- cardinal.co website (hereinafter: “Website”) is run by Cardinal Cryptography Sp. z o.o. with registered seat in Kraków (30-519), at. Jana Zamoyskiego Street 79a, e-mail: email@example.com (hereinafter: “Controller”).
- As part of the Website activity, the data of the users of the Website (hereinafter: “Users”) may be collected, processed and used, including personal data.
- Additionally, information about the user’s IP address, the time of arrival of the request and sending a response, the website address from which the user was redirected to the Website and the type of software used by the user may be collected. This information is used for the purpose of administering the Website and for creating statistics and analyses.
§1. General Information
§2. Personal Data
- Controller of personal data is Cardinal Cryptography Sp. z o.o. with registered seat in Kraków (30-519), at. Jana Zamoyskiego Street 79a, e-mail: firstname.lastname@example.org.
- Controller, may collect and process personal data through the Website for purposes such as:
- contacting the User,
- sending to the User a newsletter and providing commercial information via e-mail or phone,
- statistics and analysis of Users’ behaviour on websites.
- Controller may provide Users’ data to subcontractors (entities that he uses during the processing) such as service providers and IT solutions or entities providing IT services.
- Personal data is processed for a period that is each time indicated to the User in the relevant information submitted to him at the time of a data collection. In the case of data processed for the purpose of statistics and analysis of Users’ behavior on websites and for contact with the User, the Controller may process for a period of 3 years from the date of their collection.
- The data subject has the following rights:
- right to access personal data and the right to receive a copy;
- right to rectification of the personal data;
- right to erasure of the personal data;
- right to restriction of processing concerning the personal data;
- right to portability of the personal data;
- right to object to processing of the personal data;
- right to lodge a complaint with a supervisory authority.
- By processing data, the Controller may use entities based in the USA. In consequence, the personal data may be transferred outside the European Economic Area. Controller uses only entities that are part of the EU-US Privacy Shield program and provide an adequate level of data protection.
- In the event that the data is processed on the basis of consent, the User whose who is a data subject, also has the right to withdraw consent to the processing of personal data at any time. Withdrawal of consent does not affect the legality of the processing, which was made on the basis of consent before its withdrawal.
- As part of the functionality of the Website, small files called cookies are used. These files are saved by the server on end user’s computer. Using cookies should be understood as their storage and access to them by the Controller.
- Cookies are IT data, in particular text files, which are stored in the User’s end device and are intended for the use of websites. Cookies usually contain the name of the website they come from, the time they are stored on the end device, content (e.g., share IDs) and a unique number.
- Cookies are used for the following purposes:
- adapting the content of the Website to the User’s preferences and optimizing the use of the Website. In particular, these files allow to recognize the User’s device and properly display the Website, adapting it to his needs and preferences;
- creating statistics and analyses regarding the use of the Website;
- using the IT tools referred to in §4.
- As part of the Website, two basic types of cookies are used: “session” (session cookies, session storage) and “permanent” (persistent cookies, local storage). Session cookies are temporary files that are stored on the User’s device until the session expires (e.g., leaving the Website, deleting them by the User, or turning the software off). Persistent cookies are stored in the User’s device for the time specified in the cookie file parameters or until they are deleted by the User.
- The default settings of web browsers usually allow the saving of cookies on end user’s devices. These settings can be changed by Users.
- Controller informs that pursuant to the provisions of the Telecommunications Law Act, the end user’s consent to storage of information or access to information already stored in the user’s telecommunications end device, may also be expressed by the user through the software settings installed in the end device used by him. Therefore, if the user did not want to express such consent, he shall change the settings of the web browser.
- Detailed information on changing browser settings regarding cookies and their removal can be obtained on the official website of a specific browser. In particular, the above information can be found at the following website addresses:
§4. IT tools
- Controller uses the Google Analytics tools provided by Google LLC, that has its headquarters in the USA, therefore outside of the European Economic Area. Google LLC. is an entity that has joined the EU-US Privacy Shield program and ensures an adequate level of data protection. This tool is used to analyze website statistics.
- Controller uses the Facebook Pixel tool, which is an analytical tool that helps to measure the effectiveness of advertisements based on the analysis of actions taken by end users on the website, which in turn allows for conducting more effective advertising campaigns.