Privacy Policy – ERSYS Engineering and Design Services

This Privacy Policy describes the rules for processing information about you, including personal data and cookies, also known as "cookies."

General Information This policy applies to the website functioning under the URL: ersys.com.pl The operator of the service and the administrator of personal data is: Ersys Kamil Żyliński, ul. Ogrodowa 46/3, 14-400 Pasłęk Contact email address of the operator: k.zylinski@ersys.com.pl The operator is the administrator of your personal data in relation to the data provided voluntarily on the website. The website uses personal data for the following purposes:

Handling inquiries via the form
Presenting offers or information The website collects information about users and their behavior in the following ways:
Through data voluntarily entered in forms, which are then entered into the operator’s systems.
By storing cookies (so-called “cookies”) on end devices.

Selected Data Protection Methods Used by the Operator

Login and personal data entry points are protected at the transmission layer (SSL certificate). This means that personal data and login information entered on the site are encrypted on the user’s computer and can only be read on the target server.
Personal data stored in the database is encrypted in such a way that only the operator possessing the key can read it. This protects the data in the event of database theft from the server.
User passwords are stored in a hashed form. The hashing function works one-way – it cannot be reversed, which is a contemporary standard in password storage.
The operator periodically changes its administrative passwords.
To protect the data, the operator regularly makes backup copies.
An important element of data protection is the regular update of all software used by the operator to process personal data, especially regular updates of software components.

Hosting The website is hosted (technically maintained) on the operator’s servers: dhosting The hosting company maintains logs on the server level to ensure technical reliability. Logs may include:

Resources identified by URL (addresses of requested resources – pages, files),
Time of request arrival,
Time of sending the response,
Client station name – identification through the HTTPS protocol,
Information about errors that occurred during HTTPS transactions,
The URL of the previously visited page (referer link) – if the transition to the website occurred through a link,
Information about the user’s browser,
Information about the IP address,
Diagnostic information related to the self-ordering process of services via the site,
Information related to the handling of email directed to and sent by the operator.

Your Rights and Additional Information on Data Usage In certain situations, the administrator has the right to transfer your personal data to other recipients, if it is necessary to execute the agreement with you or fulfill obligations imposed on the administrator. This applies to the following groups of recipients:

Hosting company on a delegation basis
Authorized employees and associates who use the data to fulfill the purpose of the website
Companies providing marketing services to the administrator Your personal data processed by the administrator are not longer than necessary to perform related activities specified by separate regulations (e.g., accounting). In terms of marketing data, they will not be processed for more than 3 years. You have the right to request from the administrator:
Access to your personal data,
Rectification,
Deletion,
Limitation of processing,
Data portability. You have the right to object to the processing of personal data in accordance with point 3.2 for the execution of legally justified interests pursued by the administrator, including profiling, but the right to object cannot be exercised if there are valid legally justified grounds for processing, overriding your interests, rights, and freedoms, particularly establishing, pursuing, or defending claims. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw. Providing personal data is voluntary, but necessary to handle the website. Automated decision-making activities, including profiling, may be undertaken towards you to provide services under the concluded agreement and for direct marketing by the administrator. Personal data are not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.

Information in Forms The website collects information provided voluntarily by the user, including personal data if provided. The website may save information about connection parameters (time stamp, IP address). The website, in some cases, may save information to facilitate linking data in the form with the user’s email address filling out the form. In such cases, the user’s email address appears inside the URL of the page containing the form. Data provided in the form are processed for the purpose resulting from the function of a specific form, e.g., to handle a service request or commercial contact, registration of services, etc. Each time the context and description of the form clearly indicate its purpose.
Administrator Logs Information about user behavior on the website may be subject to logging. These data are used to administer the website.
Important Marketing Techniques The operator uses statistical traffic analysis on the site through Google Analytics (Google Inc. based in the USA). The operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on using cookies on the user’s end device. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/ The operator uses remarketing techniques to match advertising messages to the user’s behavior on the site, which may create the illusion that the user’s personal data is used for tracking, but in practice, no personal data is transferred from the operator to the advertising operators. The technological condition for such activities is the enabled support for cookies. The operator uses solutions examining user behavior by creating heat maps and recording behavior on the site. These informations are anonymized before being sent to the operator of the service so that it does not know to whom they relate. In particular, passwords and other personal data are not recorded. The operator uses a solution automating the operation of the website in relation to users, e.g., which can send an email to the user after visiting a specific subpage, provided that the user has agreed to receive commercial correspondence from the operator.
Information about Cookies The website uses cookies. Cookies (so-called “cookies”) are IT data, in particular text files, stored in the user’s end device and intended for using the website’s pages. Cookies typically contain the name of the website they come from, the time of storing them on the end device, and a unique number. The entity placing cookies on the user’s end device and accessing them is the website operator. Cookies are used for the following purposes:

Maintaining the user’s session (after logging in), thanks to which the user does not have to re-enter login and password on each subpage of the website;
Realizing the purposes specified above in the section “Important marketing techniques”; Two basic types of cookies are used within the service: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the user’s end device until logging out, leaving the website, or turning off the software (web browser). “Persistent” cookies are stored on the user’s end device for the time specified in the cookie parameters or until they are deleted by the user. Web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Website users can change the settings in this regard. The web browser allows deleting cookies. It is also possible to block cookies automatically. Detailed information on this topic is provided in the help or documentation of the web browser. Restrictions on the use of cookies may affect some functionalities available on the website’s pages. Cookies placed in the user’s end device may also be used by entities cooperating with the website operator, in particular, this applies to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

Managing Cookies – How to Express and Withdraw Consent in Practice? If the user does not want to receive cookies, they can change the browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases, may prevent the use of websites To manage cookie settings, select the web browser you use from the list below and follow the instructions: