1. General information

1. This policy applies to the website operating at: restauracjanadjeziorem.pl
2. The website operator and personal data controller is: P.H.U.P. POLDROB BIUREX Ryszard Piecyk, Przybrodzin 231, 62-430 Powidz
3. Operator’s contact e‑mail address: rpiecyk@op.pl
4. The Operator is the Controller of your personal data with respect to data voluntarily provided via the website.
5. The website uses personal data for the following purposes:
   • Running a newsletter
   • Handling enquiries via contact forms
   • Processing product orders – preparation, packing, dispatch
   • Provision of ordered services
   • Issuing and processing accounting documents
   • Debt collection
   • Presenting offers or information
   • Fulfilling the Controller’s legal obligations under Article 6(1 (c) of the GDPR, where required by specific regulations (e.g. bookkeeping).
6. The website collects information about users and their behaviour in the following ways:
   1. Through data voluntarily entered in forms, which are then stored in the Operator’s systems.
   2. By storing cookie files (“cookies”) on users’ end devices.

2. Selected data protection methods used by the operator

1. Login pages and places where personal data is entered are protected at the transmission layer (SSL certificate). This ensures that personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the target server.
2. To protect data, the Operator regularly creates security backups.
3. An important element of data protection is the regular updating of all software used by the Operator to process personal data, in particular the regular updating of software components.

3. Hosting

1. The website is hosted (technically maintained) on the servers of the provider LH.pl.
2. To ensure technical reliability, the hosting company keeps server‑level logs. The following may be recorded:
   • resources identified by a URL (addresses of requested resources – pages, files),
   • time of request,
   • time of sending the response,
   • client station name – identification via the HTTP protocol,
   • information about errors that occurred during HTTP transactions,
   • URL address of the previously visited page (referer link), if the user navigated to the website via a link,
   • information about the user’s browser,
   • information about the IP address,
   • diagnostic information related to the process of ordering services via on‑site registration forms,
   • information related to handling e‑mail sent to and from the Operator.

4. Your rights and additional information about data use

1. In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to perform a contract with you or to fulfil the Controller’s legal obligations. This applies to the following categories of recipients:
   • persons authorised by us, employees and associates who need access to personal data in order to perform their duties,
   • hosting company,
   • companies handling mailings,
   • companies handling SMS communication,
   • companies cooperating with the Controller in its own marketing,
   • couriers,
   • insurers,
   • law firms and debt collectors,
   • banks,
   • payment operators,
   • public authorities.
2. Your personal data is processed by the Controller no longer than necessary to perform activities related to it as defined by separate regulations (e.g. accounting regulations). For marketing purposes, data is processed for no longer than 3 years.
3. You have the right to request from the Controller:
   • access to your personal data,
   • rectification,
   • erasure,
   • restriction of processing,
   • and data portability.
4. You have the right to object to the processing referred to in point 3.2 in relation to processing for the purposes of the Controller’s legitimate interests, including profiling; the right to object does not apply if there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, in particular for the establishment, exercise or defence of legal claims.
5. You have the right to lodge a complaint against the Controller with the President of the Personal Data Protection Office, ul. Stawki 2, 00‑193 Warsaw.
6. Providing personal data is voluntary but necessary to use the website.
7. You may be subject to automated decision‑making, including profiling, for the purpose of providing services under the concluded contract and for the Controller’s direct marketing.
8. Personal data is not transferred to “third countries” under data protection law. This means it is not transferred outside the European Union.

5. Information in forms

1. The website collects information voluntarily provided by the user, including personal data, if provided.
2. The website may store information about connection parameters (time stamp, IP address).
3. In some cases, the website may store information that makes it easier to link form data to the e‑mail address of the user filling in the form; in such cases, the user’s e‑mail address appears in the URL of the page containing the form.
4. Data provided in forms is processed for the purpose indicated by the specific form, e.g. handling service requests or commercial contact, registering services, etc. The description and context of each form clearly explains what it is used for.

6. Administrator logs

1. Information about user behaviour on the website may be logged. This data is used to administer the website.

7. Important marketing techniques

1. The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc., USA). The Operator does not provide personal data to this service, only anonymised information. The service uses cookies on the user’s device. You can review and edit information about your preferences collected via the Google advertising network using the following tool: https://www.google.com/ads/preferences/

8. Information about cookies

1. The website uses cookies.
2. Cookies are IT data, in particular text files, stored on the user’s device and used for browsing the website. Cookies typically contain the name of the website they come from, their storage time on the device and a unique identifier.
3. The entity placing cookies on the user’s device and accessing them is the website operator.
4. Cookies are used for the following purposes:
   1. maintaining the user’s session (after logging in), so that the user does not have to re‑enter their login and password on every subpage;
   2. achieving the purposes stated above under “Important marketing techniques”.
5. The website uses two basic types of cookies: “session” (session cookies) and “persistent” cookies. Session cookies are temporary and remain on the user’s device until they log out, leave the website or close the browser. Persistent cookies are stored on the user’s device for the period specified in the cookies’ parameters or until they are removed by the user.
6. Most web browsers allow cookies to be stored on the user’s device by default. Website users can change these settings. The browser makes it possible to delete cookies. It is also possible to automatically block cookies. Detailed information on this can be found in the help section or documentation of the web browser.
7. Restricting cookies may affect certain functionalities available on the website.
8. Cookies stored on the user’s device may also be used by third‑party partners of the website operator, in particular: Google (Google Inc., USA), Facebook (Facebook Inc., USA), Twitter (Twitter Inc., USA).

9. Managing cookies – how to give and withdraw consent in practice?

1. If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies essential for authentication, security or user preference settings may make it difficult or, in extreme cases, impossible to use the website.
2. To manage cookie settings, select your browser from the list below and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone