Privacy policy and Cookies

I. Personal Data

We publish this document to explain the reasons why we collect and process personal data as part of our business activities:

  1. What is personal data?

This includes all information that allows an individual to be distinguished from others without significant effort. It may relate directly to that person (such as name, ID number, or even an email address or online account), or indirectly through characteristics, health condition, opinions, place of residence, habits, race, or religion.

  1. What personal data do we process?

We process data provided by our Clients, Contractors, and Employees in connection with the use of our services, cooperation, or employment.

  1. What does data processing mean?

Processing refers to any actions we may perform on personal data—whether active, such as collecting, retrieving, recording, combining, modifying, or sharing—or passive, such as storing, restricting, deleting, or destroying.

  1. Who is the Data Controller (i.e., who controls processing and security)?

The data controller is Ara Cursus Sp. z o. o., ul. Domaniewska 37 / 2.43, 02-672 Warsaw, Poland, KRS: 0000794468, NIP: 5213872005, REGON: 383952353

  1. On what legal basis and for what purpose do we process your data? 

Each data processing activity must be based on a valid legal basis in accordance with applicable regulations. This may include your consent or other legal provisions, including Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), or national laws such as acts or regulations.

Your data may be processed for several purposes, for example:

  • If you provide your data by sending an email, we process it based on your consent, which is given automatically when you submit your data (e.g., email address). This consent is voluntary – you may withdraw it at any time. If you do, we will promptly delete all provided information, unless you have become our Client.
  • If you are a Client or interested in our services, we process your data in connection with a contract or preparation for a contract. This always happens with your knowledge and intent. You know which personal data is needed to sign the agreement and which will be provided later.
  • We may also process your data to ensure the security of our IT network and information. This occurs when you use or connect to our infrastructure—for example, by visiting our website or sending us messages. This constitutes our legitimate interest.
  • If you apply for a job with us, your data is processed in the form of the application or CV you send us. This happens with your knowledge and written consent, which you may withdraw at any time. In such a case, your application will not be considered and all your data will be deleted. If you are hired, the further rules for processing and the required scope of data collection and storage are governed by labor law.
  1. Who do we share your data with?

According to applicable law, your data may be shared with entities processing it on our behalf, such as: postal operators, accounting firms, IT service providers, or subcontractors mentioned in your agreement. We are also obliged to share data upon request by authorities entitled to it under other legal regulations (e.g., courts or law enforcement). Disclosure will only occur if they formally request it and cite the legal basis for doing so.

We do not plan to transfer your data to third countries or international organizations (i.e., outside the European Economic Area). Within the EU, your data enjoys the same level of protection in all member states thanks to the GDPR. The text of the GDPR is available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

  1. How long will we process your data?

We pay great attention to minimizing the scope and duration of data processing. We regularly review our documents—both paper and electronic—and delete unnecessary ones after they expire. Depending on the legal basis for processing, the data retention period may be determined by laws beyond our control, such as labor law, social security, or accounting regulations.

If you used our services and we signed an agreement, we will retain your data in financial and accounting records for 5 calendar years from the date of purchase or agreement.

If we ever need to use your data for a different purpose than originally intended, we will notify you and allow you to object.

  1. What are your rights regarding your data?

If we process your personal data, you always have the right to:

  • request access to data – as per Article 15 GDPR,
  • request rectification – as per Article 16 GDPR,
  • request deletion – as per Article 17 GDPR,
  • request restriction of processing – as per Article 18 GDPR,
  • object to data processing – as per Article 21 GDPR,
  • data portability, including receiving a copy – as per Article 20 GDPR.

All these rights are described in Articles 15–21 of the GDPR, available at:

http://eur-lex.europa.eu/legal-content/PL/TXT/?uri=OJ:L:2016:119:TOC

You may also withdraw your consent at any time. In such a case, we will delete your data immediately, unless there is a legal obligation requiring further processing (e.g., if you request to remove your email after unsubscribing from a newsletter, we will delete it from our mailing list).

If you believe your rights have been violated or your data was not properly protected, you have the right to lodge a complaint with the supervisory authority — currently the President of the Personal Data Protection Office (UODO).

  1. Automated decision-making and profiling

We do not make any automated decisions based on your data, nor do we engage in profiling.

  1. How do we protect your data?

To ensure the security of your data, we apply legally required organizational and technical measures. Our office is equipped with physical security systems to prevent unauthorized access. Our staff are authorized and may only process data to the extent necessary to perform their job duties.

  1. Privacy protection for minors

Our website does not monitor or verify the age of users, senders, or recipients. Contact information provided by visitors (such as phone numbers or email addresses) is used to fulfill orders or provide information about our company.

Minors should not send any information, place orders, or subscribe to our services without the consent of their parents or legal guardians. We will require such consent whenever we learn the user is a minor (“child”) as defined under national data protection laws.

II. Cookies

  1. What are cookies and what are they used for?

Cookies are text files saved on your device and used by a server to recognize that device upon reconnecting. Cookies are downloaded each time you visit or leave the site. They are not used to identify you personally, but rather your device—for example, to optimize the display for your screen resolution or device type (desktop or mobile).

Cookies are typically used for counters, surveys, online stores, login-restricted sites, ads, and visitor activity monitoring. They can also help remember your preferences and tailor content and advertising accordingly.

Virtually all websites use cookies—including search engines, news sites, blogs, online stores, government websites, and more. Our site uses them as well.

More info: www.wszystkoociasteczkach.pl

  1. What do cookies do?

In general, they:

  • identify the computer and browser used to visit websites (e.g. to see if a device has visited before),
  • are not linked to personal data obtained through registration,
  • are not harmful to your device or its performance,
  • do not alter configuration settings on your device or software,
  • can only be read by the server that created them,
  • send behavior data to servers to help customize content and ads.
  1. Types of cookies
  • Session cookies – stored temporarily in browser memory until the session ends. Required for proper functionality. Deleted automatically when the browser closes.
  • Persistent cookies – help with frequent site use (e.g., save color scheme or menu layout). Stored longer, depending on browser settings. Sometimes referred to as “tracking cookies.”
  • Third-party cookies – usually from ad servers, search engines, etc., used to tailor ads. They also help count ad clicks, preferences, etc.
  1. Do you have to consent to our use of cookies?

You can manage cookie settings yourself in your browser. Most browsers allow:

  • accepting cookies (for full website functionality),
  • managing cookies per website,
  • defining settings per cookie type (e.g., treat persistent as session cookies),
  • blocking or deleting cookies.

Browser help pages:
1) Google Chrome
2) Internet Explorer
3) Mozilla Firefox
4) Opera
5) Safari

If you do not change your browser settings, it means you consent to our use of cookies. Blocking or disabling certain cookies may limit full functionality or interfere with proper website performance.

  1. What do we use cookies for?

Our site uses both session and persistent cookies. We use them for:

  • creating statistics to improve content and structure,
  • maintaining User sessions.

We collect browser name/version, language settings, date/time of server request, IP address, and requested URL. This is required for proper functionality.

We use Google Analytics for statistics. It uses its own cookies per Google’s Privacy Policy:
https://www.google.com/intl/pl/policies/privacy/

Google stores and uses cookie-based data for analytics and services. It may share it with third parties if legally required or acting on Google’s behalf.

We do not share user data with third parties unless required by law enforcement in connection with legal action. This only happens if illegal or harmful activity is detected.