1. General Information
- This policy concerns the Website operating at url: https://eternel.agency/
- The Website Operator and Personal Data Controller is: PRIME NEST SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Aleja Jana Pawła II 58/2.1 NIP: 6751802163
- Contact email address of the Operator: [email protected]
- The Operator is the Controller of your personal data with respect to data provided voluntarily on the Website.
- The Website uses personal data for the following purposes:
- Running a newsletter
- Running a classified ads system
- Handling inquiries via form
- Presenting offers or information
-
The Website obtains information about users and their behavior in the following manner:
- Through voluntarily entered data in forms, which is entered into the Operator’s systems.
- Through saving cookie files in end devices (so-called “cookies”).
2. Selected Data Protection Methods Used by the Operator
- Login and personal data entry locations are protected during transmission (SSL certificate). This ensures that personal data and login details entered on the page are encrypted on the user’s computer and can only be read on the target server.
- Personal data stored in the database is encrypted in a manner that only the Operator holding the key can read it. This protects data in case of database theft from the server.
- User passwords are stored in hashed form. The hashing function is one-way – it cannot be reversed, which is the current standard for storing user passwords.
- The Operator periodically changes administrative passwords.
- To minimize unauthorized access risk, the Operator uses complex passwords containing lowercase and uppercase letters, numbers, and special characters, at least 8 characters long.
- A key data protection element is regular updates of all software used by the Operator for personal data processing, especially programming components.
- The Operator regularly performs data backups.
3. Hosting
- The Website is hosted (technically maintained) on the Operator’s server: Cloudflare, Inc.
-
The hosting company keeps server-level logs for technical reliability. Logs may include:
- resources identified by URL (requested resource addresses – pages, files),
- request arrival time,
- response send time,
- client station name – HTTP protocol identification,
- errors during HTTP transaction processing,
- previously visited page URL (referrer link) – if entering the Website via a link,
- user browser information,
- IP address information,
- diagnostic information related to self-ordering services via page registrars,
- information related to email handling directed to and sent by the Operator.
4. Your Rights and Additional Information on Data Use
-
In some cases, the Administrator may transfer your personal data to other recipients if necessary to perform the contract with you or fulfill obligations. This concerns groups such as:
- hosting company on entrustment basis
- authorized employees and collaborators using data for site operation purposes
- insurers
- companies providing marketing services to the Administrator
- Your personal data processed by the Administrator no longer than necessary for related activities specified by law (e.g., accounting). Marketing data not processed longer than 3 years.
-
You have the right to request from the Administrator:
- access to your personal data,
- rectification,
- erasure,
- processing restriction,
- and data portability.
- You have the right to object to processing under point 3.3 c) for legitimate interests of the Administrator, including profiling, though objection cannot be exercised if there are overriding legitimate grounds, especially for claims establishment, pursuit, or defense.
- Complaints against Administrator actions can be filed with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
- Providing personal data is voluntary but necessary for Website service.
- Automated decision-making, including profiling, may occur towards you for contract services and Administrator’s direct marketing.
- Personal data is transferred to third countries under data protection laws. This means we send it outside the European Union.
5. Form Information
- The Website collects information voluntarily provided by the user, including personal data if provided.
- The Website may record connection parameters (time stamp, IP address).
- In some cases, the Website may save information linking form data to the user’s email. Then the user’s email appears in the form page URL.
- Form data is processed for the purpose of the specific form, e.g., service request handling, commercial contact, service registration. Form context and description clearly indicate its purpose.
6. Administrator Logs
- User behavior information on the Website may be logged. These data are used for Website administration.
7. Key Marketing Techniques
- Operator uses statistical analysis of site traffic via Google Analytics (Google Inc., USA). Operator does not transfer personal data to this service, only anonymized information. Service based on cookies in user end device. For Google network preferences: https://www.google.com/ads/preferences/
- Operator uses Facebook Pixel. This lets Facebook (Facebook Inc., USA) know a registered person uses the Website. Based on data Operator controls; no additional personal data transferred. Based on cookies.
- Operator uses remarketing techniques matching ads to user behavior, possibly seeming like personal tracking, but no personal data transferred to ad operators. Requires cookie support.
- Operator uses automation for Website actions towards users, e.g., emailing after subpage visit if user consented to commercial correspondence.
8. Cookie Information
- The Website uses cookies.
- Cookies (“cookies”) are IT data, particularly text files, stored on the Website User’s end device for Website use. Usually contain site name, storage time, unique number.
- Cookies placed on Website User’s end device and accessing them is done by the Website Operator.
-
Cookies used for:
- maintaining user session (after login), so no re-entering login/password on subpages;
- realizing purposes in “Key Marketing Techniques” section above;
- Website uses two main cookie types: “session” (temporary, stored until logout/page exit/browser close) and “persistent” (stored for time in params or until deleted).
- Browsers default allow cookies. Users can change settings, delete, or block. See browser help/documentation.
- Cookie restrictions may affect some Website functionalities.
- Cookies on User device may also be used by Operator partners, especially: Google (USA), Facebook (USA), Twitter (USA).
9. Cookie Management – How to Express and Withdraw Consent in Practice?
- If user doesn’t want cookies, change browser settings. Note: disabling authentication/security/preference cookies may hinder or prevent Website use.
-
To manage cookies, select your browser and follow instructions:
Mobile devices: