Privacy policy

1. General Information

This policy applies to the Websites operating at the following URLs: progrestal.pl and deltacheese.pl

The Operator of the service and the Controller of personal data is: Progrestal Sp. z o.o. Fabryczna 1, 41-909 Bytom, Poland Operator's contact email address: info@progrestal.pl

The Operator is the Controller of your personal data in relation to data provided voluntarily on the Website. The Website uses personal data for the following purposes:

• Handling inquiries via the form

• Presentation of the offer or information

The Website performs functions of obtaining information about users and their behavior in the following way:

• Through data voluntarily entered in forms, which are entered into the Operator's systems.

• By saving cookie files (so-called "cookies") in end devices.

2. Selected Data Protection Methods Used by the Operator

Login and personal data entry areas are protected in the transmission layer (SSL certificate). Thanks to this, personal data and login data entered on the website are encrypted on the user's computer and can only be read on the target server. User passwords are stored in hashed form. The hash function works one-way - it is not possible to reverse its operation, which is currently the modern standard in the field of storing user passwords. The Operator periodically changes its administrative passwords. To protect data, the Operator regularly performs backup copies. An important element of data protection is the regular update of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

3. Hosting

The Website is hosted (technically maintained) on the operator's servers: Wix.com Ltd. based in Israel

To ensure technical reliability, the hosting company keeps logs at the server level. The following may be subject to recording:

• resources specified by the URL identifier (addresses of requested resources – pages, files),

• time of arrival of the query,

• time of sending the response,

• name of the client station – identification carried out by the HTTP protocol,

• information about errors that occurred during the execution of the HTTP transaction,

• URL address of the page previously visited by the user (referer link) – in case the transition to the Website took place via a link,

• information about the user's browser,

• information about the IP address,

• diagnostic information related to the process of self-ordering services through registrars on the website,

• information related to handling electronic mail directed to the Operator and sent by the Operator.

4. Your Rights and Additional Information on How Data is Used

In some situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Controller. This applies to such groups of recipients:

• hosting company on a mandated basis

• authorized employees and associates who use the data to achieve the purpose of the website's operation

• companies providing marketing services to the Controller

Your personal data is processed by the Controller for no longer than is necessary to perform related activities specified by separate regulations (e.g., on keeping accounts). Regarding marketing data, the data will not be processed for longer than 3 years.

You have the right to request from the Controller:

• access to personal data concerning you,

• their rectification,

• deletion,

• restriction of processing,

• and data portability.

You have the right to object to the processing indicated in point 3.2 regarding the processing of personal data for the purpose of performing legitimate interests pursued by the Controller, including profiling, whereby the right to object will not be exercisable in the event of the existence of valid legally justified grounds for processing, overriding your interests, rights, and freedoms, in particular establishing, investigating or defending claims.

You have the right to lodge a complaint against the Controller's actions to the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary, but necessary to operate the Website.

Automated decision-making activities may be undertaken in relation to you, including profiling for the purpose of providing services under the concluded contract and for the purpose of conducting direct marketing by the Controller.

Personal data may be transferred outside the European Economic Area (EEA) to our trusted partners:

• Wix.com Ltd. (based in Israel), where our website is hosted. Israel has been recognized by the European Commission as a country ensuring an adequate level of data protection.

• Google LLC (based in the USA), as part of the use of Google Analytics analytical tools.

• Meta Platforms, Inc. (based in the USA), as part of the use of Facebook Pixel.

The transfer of data to the USA takes place on the basis of standard contractual clauses approved by the European Commission, which are intended to ensure an adequate level of security.

5. Information in Forms

The Website collects information provided voluntarily by the user, including personal data, if provided. The Website may save information about connection parameters (time designation, IP address). The Website, in some cases, may save information facilitating the linking of data in the form with the e-mail address of the user filling out the form. In such a case, the user's e-mail address appears inside the url address of the page containing the form. Data provided in the form are processed for the purpose resulting from the function of a specific form, e.g., to process a service request or commercial contact, service registration, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Controller Logs

Information on user behavior on the website may be subject to logging. These data are used to administer the website.

7. Significant Marketing Techniques

The Operator uses statistical analysis of website traffic via Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operator of this service, but only anonymized information. The service is based on the use of cookies on the user's end device. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

The Operator uses remarketing techniques that allow matching advertising messages to the user's behavior on the website, which may give the illusion that the user's personal data is used to track him, but in practice, no personal data is transferred from the Operator to advertising operators. The technological condition for such activities is enabled cookie support.

The Operator uses the Facebook Pixel. This technology causes the Facebook service (Facebook Inc. based in the USA) to know that a person registered with it uses the Website. In this case, it is based on data for which it is the controller itself, the Operator does not transfer any additional personal data to the Facebook service. The service is based on the use of cookies on the user's end device.

8. Information about Cookies

The Website uses cookies. Cookie files (so-called "cookies") are IT data, in particular text files, which are stored in the Service User's end device and are intended for using the Website's pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number. The entity placing cookies on the Service User's end device and obtaining access to them is the Website operator. Cookies are used for the following purposes:

• maintaining the Service user's session (after logging in), thanks to which the user does not have to re-enter the login and password on every subpage of the Website;

• achieving the goals set out above in the section "Significant marketing techniques";

Two basic types of cookies are used within the Website: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website, or turning off the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User. Software for browsing websites (web browser) usually by default allows storing cookies on the User's end device. Service Users can change settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject is contained in the help or documentation of the web browser. Restrictions on the use of cookies may affect some of the functionalities available on the Website's pages. Cookies placed on the Service User's end device may also be used by entities cooperating with the Website operator, in particular, this concerns companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

If the user does not want to receive cookies, they can change their browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites. To manage cookie settings, select the web browser you are using from the list below and follow the instructions:

• Edge

• Internet Explorer

• Chrome

• Safari

• Firefox

• Opera

Mobile devices:

• Android

• Safari (iOS)

• Windows Phone