This policy applies to the website operating at the URL: flame-smr.com
The website operator and Data Controller is: SMR POLSKA Sp. z o.o., Małopolskie Voivodeship, Kraków County, Skawina Municipality, Skawina, 23 Józefa Piłsudskiego Street, 32-050, NIP: 6782932582, REGON: 356878623
The operator is the Data Controller of your personal data with regard to data voluntarily provided in the Service.
The Service uses personal data for the following purposes:
Handling inquiries via the contact form
The Service performs functions of obtaining information about users and their behavior in the following ways:
Through voluntarily entered data in forms, which are then entered into the Operator’s systems
By storing cookies (“ciasteczka”) on end-user devices
2. Selected Data Protection Methods Used by the Operator
Login and data entry areas are protected at the transmission layer (SSL certificate). This ensures that personal and login data entered on the site is encrypted on the user’s device and can only be read on the target server.
Personal data stored in the database is encrypted in such a way that only the Operator holding the key can read it. This protects the data in case the database is stolen from the server.
User passwords are stored in hashed form. The hashing function is one-way—it cannot be reversed, which is the current standard for storing user passwords.
The Operator periodically changes its administrative passwords.
To protect data, the Operator regularly performs backups.
An important element of data protection is regular updates of all software used by the Operator to process personal data, including updates of software components.
3. Hosting
The Service is hosted (technically maintained) on private operator servers.
The hosting provider, to ensure technical reliability, keeps server-level logs. The following may be recorded:
Resources identified by URL (addresses of requested resources—pages, files)
Time of request
Time of response
Client station name—identification via HTTP protocol
Information about errors occurring during HTTP transactions
URL of the previously visited page (referrer link), if the user came via a link
Information about the user’s browser
IP address information
Diagnostic information related to self-ordering processes via forms on the site
Information related to handling email sent to and from the Operator
4. Your Rights and Additional Information on Data Use
In certain situations, the Controller may transfer your personal data to other recipients if necessary to perform a contract with you or to fulfill legal obligations. These recipients include:
Hosting company under data processing agreement
Authorized employees and collaborators using data to fulfill website purposes
Companies providing marketing services to the Controller
Your personal data will be processed no longer than necessary for the purposes specified by law (e.g., accounting regulations). For marketing data, processing will not exceed 3 years.
You have the right to request from the Controller:
Access to your personal data
Rectification
Erasure
Restriction of processing
Data portability
You have the right to object to processing described in point 4.3 regarding processing based on legitimate interests of the Controller, including profiling. This right may not be exercised if there are overriding legitimate grounds for processing, particularly for establishing, exercising, or defending legal claims.
You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.
Providing personal data is voluntary but necessary for the operation of the Service.
You may be subject to automated decision-making, including profiling, for service provision under a contract and for direct marketing by the Controller.
Personal data is not transferred outside third countries under data protection law, meaning it is not sent outside the European Union.
5. Information in Forms
The Service collects information voluntarily provided by users, including personal data if provided.
The Service may record connection parameters (time stamp, IP address).
In some cases, the Service may store information that helps link form data with the email address of the user filling in the form. In such cases, the email address appears within the URL of the page containing the form.
Data provided in forms is processed for the purpose resulting from the specific form function, e.g. handling a service request, commercial contact, service registration, etc. The context and description of each form clearly indicate its purpose.
6. Administrator Logs
Information about user behavior on the website may be logged. This data is used for administering the service.
7. Important Marketing Techniques
The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc., USA). No personal data is transferred to this service provider, only anonymized information. The service uses cookies on the user’s device. Users can view and edit cookie-based advertising preferences via: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques to tailor advertising content to user behavior. This may give the impression of personal data tracking, but in practice no personal data is transferred between the Operator and advertising operators. Cookies must be enabled for this.
8. Information on Cookies
The Service uses cookies.
Cookies are IT data, especially text files, stored on the user’s device and used for website functionality. They usually contain the website name, storage time, and a unique identifier.
The entity placing cookies on the user’s device and accessing them is the Service operator.
Cookies are used for:
Maintaining user sessions (after login)
Purposes described in section “Important Marketing Techniques”
Two main types of cookies are used: session cookies and persistent cookies. Session cookies are temporary and stored until logout or browser closure. Persistent cookies remain until their expiration or deletion.
Browsers usually allow cookies by default. Users can change these settings, delete cookies, or block them. Help documentation is available in the browser.
Restricting cookies may affect some website functionalities.
Cookies may also be used by cooperating entities, including Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).
9. Managing Cookies – How to Give and Withdraw Consent
If you do not want cookies, you can change your browser settings. Disabling cookies necessary for authentication, security, or preference storage may make website use difficult or impossible.
To manage cookies, select your browser from the list below and follow instructions:
