This Privacy Policy describes the rules governing how we process information about you, including personal data and cookies.

1. General information

  1. This policy applies to the website operating at: upmservice.eu
  2. The website operator and Personal Data Controller is: UPM SERVICE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. PRZEMYSŁOWA 31-35, 33-170 TUCHÓW
  3. Operator contact email address: This email address is being protected from spambots. You need JavaScript enabled to view it.
  4. The Operator is the Controller of your personal data with regard to data voluntarily provided through the Website.
  5. The Website uses personal data for the following purposes:
    • Operating a newsletter
    • Operating a comment system
    • Conducting online chat conversations
    • Handling enquiries submitted through forms
    • Preparing, packing and shipping goods
    • Providing ordered services
    • Debt collection
    • Presenting offers or information
  6. The Website obtains information about users and their behaviour in the following ways:
    1. Through data voluntarily entered into forms and subsequently entered into the Operator's systems.
    2. Through cookies stored on users' end devices.

2. Selected data protection methods used by the Operator

  1. Login areas and locations where personal data is entered are protected during transmission using an SSL certificate. As a result, personal data and login details entered on the website are encrypted on the user's computer and can only be read by the destination server.
  2. Personal data stored in the database is encrypted in such a way that it can only be read using a key held by the Operator. This protects the data in the event that the database is stolen from the server.
  3. User passwords are stored in hashed form. The hashing function is one-way and cannot be reversed, which is currently a standard method of storing user passwords.
  4. The Operator periodically changes its administrative passwords.
  5. To protect data, the Operator regularly creates backups.
  6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, in particular regular updates of software components.

3. Hosting

  1. The Website is hosted and technically maintained on servers operated by: home.pl

4. Your rights and additional information on how data is used

  1. In certain situations, the Controller may disclose your personal data to other recipients where this is necessary to perform a contract concluded with you or to fulfil obligations imposed on the Controller. This applies to the following categories of recipients:
    • courier companies
    • postal operators
    • law firms and debt collection agencies
    • payment service providers
    • comment system operators
    • online chat solution providers
    • authorised employees and associates who use the data for purposes related to the operation of the Website
    • companies providing marketing services to the Controller
  2. Your personal data is processed by the Controller only for as long as necessary to perform the activities related to it, as specified by separate regulations, such as accounting regulations. Marketing data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • rectification of your data,
    • erasure of your data,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing referred to in point 3.3(c), where personal data is processed for the purposes of legitimate interests pursued by the Controller, including profiling. However, the right to object may not apply where there are compelling legitimate grounds for processing which override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.
  5. You have the right to lodge a complaint concerning the Controller's activities with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
  6. Providing personal data is voluntary but necessary for the operation of the Website.
  7. You may be subject to automated decision-making, including profiling, for the purpose of providing services under a concluded contract and for the Controller's direct marketing purposes.
  8. Personal data is not transferred to third countries within the meaning of personal data protection regulations. This means that we do not transfer it outside the European Union.

5. Information in forms

  1. The Website collects information voluntarily provided by the user, including personal data if such data is provided.
  2. The Website may record information about connection parameters, such as timestamp and IP address.
  3. In some cases, the Website may record information that helps link data entered in a form with the email address of the user completing the form. In such cases, the user's email address appears within the URL of the page containing the form.
  4. Data provided in forms is processed for purposes resulting from the function of the specific form, for example to handle a service request or business enquiry, register services, etc. In each case, the context and description of the form clearly indicate its purpose.

6. Administrator logs

  1. Information about user behaviour on the Website may be logged. This data is used for administration of the Website.

7. Important marketing techniques

  1. The Operator uses Google Analytics (Google Inc., based in the USA) to analyse website traffic statistics. The Operator does not provide personal data to the provider of this service, but only anonymised information. The service uses cookies stored on the user's end device. With regard to information about user preferences collected by Google's advertising network, users can view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/
  2. The Operator uses remarketing techniques that make it possible to tailor advertising messages to the user's behaviour on the Website. This may give the impression that the user's personal data is being used to track them, although in practice no personal data is transferred by the Operator to advertising network operators. Such activities require cookies to be enabled.
  3. The Operator uses the Facebook Pixel. This technology allows Facebook (Facebook Inc., based in the USA) to know that a person registered with Facebook is using the Website. Facebook relies on data for which it is itself the controller, and the Operator does not provide Facebook with any additional personal data. The service uses cookies stored on the user's end device.
  4. The Operator uses a solution that analyses user behaviour by creating heat maps and recording behaviour on the Website. This information is anonymised before being sent to the service provider so that the provider does not know which individual it relates to. In particular, passwords and other personal data entered by users are not recorded.
  5. The Operator uses a solution that automates Website activities in relation to users, for example by sending an email to a user after they visit a specific page, provided that the user has consented to receiving commercial communications from the Operator.

8. Information about cookies

  1. The Website uses cookies.
  2. Cookies are IT data, in particular text files, stored on the Website User's end device and intended for use with the Website. Cookies usually contain the name of the website from which they originate, the period for which they are stored on the end device and a unique number.
  3. The entity placing cookies on the Website User's end device and accessing them is the Website Operator.
  4. Cookies are used for the following purposes:
    1. maintaining the Website User's session after login, so that the user does not have to re-enter their login and password on every page of the Website;
    2. achieving the purposes described above in the section "Important marketing techniques";
  5. The Website uses two main types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User's end device until the user logs out, leaves the website or closes the software used to browse the internet. Persistent cookies are stored on the User's end device for the period specified in the cookie parameters or until they are deleted by the User.
  6. Web browser software generally allows cookies to be stored on the User's end device by default. Website Users may change these settings. The web browser allows cookies to be deleted. Cookies can also be automatically blocked. Detailed information is available in the browser's help section or documentation.
  7. Restrictions on the use of cookies may affect some of the functionalities available on the Website.
  8. Cookies placed on the Website User's end device may also be used by entities cooperating with the Website Operator, in particular Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA) and Twitter (Twitter Inc., based in the USA).

9. Managing cookies – how to give and withdraw consent in practice

  1. If a user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it difficult, and in extreme cases impossible, to use websites.
  2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

    Mobile devices: