1. General information
1. This policy applies to the website operating at the URL: bult.dog
2. The operator of the website and the Controller of personal data is: Global Pet’s Food Sp. z o. o., with its registered office in Góreczki, Góreczki 1, 63-720 Koźmin Wielkopolski
3. The operator's email contact address: bultshop@ggpf.pl
4. The Operator is the Controller of your personal data with respect to data provided voluntarily on the website.
5. The website uses personal data for the following purposes:
o Running a classified ads system
o Preparation, packaging, and shipment of goods
o Fulfillment of ordered services
6. The website obtains information about users and their behavior in the following way:
1. Through data voluntarily entered in forms, which are entered into the Operator's systems.
2. By saving cookie files (so-called “cookies”) on end devices.
2. Selected data protection methods used by the Operator
1. Login and personal-data entry areas are protected at the transmission layer (SSL certificate). As a result, personal and login data entered on the website are encrypted on the user's computer and can be read only on the target server.
2. Personal data stored in the database is encrypted so that only the Operator, who possesses the key, can read it. This protects the data in the event that the database is stolen from the server.
3. User passwords are stored in the form of hashed. Function hashing It works one-way—it is not possible to reverse its operation, which is currently the modern standard for storing user passwords.
4. The Operator periodically changes its administrative passwords.
5. To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and uppercase letters, digits, and special characters, at least 8 characters long.
6. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
7. To protect data, the Operator regularly creates backup copies.
3. Hosting
1. The website is hosted (technically maintained) on the operator's server: Shopify Commerce Poland Sp. z o.o.
2. The hosting company keeps server-level logs to ensure technical reliability. The following may be recorded:
o resources identified by a URL (addresses of requested resources—pages, files),
o query arrival time,
o response submission time,
o the client station name – identification performed through the HTTP protocol,
o information about errors that occurred during the HTTP transaction,
o the URL of the page previously visited by the user (referer link) – in the case if the Service was accessed through a link,
o information about the user’s browser,
o information about the IP address,
o diagnostic information related to the process of independently ordering services through the forms on the website,
o information related to handling email sent to the Operator and sent by the Operator.
4. Your rights and additional information on how your data are used
1. In certain situations, the Controller has the right to provide your personal data to other recipients if this is necessary to perform the agreement concluded with you or to fulfill the obligations incumbent on the Controller. This applies to the following groups of recipients:
o authorized employees and associates who use the data to fulfill the purpose of the website’s operation
o couriers
2. Your personal data processed by the Controller will not be processed for longer than necessary to perform the related activities specified in separate regulations (e.g. accounting regulations). Marketing data will not be processed for longer than 3 years.
3. You have the right to request from the Controller:
o access to personal data concerning you,
o their rectification,
o erasure,
o restriction of processing,
o and data portability.
4. You have the right to object to the processing referred to in point 3.3 c), concerning the processing of personal data for the purpose of pursuing the legitimate interests of the Controller, including profiling; however, the right to object may not be exercised where there are compelling legitimate grounds for processing that override your interests, rights and freedoms, in particular the establishment, pursuit or defense of claims.
5. You have the right to lodge a complaint regarding the Controller’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary to use the Service.
7. You may be subject to activities involving automated decision-making, including profiling, for the purpose of providing services under the concluded agreement and for the purpose of the Controller conducting direct marketing.
8. Personal data are not transferred to third countries within the meaning of data protection regulations. This means that we do not send them outside the European Union.
5. Information in forms
1. The Service collects information voluntarily provided by the user, including personal data, if provided.
2. The Service may save information about connection parameters (timestamp, IP address).
3. In some cases, the Service may save information facilitating the association of the data in the form with the email address of the user completing the form. In such a case, the user's email address appears within the address url the page containing the form.
4. The data provided in the form are processed for purposes resulting from the function of the specific form, e.g. to process a service request or sales inquiry, register services, etc. In each case, the context and description of the form clearly indicate what it is used for.
6. Administrator logs
1. Information about user behavior on the Service may be logged. This data is used to administer the Service.
7. Important marketing techniques
1. The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc., headquartered in the USA). The Operator does not provide this service's operator with personal data, but only anonymized information. The service is based on the use of cookies on the user's end device. Regarding information about user preferences collected by Google's advertising network, the user may view and edit information resulting from cookies cookies using the tool: https://www.google.com/ads/preferences/
2. The Operator uses an automated solution to operate the Service for users, for example, one that may send an email to a user after they visit a specific subpage, provided that they have consented to receive commercial correspondence from the Operator.
8. Information about cookies cookies
1. The Service uses cookies cookies.
2. Files cookies (so-called “cookies”) are IT data, in particular text files, stored on the Service User's end device and intended for use on the Service's websites. Cookies usually contain the name of the website from which they originate, the length of time they are stored on the end device, and a unique number.
3. The entity placing cookies on the Service User's end device cookiesand the Service operator is the entity accessing them.
4. Files cookies are used for the following purposes:
1. maintaining the Service user's session (after logging in), so that the user does not have to re-enter their username and password on every subpage of the Service;
2. to achieve the purposes specified above in the “Important marketing techniques” section;
5. The Service uses two main types of cookies cookies: “session” (sessioncookies) and “persistent” (persistent cookies). Cookies "session" files are temporary files stored on the User's end device until the user logs out, leaves the website, or turns off the software (web browser). "Persistent" files cookies are stored on the User's end device for the period specified in the file parameters cookies or until they are deleted by the User.
6. Software for browsing websites (a web browser) usually allows files to be stored by default cookies on the User's end device. Service Users may change the settings in this regard. The web browser allows files to be deleted cookies. It is also possible to block files automatically cookies Detailed information on this subject can be found in the help or documentation for the web browser.
7. Restrictions on the use of files cookies may affect some functionalities available on the Service's websites.
8. Files cookies placed on the Service User's end device may also be used by entities cooperating with the Service operator, in particular: Google (Google Inc., headquartered in the USA), Facebook (Facebook Inc., headquartered in the USA), and Twitter (Twitter Inc., headquartered in the USA).
9. Managing files cookies – how to give and withdraw consent in practice?
1. If the user does not want to receive files cookies, you can change your browser settings. We point out that disabling support for files cookies necessary for authentication, security, and maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites
2. For the purpose of managing settings cookies select the web browser you use from the list below and follow the instructions:
o Edge
o Chrome
o Safari
o Firefox
o Opera
Mobile devices:
o Android
This policy template was generated free of charge for informational purposes, based on our knowledge, industry practices, and legal regulations in force as of 2018-08-14. We recommend reviewing the policy template before using it on your website. The template is based on the situations most commonly encountered on websites, but it may not reflect the full and exact specifics of your website. Read the generated document carefully and, if necessary, adapt it to your situation or seek legal advice. We accept no responsibility for the consequences of using this document, as only you can ensure that all the information it contains is accurate. Please also note that even the best Privacy Policy is only one element of your responsibility for personal data and user privacy on your website.