka 38, 84-351 Nowa Wieś Lęborska
  3. The contact email address of the operator: biuro@avalon-machines.pl
  4. The operator is the Administrator of your personal data with regard to the data provided voluntarily on the website.
  5. The website uses personal data for the following purposes:
    a. Handling inquiries via the form
    b. Fulfillment of ordered services
  6. The website obtains information about users and their behavior in the following ways:
    a. Through data voluntarily entered into forms, which are introduced into the Operator’s systems.
    b. By saving cookies on end devices (so-called “cookies”).

2. Selected methods of data protection used by the Operator

  1. Places of logging in and entering personal data are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the target server.
  2. User passwords are stored in a hashed form. The hashing function works one-way – it is not possible to reverse its operation, which is the current standard for storing user passwords.
  3. To protect data, the Operator regularly makes backup copies.
  4. An important element of data protection is the regular update of all software used by the Operator for processing personal data, which includes regular updates of programming components.

3. Hosting

  1. The website is hosted (technically maintained) on the servers of the operator: home.pl
  2. The hosting company, to ensure technical reliability, maintains logs at the server level. The following may be recorded:
    a. Resources specified by URL identifier (requested resources – pages, files),
    b. The time of request arrival,
    c. The time the response was sent,
    d. The name of the client’s station – identification realized through the HTTP protocol,
    e. Information about errors that occurred during the execution of the HTTP transaction,
    f. The URL of the page previously visited by the user (referer link) – if the transition to the Service was made via a link,
    g. Information about the user’s browser,
    h. Information about the IP address,
    i. Diagnostic information related to the process of self-ordering services through the recorders on the page,
    j. Information related to the handling of emails sent to and by the Operator.

4. Your rights and additional information on data usage

  1. To fulfill the obligations arising from data protection regulations and to ensure real data protection, the Operator has appointed a Data Protection Officer.
  2. The Data Protection Officer is: Mateusz Juniewicz, address: ul. Grunwaldzka 38, 84-351 Nowa Wieś Lęborska, electronic contact: biuro@avalon-machines.pl
  3. In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill obligations imposed on the Administrator. This applies to the following groups of recipients:
    a. The hosting company on a basis of entrustment,
    b. Couriers,
    c. Banks,
    d. Authorized employees and collaborators who use the data for the purpose of website operation.
  4. Your personal data processed by the Administrator is stored no longer than necessary to perform actions related to it, as defined by specific regulations (e.g., on accounting). For marketing-related data, it will not be processed for more than 3 years.
  5. You have the right to request from the Administrator:
    a. Access to your personal data,
    b. Its rectification,
    c. Its deletion,
    d. The restriction of its processing,
    e. Data portability.
  6. You have the right to object to the processing described in point 3.2 regarding the processing of personal data for the purpose of performing legitimate interests pursued by the Administrator, including profiling, but the right to object cannot be exercised if there are valid, legally justified reasons for processing, overriding your interests, rights, and freedoms, in particular the establishment, exercise, or defense of claims.
  7. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  8. Providing personal data is voluntary, but necessary for the operation of the website.
  9. Automated decision-making activities, including profiling, may be undertaken concerning you to provide services under the contract and for the Administrator’s direct marketing.
  10. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.

5. Information in forms

  1. The website collects information provided voluntarily by the user, including personal data if provided.
  2. The website may save information about connection parameters (time stamp, IP address).
  3. In some cases, the website may save information facilitating the connection of data in the form with the email address of the user filling out the form. In such a case, the user’s email address appears inside the URL of the page containing the form.
  4. The data provided in the form is processed for purposes resulting from the function of the specific form, e.g., to handle a service request or a business contact, registration of services, etc. The context and description of the form clearly indicate its purpose.

6. Administrator logs

  1. Information about user behavior on the website may be subject to logging. These data are used to administer the website.

7. Important marketing techniques

  1. The operator uses statistical traffic analysis on the website through Google Analytics (Google Inc. based in the USA). The operator does not provide personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s device. Users can view and edit information collected by Google’s advertising network using the tool: https://www.google.com/ads/preferences/

8. Information about cookies

  1. The website uses cookies.
  2. Cookies (so-called “cookies”) are IT data, in particular, text files, stored in the user’s end device and intended for the use of the website. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device, and a unique number.
  3. The entity placing cookies on the user’s end device and accessing them is the operator of the website.
  4. Cookies are used for the following purposes:
    a. Maintaining the user’s session on the website (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the website;
    b. Implementation of the purposes specified above in the section “Important marketing techniques”.
  5. Two main types of cookies are used within the website: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the user’s end device until they log out, leave the website, or close the web browser. “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until the user deletes them.
  6. Web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Users of the website can change these settings. The web browser allows the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this topic is contained in the help or documentation of the browser.
  7. Restrictions on the use of cookies may affect some functionalities available on the website.
  8. Cookies placed on the user’s end device may also be used by entities cooperating with the operator of the website, in particular, this concerns companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to practically express and withdraw consent?

  1. If the user does not want to receive cookies, they can change the browser settings. Please note that disabling cookies necessary for authentication, security, and user preferences maintenance may make it difficult, and in extreme cases, impossible to use the website.
  2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

Mobile devices: