Privacy policy

1. General Information

1. This policy applies to the www service operating under the URL: wcd.pl
2. The service operator and personal data administrator is: “EIG LIMITED LIABILITY COMPANY”, Tax ID: 5273050488. Contact email address of the operator: info@bistrodelgusto.com
3. The operator is the administrator of your personal data in relation to the data provided voluntarily in the Service.
4. The Service uses personal data for the following purposes:
   – Managing a commenting system
   – Conducting online chat conversations
   – Handling inquiries through forms
5. The Service collects information about users and their behavior in the following ways:
   – Through data voluntarily entered into forms, which are input into the Operator’s systems.
   – By storing cookies on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and data entry points are protected at the transmission layer (SSL certificate). Thus, personal and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in databases are encrypted in such a way that only the Operator with the key can read them, protecting the data in case of database theft from the server.
3. User passwords are stored in hashed form. The hashing function works one way – it is not possible to reverse its operation, which is the current standard for storing user passwords.
4. The operator periodically changes its administrative passwords.
5. To protect data, the Operator regularly performs backup copies.
6. A key element of data protection is the regular updating of all software used by the Operator to process personal data, particularly regular updates of software components.

3. Hosting

1. The service is hosted (technically maintained) on the servers of another company.

4. Your Rights and Additional Information on Data Use

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients if necessary to perform the contract concluded with you or to fulfill obligations incumbent on the Administrator. This concerns groups of recipients such as:
   – A hosting company under a delegation
   – Authorized employees and associates who use the data to achieve the site’s purpose
2. Your personal data processed by the Administrator will not be kept longer than necessary to perform the related activities specified by separate regulations (e.g., accounting). Marketing data will not be processed longer than 3 years.
3. You have the right to request from the Administrator:
   – Access to personal data concerning you,
   – Rectification,
   – Deletion,
   – Restriction of processing,
   – And data portability.
4. You have the right to object to the processing specified in section 3.3 c) in terms of processing personal data for the performance of legally justified interests pursued by the Administrator, including profiling, although this right may not be exercised if there are valid legally justified reasons for the processing, overriding your interests, rights, and freedoms, in particular for establishing, pursuing, or defending claims.
5. You can lodge a complaint against the Administrator’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary for the Service operation.
7. Actions involving automated decision-making, including profiling, may be undertaken in relation to you for the purpose of providing services under the concluded contract and for the Administrator to conduct direct marketing.
8. Personal data are not transferred from third countries within the meaning of personal data protection regulations. This means that they are not transferred outside the European Union.

5. Information in Forms

1. The Service collects information voluntarily provided by the user, including personal data, if provided.
2. The Service may record information about connection parameters (time stamp, IP address).
3. In some cases, the Service may record information that facilitates linking data in the form with the email address of the user filling out the form. In this case, the user’s email address appears inside the URL of the page containing the form.
4. Data provided in the form are processed for a purpose resulting from the function of the specific form, e.g., to process a service report or commercial contact, registration of services, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Administrator Logs

1. Information about user behavior in the service may be subject to logging. These data are used to administer the service.

7. Essential Marketing Techniques

1. The operator uses statistical analysis of traffic on the site, through Google Analytics (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

8. Information About Cookies

1. The service uses cookies.
2. Cookies are computer data, especially text files, that are stored on the end device of the Service User and are intended for use with the Service’s websites. Cookies usually contain the name of the website from which they come, the time they are stored on the end device, and a unique number.
3. The entity placing cookies on the end device of the Service User and accessing them is the service operator.
4. Cookies are used for the following purposes:
   – To maintain the user’s session on the Service (after logging in), so the user does not have to re-enter login and password on each subpage of the Service;
   – To achieve the goals specified above in “Essential Marketing Techniques”;
5. The Service uses two basic types of cookies: “session” (session cookies) and “persistent” (persistent cookies). “Session” cookies are temporary files stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
6. Web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Users of the Service can change these settings. The web browser allows deleting cookies. It is also possible to automatically block cookies. Detailed information on this subject is contained in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some functionalities available on the Service’s web pages.
8. Cookies placed on the end device of the Service User may also be used by entities cooperating with the Service operator, especially companies such as: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Cookie Management – How to Express and Withdraw Consent?

1. If the user does not want to receive cookies, they can change the browser settings. We note that disabling cookies necessary for authentication processes, security, maintaining user preferences might make it difficult, and in extreme cases, may prevent the use of www pages.