01
General information
- This policy applies to the website available at https://arpubrothers.com (the “Website”).
- The Website operator and personal data controller is Lead Hero Group sp. z o.o., Rynek 39/40, 50-102 Wrocław, Poland (the “Operator” or “Controller”).
- The Operator’s contact email address is hello@arpubrothers.com.
- The Operator is the controller of the personal data you voluntarily provide through the Website.
- The Website uses personal data for the following purposes:
- Providing a newsletter
- Conducting online chats
- Handling enquiries submitted through forms
- Presenting offers or information
- The Website collects information about users and their behaviour in the following ways:
- Through data voluntarily entered in forms and submitted to the Operator’s systems.
- By storing cookies on users’ devices.
02
Selected data protection measures used by the Operator
- Login areas and areas where personal data is entered are protected during transmission using an SSL certificate. As a result, personal data and login credentials entered on the Website are encrypted on the user’s computer and can only be read by the destination server.
03
Hosting
- The Website is hosted (technically maintained) on servers operated by dhosting.pl sp. z o.o.
- Hosting provider details: dhosting.pl sp. z o.o., ul. Pamiętna 14B/2, 02-972 Warszawa, Poland. Tax identification number (NIP): 7010198361; statistical identification number (REGON): 141998822; National Court Register number (KRS): 0000336780. The company is entered in the register maintained by the District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register. Share capital: PLN 260,000.00, fully paid up.
- Contact details and information about the hosting provider are available at https://dhosting.pl/contact.
- Information about how the hosting provider processes data is available in its privacy policy: https://dhosting.pl/polityka_prywatnosci.
- To ensure technical reliability, the hosting provider maintains server logs. These may record:
- resources identified by a URL (addresses of requested resources, such as pages and files);
- the time a request is received;
- the time a response is sent;
- the client host name, identified using the HTTP protocol;
- information about errors occurring during an HTTP transaction;
- the URL of the page previously visited by the user (the referrer), if the user accessed the Website through a link;
- information about the user’s browser;
- IP address information;
- diagnostic information related to ordering services independently through registration tools on the Website;
- information related to email received and sent by the Operator.
04
Your rights and additional information about how your data is used
- In certain circumstances, the Controller may disclose your personal data to other recipients if this is necessary to perform a contract with you or to fulfil the Controller’s obligations. This applies to the following categories of recipients:
- the hosting provider, acting as a data processor;
- The Controller processes your personal data for no longer than necessary to carry out the activities governed by applicable legislation (for example, accounting regulations). Marketing data will not be processed for longer than three years.
- You have the right to request the following from the Controller:
- access to your personal data;
- rectification of your data;
- erasure of your data;
- restriction of processing;
- data portability.
- You have the right to object to the processing referred to in point 3.3(c) of this policy where personal data is processed for the Controller’s legitimate interests, including profiling. This right cannot be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular for establishing, exercising or defending legal claims.
- You may lodge a complaint about the Controller’s activities with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.
- Providing personal data is voluntary, but necessary to use the Website’s services.
- You may be subject to automated decision-making, including profiling, for the purpose of providing services under a contract and carrying out the Controller’s direct marketing activities.
- Personal data is transferred to third countries within the meaning of data protection legislation. This means that we transfer it outside the European Union.
05
Information submitted through forms
- The Website collects information voluntarily provided by users, including personal data if supplied.
- The Website may record connection parameters, such as a timestamp and IP address.
- In some cases, the Website may record information that helps associate data submitted through a form with the email address of the user completing it. In such cases, the user’s email address appears in the URL of the page containing the form.
- Data submitted through a form is processed for the purpose of that particular form, for example to handle a service request or business enquiry, register a service, or carry out a similar activity. The context and description of each form clearly explain its purpose.
06
Controller logs
- Information about users’ behaviour on the Website may be logged. This data is used to administer the Website.
07
Key marketing techniques
- The Operator uses Google Analytics (Google Inc., based in the United States) to analyse Website traffic statistics. The Operator does not disclose personal data to the service provider, but only anonymised information. The service uses cookies stored on the user’s device. Users can view and edit information about their preferences collected by the Google advertising network using the following tool: https://www.google.com/ads/preferences/
- The Operator uses remarketing techniques to tailor advertising messages to users’ behaviour on the Website. This may give the impression that users’ personal data is being used to track them; however, in practice, the Operator does not disclose any personal data to advertising providers. These activities require cookies to be enabled.
- The Operator uses the Facebook pixel. This technology allows Facebook (Facebook Inc., based in the United States) to know that a person registered with Facebook is using the Website. Facebook relies on data for which it is itself the controller; the Operator does not provide Facebook with any additional personal data. The service uses cookies stored on the user’s device.
- The Operator uses a solution that analyses users’ behaviour by generating heatmaps and recording activity on the Website. This information is anonymised before being sent to the service provider, so the provider cannot identify the individual concerned. In particular, entered passwords and other personal data are not recorded.
For enquiries about your personal data, contact us at: hello@arpubrothers.com.