WEBSITE COOKIE POLICY

We, Zviropolis spółka z ograniczoną odpowiedzialnością, with its registered office in Kraków (Zviropolis), value your privacy. That is why we want to give you the most precise information possible about how we use cookies and similar technologies (collectively: cookies) in connection with your use of the website www.zviropolis.pl (the Website).

Some of the cookies used on the Website are essential and necessary for the Website to function properly. We do not need your consent for cookies of this kind (if such cookies contain any information that constitutes personal data, it will be processed for the purpose of maintaining the Website). We also use other cookies for analytical and statistical purposes. For those cookies, we do need your consent.

Because we use external providers (Google and Facebook), some information may be transferred to countries outside the European Economic Area (EEA) that do not ensure an adequate level of personal data protection (in particular the USA). Your acceptance of our use of essential cookies and any consent you give to the use of the other cookies will therefore also be treated as consent to the transfer of data outside the EEA. Please remember that you have the right to withdraw your consent at any time, and that withdrawal does not affect any processing carried out before it.

Detailed information is set out below.

1. What are cookies and what are they used for?

Cookies are IT data (small text files) that a web browser saves and stores on electronic devices (e.g. a computer or phone). Cookies are placed in the web browser by the websites the user visits.

Cookies make it possible to recognise the user’s device so that a website can be displayed correctly, tailored to the user’s individual preferences. Cookies allow information to be stored which is then used to identify the user and remember the history of their actions. Cookies make it possible to establish whether the user has visited a given website before, what choices they may have made (e.g. the language in which the website is displayed) and what information they have left (e.g. in the login panel, so that the user does not have to enter it every time they visit the website).

Cookies are also used to provide certain information to website owners (such as Zviropolis) or other entities. This information takes the form of statistics and analyses that help to understand how the user uses the website, which then makes it possible to make appropriate improvements and increase the performance of such websites.

2. What types of cookies are there?

As a rule, two types of cookies are distinguished:

a) “session cookies“, i.e. temporary files that remain on the user’s device until the user logs out, leaves the website or closes the software (web browser). They are therefore stored for the duration of the browser session and are deleted when the browser is closed or the user logs out of the website;

b) “persistent cookies“, i.e. files that are not deleted when the browser is closed and remain on the user’s device for a specified period or even indefinitely, until the user deletes them manually.

Cookies can also be distinguished by their origin:

a) “first-party cookies“, i.e. files that belong to the website being visited and can only be read by that website. Such files are placed directly by Zviropolis;

b) “third-party cookies“, i.e. files that are placed not directly by Zviropolis but by Zviropolis’ providers/partners. Such files come into play when a website uses external services that also have their own cookies, such as Google or Facebook.

Cookies can also be divided according to the purpose they serve:

a) “essential cookies“, i.e. cookies that help you use a website by enabling basic functions such as page navigation and secure access to the website. The website cannot function properly without these cookies;

b) “analytical/statistical cookies“, i.e. cookies that help website owners understand how users interact with websites by collecting information and then reporting on it.

3. Are cookies personal data?

As a rule, cookies do not constitute personal data; however, certain information stored in cookies, especially when combined with other information about the user, may be regarded as personal data.

4. Which technologies supplied by external providers do we use?

Google Analytics

Zviropolis uses functionality provided by Google, including Google Analytics, to enable the Website to operate and to collect anonymous data about visits to our website. Zviropolis analyses which pages you visited, how much time you spent on your visit and how you moved around the website. This makes it possible to produce statistics and analyses that give Zviropolis greater insight into how the Website affects its users, which in turn allows us to tailor it better to users’ needs.

According to information published by Google, most Google services, including Google Analytics, in the European Economic Area and Switzerland are provided by Google Ireland Ltd. (address: Google Building Gordon House, Barrow St, Dublin 4, Ireland).

However, since the parent company of Google Ireland Ltd. is Google LLC (address: 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA), certain information generated by cookies about your use of the website may be sent to the USA and stored there.

In view of the above, we would like to inform you that, within the meaning of the GDPR, the United States is a so-called third country (a country outside the European Economic Area, which comprises the EU Member States together with Iceland, Liechtenstein and Norway). The Court of Justice of the European Union (CJEU) has found that the United States does not ensure an adequate level of personal data protection (i.e. one that would be consistent with European Union standards). Where data is transferred to the United States, there is a risk that it may be processed by US authorities/services for control and surveillance purposes, possibly without any means of legal redress. If you consent to the use of cookies within Google services, including Google Analytics, this will at the same time constitute consent to the possible transfer of your personal data to the United States (on the basis of Article 49(1)(a) GDPR).

More information about Google’s privacy policy can be found at this link: https://policies.google.com/privacy?hl=pl

Facebook, including Facebook Pixel

Some of the cookies used by Zviropolis are also provided by Facebook, which is operated by Meta Platforms Ireland Limited (address: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland).

The Facebook Pixel tool is used for analytical and statistical purposes; it allows us to reach users who have visited the Website more effectively.

Facebook may combine this information with other information it holds and, on that basis, may be able to identify you and use the data collected for its own purposes.

We have no influence over how Facebook Ireland Ltd. will use the information it collects or where it will send it, and we wish to make you aware of this. We cannot rule out that this data will be sent to Meta Platforms Inc. in the United States. As described above (in relation to Google), the CJEU has found that the United States does not ensure an adequate level of personal data protection (i.e. one that would be consistent with European Union standards). Where data is transferred to the United States, there is a risk that it may be processed by US authorities/services for control and surveillance purposes, possibly without any means of legal redress. If you consent to our use of cookies within the tools provided by Facebook, including Facebook Pixel, this will at the same time constitute consent to the possible transfer of your personal data to the United States (on the basis of Article 49(1)(a) GDPR).

