Privacy Policy

This privacy policy describes how we process information about you, including personal data and cookies.

  1. General information
    This policy applies to the website operating at: grid.com.pl
    The website operator and data controller is: ŁUKASZ TABAKOWSKI GRID, ul. ks. bpa Władysława Bandurskiego 10/1, 31-515 Kraków, Poland. Tax ID (NIP): 9451828332, Business Registry Number (REGON): 356289068.
    The operator’s contact email address: [email protected]
    The Operator is the data controller for data you provide voluntarily on the site.
    The site uses personal data for the following purposes:
    Handling inquiries submitted through the contact form
    The site collects information about users and their behavior through:
    Data voluntarily entered into forms, which is recorded in the Operator’s systems.
    Cookies stored on users’ devices.
  2. Selected data protection measures used by the Operator
    Login pages and pages where personal data is entered are protected at the transmission layer (SSL certificate). This means personal data and login credentials entered on the site are encrypted on the user’s device and can only be read on the destination server.
    Personal data stored in our database is encrypted so that only the Operator, using the appropriate key, can read it. This protects the data in the event the database is stolen from the server.
    User passwords are stored in hashed form. A hashing function is one-way — it cannot be reversed — which is the current industry standard for password storage.
    The Operator periodically changes its administrative passwords.
    The Operator regularly performs backups to protect data.
    Regularly updating all software used to process personal data — including regular updates to software components — is an important part of our data protection measures.
  3. Hosting
    The site is hosted on servers provided by: cyberFolks.pl
    To ensure technical reliability, the hosting provider maintains server-level logs. These may record:
    Resources identified by URL (addresses of requested pages, files)
    Time the request was received
    Time the response was sent
    Client station name — identified via the HTTP protocol
    Information about errors that occurred during HTTP transactions
    The URL of the page previously visited by the user (referrer link), if the user reached the site via a link
    Information about the user’s browser
    Information about the user’s IP address
    Diagnostic information related to self-service ordering processes on the site
    Information related to email correspondence sent to and from the Operator
  4. Your rights and additional information on how your data is used
    In certain situations, the Administrator may share your personal data with other recipients if necessary to perform a contract with you or to fulfill the Administrator’s legal obligations. This applies to the following categories of recipients:
    The hosting provider, under a data processing agreement
    Postal and courier operators
    Authorized employees and associates who use the data to carry out the site’s purpose
    Companies providing marketing services to the Administrator
    Your personal data will not be processed by the Administrator for longer than necessary to carry out the related activities set out in applicable law (e.g., accounting requirements). Marketing data will not be processed for longer than 3 years.
    You have the right to request from the Administrator:
    Access to your personal data
    Rectification of your data
    Erasure of your data
    Restriction of processing
    Data portability
    You have the right to object to the processing described in point 3.2, where such processing is based on the Administrator’s legitimate interests, including profiling — except where there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, in particular the establishment, exercise, or defense of legal claims.
    You have the right to lodge a complaint about the Administrator’s actions with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
    Providing personal data is voluntary, but necessary for the site to function.
    You may be subject to automated decision-making, including profiling, for the purpose of providing services under a contract and for the Administrator’s direct marketing purposes.
    Personal data is not transferred to third countries within the meaning of data protection law. This means we do not transfer your data outside the European Union.
  5. Information collected through forms
    The site collects information provided voluntarily by users, including personal data, where such information is submitted.
    The site may record connection parameters (timestamp, IP address).
    In some cases, the site may store information that links form data to the email address of the user submitting the form. In such cases, the user’s email address appears within the URL of the page containing the form.
    Data submitted through a form is processed for the purpose specific to that form — for example, to handle a service request or sales inquiry, or to register for a service. The context and description of each form clearly explain its purpose.
  6. Administrator logs
    Information about user behavior on the site may be logged. This data is used to administer the site.
  7. Key marketing technologies
    The Operator uses Google Analytics (Google Inc., based in the USA) to analyze site traffic statistically. The Operator does not share personal data with this service provider — only anonymized information. This service relies on cookies stored on the user’s device. Users can review and edit information about their preferences collected by the Google advertising network using this tool: https://www.google.com/ads/preferences/
  8. Information about cookies
    The site uses cookies.
    Cookies are computer data, typically small text files, stored on the user’s device and used to enable the site to function properly. Cookies generally contain the name of the website they came from, how long they’re stored on the device, and a unique identifier.
    The entity placing cookies on the user’s device and accessing them is the site operator.
    Cookies are used for the following purposes:
    Maintaining a user’s session (after logging in), so the user doesn’t have to re-enter their login and password on every page
    Fulfilling the purposes described above under “Key marketing technologies”
    The site uses two main types of cookies: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the user’s device until they log out, leave the site, or close their browser. Persistent cookies are stored on the user’s device for the period specified in the cookie’s parameters, or until deleted by the user.
    Web browsers typically allow cookies to be stored on a user’s device by default. Users can change these settings. Browsers allow cookies to be deleted, and it’s also possible to block cookies automatically. For more details, see your browser’s help documentation.
    Restricting the use of cookies may affect some of the site’s functionality.
    Cookies placed on a user’s device may also be used by companies working with the site operator, in particular: Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).
  9. Managing cookies — how to give and withdraw consent in practice
    If you don’t want to receive cookies, you can change your browser settings. Please note that disabling cookies required for authentication, security, or maintaining your preferences may make it difficult, or in some cases impossible, to use the site.
    To manage your cookie settings, select your browser from the list below and follow the instructions:
    Edge
    Internet Explorer
    Chrome
    Safari
    Firefox
    Opera

Mobile devices:

Android
Safari (iOS)
Windows Phone