Privacy policy

1. General information

1. This policy applies to the website (the “Service”) operating at the following URL: https://www.dzolama.com/
2. The operator of the Service and the personal data controller is: Pracownia Artystyczna Joanna Jaworska, Celtycka 19/3 8943100127
3. The operator’s contact email address: dzolama@gmail.com
4. The Operator is the controller of your personal data with respect to the data provided voluntarily in the Service.
5. The Service uses personal data for the following purposes:
• Running a newsletter
• Providing the ordered services
6. The Service collects information about users and their behavior in the following ways:
   1. Through data voluntarily entered into forms, which are then entered into the Operator’s systems.
   2. By saving cookies on end-user devices (so-called “cookies”).

2. Selected data protection methods used by the Operator

1. Login areas and places where personal data are entered are protected in the transmission layer (SSL certificate). Thanks to this, personal data and login credentials entered on the website are encrypted on the user’s computer and can only be read on the destination server.
2. Personal data stored in the database are encrypted in such a way that only the Operator holding the key can read them. This means the data are protected in the event the database is stolen from the server.
3. User passwords are stored in a hashed form. The hashing function is one-way — it is not possible to reverse it, which is the current standard for storing user passwords.
4. The Operator periodically changes administrative passwords.
5. To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers, and special characters, not shorter than 8 characters.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
7. To protect data, the Operator regularly makes backup copies.

3. Hosting

1. The Service is hosted (technically maintained) on the operator’s server: box3
2. In order to ensure technical reliability, the hosting company keeps server-level logs. The following may be recorded:
   • resources identified by a URL identifier (addresses of requested resources — pages, files),
   • time of the request,
   • time of sending the response,
   • client station name — identification carried out via the HTTP protocol,
   • information about errors that occurred while processing the HTTP transaction,
   • the URL address of the page previously visited by the user (referrer link) — if the Service was accessed via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information related to the process of ordering services independently via the forms on the website,
   • information related to handling email correspondence sent to the Operator and sent by the Operator.

4. Your rights and additional information on how the data are used

1. In some situations, the Administrator has the right to transfer your personal data to other recipients, if this is necessary to perform the contract concluded with you or to fulfill obligations incumbent on the Administrator. This applies to the following groups of recipients:
   • the hosting company, on the basis of entrustment
   • companies providing marketing services to the Administrator
2. Your personal data are processed by the Administrator no longer than is necessary to perform the activities related to them, as specified by separate regulations (e.g., accounting). With regard to marketing data, the data will not be processed for longer than 3 years.
3. You have the right to request from the Administrator:
   • access to your personal data,
   • rectification,
   • erasure,
   • restriction of processing,
   • and data portability.
4. You have the right to object to the processing indicated in point 3.3 c) with respect to the processing of personal data for the purposes of legitimate interests pursued by the Administrator, including profiling, provided that the right to object may not be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular for the establishment, exercise or defense of claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary for using the Service.
7. With respect to you, activities involving automated decision-making may be undertaken, including profiling, for the purpose of providing services under the concluded agreement and for the purpose of the Administrator’s direct marketing.
8. Personal data are not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.

5. Information in forms

1. The Service collects information provided voluntarily by the user, including personal data, if such data are provided.
2. The Service may record information about connection parameters (time stamp, IP address).
3. In some cases, the Service may record information facilitating linking the data in the form with the email address of the user filling in the form. In such a case, the user’s email address appears within the URL address of the page containing the form.
4. Data provided in the form are processed for the purpose resulting from the function of the particular form, e.g. to handle a service request or a business contact, register services, etc. Each time, the context and description of the form clearly indicate what it is used for.

6. Administrator logs

1. Information about users’ behavior in the Service may be logged. These data are used to administer the Service.

7. Important marketing techniques

8. Information about cookies

1. The Service uses cookies.
2. Cookies are IT data, in particular text files, which are stored on the end-user device of the Service User and are intended for using the Service’s websites. Cookies usually contain the name of the website from which they come, the time of their storage on the end device, and a unique number.
3. The entity placing cookies on the end-user device of the Service User and obtaining access to them is the Service operator.
4. Cookies are used for the following purposes:
   1. maintaining the Service user session (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the Service;
   2. to achieve the purposes specified above in the section “Important marketing techniques”;
5. The Service uses two main types of cookies: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user.
6. Web browsing software (a web browser) usually allows cookies to be stored on the user’s end device by default. Service Users may change these settings. The web browser allows deletion of cookies. It is also possible to block cookies automatically. Detailed information is available in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some of the functionalities available on the Service’s websites.
8. Cookies placed on the Service User’s end device may also be used by entities cooperating with the Service operator, in particular by: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing cookies – how to give and withdraw consent in practice?

1. If the user does not want to receive cookies, they may change browser settings. We reserve that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites.
2. To manage cookie settings, select from the list below the web browser you use and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone