Privacy Policy

1. General Information

1. This policy pertains to the website operating at the URL iwonagrochowska.pl
2. The operator of the website and the controller of personal data is Iwona Grochowska, located at ul. Częstochowska 1a/9, 02-344 Warsaw.
3. The operator’s contact email address is: iwona@iwonagrochowska.pl
4. The operator is the administrator of your personal data concerning voluntarily provided information on the website.
5. The website uses personal data for the following purposes:
   • Managing newsletters
   • Handling inquiries through forms
   • Presenting offers or information
6. The website collects information about users and their behavior through the following methods:
   1. Voluntarily entered data in forms, which are stored in the operator’s systems.
   2. Storing cookie files (“cookies”) on end-user devices.

2. Selected Data Protection Methods Employed by the Operator

1. The login and personal data input areas are secured with SSL encryption. This ensures that personal data and login information entered on the website are encrypted on the user’s computer and can only be read on the destination server.
2. Personal data stored in the database is encrypted in such a way that only the operator, holding the decryption key, can access it. This safeguards data in the event of a database breach.
3. User passwords are stored in hashed form, making it impossible to reverse the process. This is the contemporary standard for storing user passwords.
4. The operator periodically changes administrative passwords.
5. Data protection includes regular backups.
6. Regular software updates are a vital part of data protection, ensuring that all software used for processing personal data is up to date, including programming components.

3. Hosting

1. The website is hosted and technically maintained on servers provided by home.pl.

4. Your Rights and Additional Information on Data Usage

1. In some situations, the administrator may transfer your personal data to other recipients if it is necessary to fulfill a contract with you or to comply with legal obligations. This includes the following recipient groups:
   • Hosting companies under data processing agreements
   • Authorized employees and collaborators who use data for website operation
   • Marketing service providers on behalf of the administrator
2. Your personal data will not be processed for longer than necessary for the activities specified by separate regulations (e.g., accounting). In the case of marketing data, it will not be processed for more than 3 years.
3. You have the right to request from the administrator:
   • Access to your personal data,
   • Correction,
   • Deletion,
   • Restriction of processing,
   • Data portability.
4. You have the right to object to processing, as specified in section 3.3 c), regarding the processing of personal data for the legitimate interests pursued by the administrator, including profiling. However, this right to object cannot be exercised if there are compelling legitimate grounds for processing, overriding your interests, rights, and freedoms, especially for establishing, exercising, or defending legal claims.
5. You have the right to lodge a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary but necessary to use the website.
7. Actions involving automated decision-making, including profiling, may be taken with regard to you for the purpose of providing services under a concluded contract and for the purpose of conducting direct marketing by the Administrator.
8. Personal data are not transferred to third countries within the meaning of data protection regulations. This means that we do not transmit them outside the European Union territory.

5. Information in Forms

1. The website collects information voluntarily provided by users, including personal data, if provided.
2. In some cases, the website may record connection parameters (time, IP address).
3. In certain situations, it may store information facilitating the association of data in the form with the user’s email address, which may appear in the URL of the form-containing page.
4. Data provided in forms are processed for purposes related to the specific form’s function, such as processing service requests or business contacts, and registration for services, among others. Each form’s context and description clearly inform users of its purpose.

6. Administrator’s Logs

1. Information about user behavior on the website may be logged for administrative purposes.

7. Significant Marketing Techniques

1. The operator employs statistical analysis of website traffic through Google Analytics (Google Inc., USA). The operator does not provide personal data to the service operator, only anonymized information. This service uses cookies on the user’s end device. Users can view and edit their preferences based on Google’s advertising network information using this tool https://www.google.com/ads/preferences/
2. The operator uses Facebook pixel technology. This allows Facebook (Facebook Inc., USA) to identify registered users of the service. In this case, it relies on data for which it is the controller, and the operator does not provide additional personal data to Facebook. This service uses cookies on the user’s end device.

8. Cookie Information

1. The website uses cookies.
2. Cookies are computer data, particularly text files, stored on the user’s end device, intended for use on the website. Cookies usually contain the website’s name of origin, the duration of storage on the end device, and a unique number.
3. The operator of the website places cookies on the user’s end device and has access to them.
4. Cookies are used for the following purposes:
   1. Maintaining user sessions (after login), eliminating the need for users to re-enter their login and password on each subpage;
   2. Achieving the goals specified in the “Significant Marketing Techniques” section.
5. Within the scope of the Service, two fundamental types of cookies are used: “session cookies” and “persistent cookies.” “Session cookies” are temporary files that are stored on the user’s end device until they log out, leave the website, or close the web browser. “Persistent cookies” are stored on the user’s end device for a period specified in the cookie parameters or until they are deleted by the user.
6. Web browsing software (internet browsers) typically allows the storage of cookies on the user’s end device by default. Users of the Service can modify these settings. Internet browsers allow the deletion of cookies, and users can also enable automatic blocking of cookies. Detailed information on these matters can be found in the browser’s help or documentation.
7. Restrictions on the use of cookies may affect some functionalities available on the Service’s webpages.
8. Cookies placed on the user’s end device within the Service may also be utilized by entities collaborating with the Service operator, particularly companies such as Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice?

1. If users do not wish to receive cookies, they can change their browser settings. It should be noted that disabling cookies necessary for authentication, security, and user preference maintenance may make it difficult or, in extreme cases, impossible to use certain website features.
2. To manage cookie settings, choose the internet browser you use from the list below and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows PhoneThe operator’s contact email address is