Privacy Policy


This Privacy Policy describes the rules for processing your information, including personal data and cookies.


 

1. General Information

This policy applies to the website operating at: kactoily.eu
The website operator and personal data administrator is: Mirosław Kuchta
Contact email address of the operator: info@kactoily.eu

The Operator is the Administrator of your personal data in relation to data provided voluntarily on the website.

The website processes personal data for the following purposes:

  • Sending newsletters

  • Managing the comment system

  • Handling inquiries via contact forms

  • Preparing, packing, and shipping goods

The website collects information about users and their behavior in the following ways:

  • Through voluntarily entered data in forms, which are saved in the Operator’s systems

  • Through cookies stored on users’ end devices

2. Selected Data Protection Methods Used by the Operator

  • Areas for login and entering personal data are protected at the transmission layer (SSL certificate). This ensures that personal data and login credentials entered on the website are encrypted and can only be read by the target server.

  • The Operator regularly changes administrative passwords.

  • The Operator performs regular data backups.

  • A key element of data protection is regular software updates used by the Operator to process personal data, particularly programming components.

3. Hosting

The website is hosted (technically maintained) on servers operated by another company.

The hosting company maintains server logs for technical reliability purposes. These logs may include:

  • Requested resources identified by URL

  • Request time

  • Response time

  • Client station name (via HTTP protocol)

  • HTTP transaction error information

  • Referrer URL (previous page visited)

  • User’s browser information

  • IP address

  • Diagnostic data related to ordering services via site forms

  • Email handling information directed to and from the Operator

4. Your Rights and Additional Information on How Data Is Used

In some cases, the Administrator may transfer your personal data to other recipients if it is necessary to fulfill a contract with you or to comply with legal obligations. These recipients may include:

  • Hosting providers (under a data processing agreement)

  • Couriers

  • Postal operators

  • Banks

  • Payment operators

  • Comment system providers

  • Marketing service providers acting on behalf of the Administrator

Your personal data is processed no longer than necessary for the tasks defined by legal regulations (e.g. accounting). Marketing data will not be processed for more than 3 years.

You have the right to request:

  • Access to your personal data

  • Rectification of your data

  • Deletion of your data

  • Restriction of processing

  • Data portability

You also have the right to object (as described in point 3.2) to processing based on the legitimate interests of the Administrator, including profiling. However, your objection may be overruled if there are compelling legitimate grounds, such as the establishment, exercise, or defense of legal claims.

You may lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Providing personal data is voluntary but necessary to use the website.

Automated decision-making, including profiling, may be used for the performance of services under the contract or for the Administrator’s direct marketing purposes.

Personal data is not transferred outside the European Union.

5. Information in Forms

The website collects information voluntarily provided by the user, including personal data if submitted.

The website may save information about connection parameters (time, IP address).

In some cases, the website may save information that helps associate form data with the user’s email address. In such cases, the email address may appear in the URL of the page containing the form.

Form data is processed for purposes related to the specific function of the form (e.g. service requests, commercial contact, service registration). The form’s context and description clearly indicate its purpose.

6. Administrator Logs

User behavior on the website may be logged. These data are used for website administration.

7. Important Marketing Techniques

The Operator uses Google Analytics (Google Inc., USA) to analyze traffic on the site. No personal data is shared with Google—only anonymized information. This service uses cookies stored on the user’s device. You can view and manage advertising preferences collected through cookies using this tool:
https://www.google.com/ads/preferences/

The Operator may use automation tools that send emails to users after they visit specific subpages, provided the user has agreed to receive marketing messages.

8. Information About Cookies

The website uses cookies.

Cookies are IT data, especially text files, stored on the user’s end device for use with website pages. Cookies typically contain the website name, storage time, and a unique identifier.

Cookies are placed and accessed by the website operator.

Cookies are used for the following purposes:

  • Maintaining the user session after logging in, so that users do not have to re-enter their login and password on each page

  • Performing functions described in the “Important Marketing Techniques” section above

The website uses two types of cookies:

  • Session cookies – temporary files stored until the user logs out, leaves the page, or closes the browser

  • Persistent cookies – stored for the time specified in cookie parameters or until manually deleted by the user

Most browsers allow cookies by default. Users can change these settings. Browsers also allow deleting or blocking cookies automatically. For more details, see the help or documentation of your browser.

Limiting the use of cookies may affect the functionality of the website.

Cookies may also be used by third-party providers cooperating with the website, including Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give or Withdraw Consent?

If you do not want to receive cookies, you can change your browser settings. Please note that disabling essential cookies may make using the website difficult or impossible.

To manage cookie settings, select your browser from the list below and follow the instructions:

  1. Desktop:

  2. Mobile: