General information

1. Our policy applies to the internet service on the following url: www.optimal.pl
2. Service provider and the Data Controller is:
   Optimal sp. z o.o.
   B. Krzywoustego 93
   78-100 Kołobrzeg
3. Service Provider email address: optimal@optimal.pl
4. The Service Provider is the Data Controller of your personal data in relation to the data provided voluntarily on the Website.
5. The Website uses personal data for the following purposes:
   • to present an offer or information
6. The Website implements the following methods of collecting data about users and their activities:
   • through voluntarily entered in the forms data uploaded to the Service Provider systems.
   • by storing cookies on end devices.

Selected data protection methods used by the Service Provider

1. Login and personal data input locations are secured by the transmission layer (SSL Certificate). Thanks to this the personal and login data entered on the Website is encrypted on the User’s computer, and can only be decrypted on the target server.
2. The Service Provider changes periodically the admin passwords.
3. The essential element of data protection is making regular software updates used by the Service Provider for personal data processing, which in particular means making regular updates to the programming components.

Hosting

1. The Website is hosted (technically maintained) at MyDevil.net servers
2. Hosting company registration data: ADMIN.NET.PL Tomasz Rzepka Arkadiusz Nowara S.C., based in Tarnów, address: ul. Bitwy pod Monte Cassino 5/198, 33-100 Tarnów, Małopolskie voivodship, tax ID: 8733250257, REGON: 122662465.
3. By clicking the following URL: https://www.mydevil.net/regulaminy-i-dokumenty,23.html you can learn more about hosting and check the Privacy Policy of the hosting company.
4. MyDevil.net hosting company represents that it processes the User and the personal data of the Website clients pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC and that it implements appropriate technical and organisational means in such a manner that they will ensure the protection of data processing on a level of security appropriate to the risk and categories of data under protection, especially secures the User and the personal data of the Website clients from sharing them with third-parties, loss or damage.
5. To maintain technical reliability, the hosting company saves logs on a server level. Information may include:

• date of request;
• date of response;
• user workstation name – identification implemented by HTTP protocol;
• information about errors that occurred during the HTTP transaction;
• The URL address of a website previously visited by the User (referrer link) – when entering the Website happened via a link from the previously visited page;
• information about user’s browser;
• information about user’s IP address.

Your rights and additional information about possible uses of the data

1. In some circumstances, the Data Controller has the right to share your personal data with other parties, if it is necessary to fulfil the contracted agreement, or to fulfil the Data Controller obligations. It is applicable for the following parties:
   • persons with our authorisation, employees, and associates that have to have the access to personal data in order to perform their work,
   • hosting company,
   • email service provider,
   • SMS service provider,
   • companies with which the Data Controller cooperates in its own marketing,
   • couriers,
   • insurance companies,
   • law offices and debt collectors,
   • banks,
   • payment operators,
   • public authorities.
2. Your personal data will be processed by the Data Controller for no longer than necessary for the performance of related activities specified by other regulations (i.e. accounting). With respect to the marketing data, they will be processed for no longer than 3 years.
3. You have the right to demand the following from the Data Controller:
   • access to your personal data,
   • rectify your personal data,
   • erase your personal data,
   • restrict the processing of your personal data,
   • data portability.
4. You have the right to object to the processing of personal data for the purposes of implementing the legitimate interests of the Data Controller, including profiling, whereby the right to object will not be respected where there are valid legitimate grounds for the processing, which override your interests, rights and freedoms, or grounds for establishment, exercise or defence of claims.
5. You have the right to lodge a complaint for the Data Controller activities to the Polish Data Protection Commissioner, ul. Stawki 2, 00-193 Warszawa.
6. The provision of personal data is voluntary, but necessary for the operation of the Website.
7. The Data Controller may take automated decision-making activities, including profiling, to provide services within the framework of the concluded contract and for the purpose of the Data Controller’s direct marketing.
8. Personal data are not transferred to third countries within the meaning of the personal data protection regulations. That means that we do not transfer the data outside European Union territory.

Information in forms

1. The Website collects information provided voluntarily by the user, including personal data where provided.
2. The Website can store the information about connection parameters (time stamp, IP address).
3. The Website, in some circumstances, can store the information to help associate the data in the form with the user’s email address. In such a case, the user’s email address is contained within the URL address of the form’s page.
4. The data provided in the form are processed for the purpose resulting from the function of a particular form, e.g., to process a service request or commercial contact, register services, etc. Each time, the context and description of the form clearly indicate what it is used for.

Data Controller logs

1. Information about activities of users within the Website may be logged. These data are used for the Website management.

Important marketing techniques

1. The Data Controller uses statistical analysis of the Website activities through Google Analytics (Google Inc. based in the USA). The Data Controller does not transfer full personal data to the other service provider, instead transferring anonymised information. The analysis is based on cookies stored on the User end device. For the user preference data collected by the Google advertising network, the User can browse and edit cookies information with: https://www.google.com/ads/preferences/

Information about cookies

1. The Website uses cookies.
2. Cookies are computer data, text files in particular, which are stored in the end device of the Website User and are intended for the use of the Website. Cookies usually contain the name of the website they originate from, the duration of their storage on the end device and a unique number.
3. The entity storing cookies on the Website User’s end device and gaining access to them is the Website operator.
4. Cookies are used for the following purposes:
   1. maintaining the User’s session (after logging in), thanks to which the User does not have to re-enter the login and password on every subpage of the Website;
   2. implementing actions set above under the “Important marketing techniques” section.
5. Within the Service, two main types of cookies are used: session cookies and persistent cookies. Session cookies are temporary files that are stored on the User’s end device until the User logs out, leaves the website or disables the software (web browser). Persistent cookies are stored in the User’s end device for the time specified in the cookies parameters or until they are deleted by the User.
6. Web browsing software (web browser) usually allows cookies to be stored on the User’s end device by default. The Website User may change these settings. The web browser allows you to delete cookies. It is also possible to block cookies automatically. Detailed information about this contains help or documentation of your web browser.
7. Restrictions on the use of cookies may affect some functionalities available on the Website.
8. Cookies stored on the end device of the Website user may also be used by entities cooperating with the Website operator, the following companies in particular: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

Cookie management – how can I accept and decline them in practice?

1. If the User does not want to receive cookies, they may change their browser settings. Disabling cookies necessary for authentication processes, security, maintenance of user preferences, may cause incorrect operation and, in particular cases, may prevent website use.