Privacy Policy

1. General Provisions

This Privacy Policy defines the principles of processing personal data obtained through the website boxther.pl (hereinafter referred to as: "Website").

The owner of the website and at the same time the Data Controller is BOXTHER, hereinafter referred to as the Controller, address: [COMPANY ADDRESS], VAT: [VAT], REGON: [REGON], email: [EMAIL].

Personal data collected by the Controller through the Website is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), also known as GDPR.

The Controller takes special care to respect the privacy of Customers visiting the Website.

2. Type of processed data, purposes and legal basis

The Controller collects information about natural persons performing legal acts not directly related to their business activity, natural persons conducting business or professional activity in their own name, and natural persons representing legal persons or organizational units that are not legal persons but have legal capacity under the law, conducting business or professional activity in their own name, hereinafter collectively referred to as Customers.

Personal data of Customers is collected in case of: using the contact form service on the Website for the purpose of performing a contract provided electronically. Legal basis: necessity for the performance of a contact form service contract (Article 6(1)(b) GDPR).

When using the contact form service, the Customer provides the following data:

• email address
• name
• phone number
• type of container service

While using the Website, additional information may be collected, in particular: IP address assigned to the Customer's computer or external IP address of the Internet provider, domain name, browser type, access time, operating system type.

Navigation data may also be collected from Customers, including information about links and references they decide to click or other actions taken on the Website. Legal basis - legitimate interest (Article 6(1)(f) GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.

3. To whom data is disclosed or entrusted and how long is it stored?

Customer's personal data is transferred to service providers used by the Controller when running the Website. Service providers to whom personal data is transferred, depending on contractual arrangements and circumstances, either follow the Controller's instructions regarding the purposes and methods of processing this data (processors) or independently determine the purposes and methods of their processing (controllers).

Processors

The Controller uses providers who process personal data exclusively on the Controller's instructions. These include, among others, providers providing hosting services, accounting services, providing marketing systems, systems for analyzing traffic on the Website, systems for analyzing the effectiveness of marketing campaigns.

Controllers

The Controller uses providers who do not act exclusively on instructions and independently determine the purposes and methods of using Customers' personal data. They provide electronic payment and banking services.

Location: Service providers are based mainly in Poland and other countries of the European Economic Area (EEA).

4. Cookies mechanism, IP address

The Website uses small files called cookies. They are saved by the Controller on the end device of the person visiting the Website, if the web browser allows it. A cookie file usually contains the name of the domain from which it comes, its "expiration time" and an individual, randomly selected number identifying this file.

The Controller uses two types of cookie files:

• Session cookies: after ending the session of a given browser or turning off the computer, the saved information is deleted from the device memory.
• Persistent cookies: are stored in the memory of the Customer's end device and remain there until they are deleted or expire.

The Controller uses cookies for:

• analysis and research and audience audit, in particular to create anonymous statistics
• presenting on the Website's information pages, a map showing the location of the Controller's office, using the maps.google.com web service
• monitoring website performance using Vercel Speed Insights
• traffic analysis using Vercel Analytics

5. Rights of data subjects

6. Contact

The Customer may submit complaints, inquiries and requests to the Controller regarding the processing of their personal data and the exercise of their rights.

The Customer has the right to lodge a complaint with the President of the Personal Data Protection Office regarding violations of their personal data protection rights or other rights granted under GDPR.

Questions related to the Privacy Policy should be directed to: [CONTACT EMAIL]