More information about Facebook’s privacy policy can be found at this link:

https://www.facebook.com/privacy/explanation

Hotjar

The tool provided by Hotjar (Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta) allows us to carry out in-depth analysis of user behaviour on the Website (in particular mouse movements, where users click and how they scroll through the content of the Website), as well as to collect certain anonymous information about the user themselves (IP address, device and browser data).

However, we do not combine this information with any other data we hold about the user.

More information about Hotjar’s privacy policy can be found at this link: https://www.hotjar.com/legal/policies/privacy/

5. How can I set the conditions for the storage of cookies or their access to my device?

The user can adjust the cookie settings themselves, specifying the conditions under which cookies are stored and under which they may access the device. The user can make these changes in the options of their web browser and by using the advanced settings tool available directly on the Website.

The settings can be changed so as to block the automatic handling of cookies in the web browser settings or to notify the user each time a cookie is placed on their device. Detailed information on the options and methods for handling cookies in browsers is available in the settings of the relevant web browser.

The user can delete cookies at any time using the functions available in their web browser or by means of the advanced settings tool available on the Website.

6. How do I disable cookies in my browser?

Whether and how cookies can be disabled depends on the browser you use. Below are the addresses of the developers’ pages describing how to disable cookies:

a) Mozilla Firefox: http://support.mozilla.org/pl/kb/blokowanie-ciasteczek

b) Google Chrome: http://support.google.com/chrome/bin/answer.py?hl=pl&answer=95647

c) Internet Explorer 6, 7, 8 and 9: https://support.microsoft.com/pl-pl/help/278835/how-todelete-cookie-files-in-internet-explorer

d) Opera: http://help.opera.com/Linux/9.22/pl/cookies.html

e) Safari: http://support.apple.com/kb/ph5042

7. Can I block data collection by external providers?

Yes. Each of the providers whose services we use has made available a tool for managing their use of the user’s personal data. Links to the individual tools are provided below.

Google Analytics opt-out

https://support.google.com/analytics/answer/181881?hl=pl

Facebook opt-out

https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen

Hotjar opt-out

https://www.hotjar.com/legal/policies/do-not-track/

8. How else can I object to the use of cookies?

Any user may object to the use of cookies for tracking purposes via the Network Advertising opt-out page http://optout.networkadvertising.org, the US page http://www.aboutads.info/choices or the European page http://www.youronlinechoices.com/uk/your-ad-choices/.

9. Which cookies are used on the Website?

10. Consent to the installation of cookies

During your visit to the Website, a banner will be displayed informing you that the Website uses cookies. If you select the “Allow all” option, this will mean that you accept all cookies placed on the Website and confirm that you have read the information about cookies and the purposes for which they are used, as well as the cases in which data collected by means of cookies is passed on to our partners.

Please remember that your consent is not required for essential cookies, as cookies of this kind ensure the full and uninterrupted functioning of the Website. These cookies are exempt from the requirement to obtain your consent under Article 173(3) of the Polish Telecommunications Law.

11. Refusal of consent to the installation of cookies

If you do not want our cookies to be saved on your device, you can select the “Reject all” option. By selecting this option, you will reject all the cookies we use on the Website, apart from those that are technically necessary.

12. Changing cookie settings

You can manage your cookie preferences in detail by selecting the “Personalise” option on the cookie banner displayed to you.

You can change the consents you have given at any time by clicking [ ] on the Website.

13. Personal data

As some of the cookies we use constitute personal data, we want you to be aware of the rights you have under the GDPR:

a) The controller of your personal data, i.e. the entity that decides on the purposes and means of their processing, is Zviropolis sp. z o.o. with its registered office in Kraków, ul. Bonarka 19/5, 30-415 Kraków;

b) You can contact the controller by e-mail at info@zviropolis.com or in writing at the address given in point a) above;

c) Your personal data may be processed in order to provide the basic functions of the Website (performance of the service) on the basis of Article 6(1)(b) GDPR, for the duration of your presence on the Website.

d) In addition, where analytical activities are carried out or the user’s preferences are saved by means of cookies, the controller will obtain consent to the saving of cookies on the user’s device. In that case, the data will be processed for the period of validity of the individual cookies or until an objection to the processing is lodged, whichever comes first. The legal basis for the processing here is the controller’s legitimate interest in monitoring how specific content placed on the Website is “clicked” (Article 6(1)(f) GDPR);

e) Your personal data may also be processed for the purpose of pursuing or defending against claims (should any arise) on the basis of Article 6(1)(f) GDPR, i.e. the controller’s legitimate interest in the possible establishment, pursuit of or defence against claims in court or out of court. This data will be processed until the limitation period for the claim in question expires;

f) The recipients of your personal data are the entities we have indicated above, as well as entities providing us with IT support and web analytics agencies.

In addition, the controller reserves the right to disclose selected information to the competent authorities (e.g. public offices, courts, bailiffs and other institutions) or to third parties who request such information on an appropriate legal basis and in accordance with applicable law.

Because we use the external providers indicated above, some information may be transferred to countries outside the European Economic Area (EEA).

g) You have the right to:

– access your data and obtain a copy of it,

– rectify (correct) your data,

– have your data erased,

– restrict the processing of your data,

– data portability,

– object to the processing of your data,

– withdraw your consent to the processing of your data, without this affecting any processing carried out before the withdrawal,

– lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (UODO);

h) Providing your data is voluntary; however, in the case of essential cookies, it is necessary in order to provide the basic functions of the Website;

i) Your personal data will not be used by Zviropolis for automated decision-making (including profiling) in such a way that such automated processing could result in any decisions producing legal effects.

14. Changes to this cookie policy

We reserve the right to change this cookie policy at any time. Any changes to the cookie policy will be published on the Website.