Privacy Policy

This Privacy Policy describes how we process information about you, including personal data and so-called cookies.

1. General Information

  1. This policy applies to the Website operating at the URL: boit.pl
  2. The website operator and personal data Controller is: BOIT Sp. z o.o., Ul. Mieczysława Medweckiego 7/U11
  3. Operator’s contact email address: biuro@boit.pl
  4. The Operator is the Controller of your personal data with respect to data provided voluntarily on the Website.
  5. The Website uses personal data for the following purposes:
    • Handling inquiries submitted via the contact form
    • Presenting the offer or information
  6. The Website collects information about users and their behavior as follows:
    1. Through data voluntarily entered in forms, which is entered into the Operator’s systems.
    2. Through storing cookie files on end devices (so-called “cookies”).

2. Selected Data Protection Methods Used by the Operator

  1. Login points and areas where personal data is entered are protected at the transmission layer (SSL certificate). This means personal data and login credentials entered on the site are encrypted on the user’s computer and can only be read on the destination server.
  2. Personal data stored in the database is encrypted so that only the Operator, who holds the key, can read it. This protects the data in the event the database is stolen from the server.
  3. User passwords are stored in hashed form. The hashing function works one-way – it cannot be reversed, which is the current standard for storing user passwords.
  4. The Operator periodically changes its administrative passwords.
  5. To protect data, the Operator regularly performs backups.
  6. A key element of data protection is the regular updating of all software used by the Operator to process personal data, in particular regular updates of software components.

3. Hosting

  1. The Website is hosted (technically maintained) on the servers of the operator: dhosting
  2. To ensure technical reliability, the hosting company maintains server-level logs. The following may be recorded:
    • resources identified by URL (addresses of requested resources – pages, files),
    • the time the request was received,
    • the time the response was sent,
    • the client station name – identified via the HTTP protocol,
    • information about errors that occurred during the HTTP transaction,
    • the URL of the page previously visited by the user (referrer link) – where access to the Website occurred via a link,
    • information about the user’s browser,
    • information about the IP address,
    • diagnostic information related to the self-service ordering process through registration forms on the site,
    • information related to handling email correspondence sent to and from the Operator.

4. Your Rights and Additional Information on How Your Data Is Used

  1. In certain situations, the Controller has the right to transfer your personal data to other recipients, if necessary to perform a contract concluded with you or to fulfill the Controller’s legal obligations. This applies to the following categories of recipients:
    • authorized employees and associates who use the data to carry out the purpose of the website’s operation
  2. Your personal data is processed by the Controller for no longer than necessary to carry out related activities specified by separate regulations (e.g. on accounting). With regard to marketing data, data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • its rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing referred to in point 3.2 above, where personal data is processed for the purpose of the Controller’s legitimate interests, including profiling, provided that this right cannot be exercised where there are valid, legally justified grounds for processing that override your interests, rights, and freedoms, in particular the establishment, exercise, or defense of legal claims.
  5. You have the right to lodge a complaint against the Controller’s actions with the President of the Personal Data Protection Office, ul. Moniuszki 1A, 00-014 Warszawa, Poland.
  6. Providing personal data is voluntary but necessary for the operation of the Website.
  7. You may be subject to automated decision-making, including profiling, for the purpose of providing services under the concluded agreement and for the Controller’s direct marketing purposes.
  8. Personal data is not transferred to third countries within the meaning of personal data protection regulations. This means we do not send it outside the European Union.

5. Information in Forms

  1. The Website collects information voluntarily provided by the user, including personal data, if provided.
  2. The Website may record information about connection parameters (timestamp, IP address).
  3. In some cases, the Website may record information that helps associate the data submitted in a form with the email address of the user completing the form. In such cases, the user’s email address appears within the URL of the page containing the form.
  4. Data provided in a form is processed for the purpose resulting from the function of that specific form, e.g. to handle a service request or a sales inquiry, register for a service, etc. The context and description of each form clearly indicates its purpose.

6. Administrator Logs

  1. Information about user behavior on the Website may be logged. This data is used for website administration purposes.

7. Key Marketing Techniques

  1. The Operator uses statistical traffic analysis via Google Analytics (Google Inc., based in the USA). The Operator does not transfer personal data to the provider of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. Regarding information about user preferences collected by the Google advertising network, users can review and edit information resulting from cookies using this tool: https://www.google.com/ads/preferences/
  2. The Operator uses a solution that studies user behavior by creating heat maps and recording behavior on the site. This information is anonymized before being sent to the service provider, so that it cannot be traced to a specific individual. In particular, passwords entered and other personal data are not recorded.

8. Information About Cookies

  1. The Website uses cookies.
  2. Cookies are IT data, in particular text files, stored on the end device of a Website User and intended for use with the Website’s pages. Cookies typically contain the name of the website they originate from, their storage period on the end device, and a unique number.
  3. The entity placing cookies on the end device of the Website User and accessing them is the Website operator.
  4. Cookies are used for the following purposes:
    1. maintaining the Website user’s session (after logging in), so the user does not have to re-enter their login and password on every subpage of the Website;
    2. achieving the purposes described above under “Key Marketing Techniques”;
  5. Two main types of cookies are used within the Website: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the User’s end device until logging out, leaving the website, or closing the software (web browser). “Persistent” cookies are stored on the User’s end device for the period specified in the cookie’s parameters or until deleted by the User.
  6. Web browsing software (web browser) usually allows cookies to be stored on the User’s end device by default. Website Users can change their settings in this regard. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this subject is available in the help section or documentation of your web browser.
  7. Restricting the use of cookies may affect some of the functionalities available on the Website’s pages.
  8. Cookies placed on the Website User’s end device may also be used by entities cooperating with the Website operator, in particular: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice

  1. If a user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security, or maintaining user preferences may make it difficult, and in extreme cases impossible, to use the website.
  2. To manage your cookie settings, select the web browser you use from the list below and follow the instructions:Mobile devices: