Privacy Policy

Information about the protection of your personal data in accordance with GDPR

The privacy policy describes the principles of processing information about you, including personal data and cookies.

General Information

This policy applies to the Website, operating under the URL: tedesolutions.pl

Website operator and Personal Data Controller:

TEDESolutions sp. z o.o.

ul. Stolarska 6C, 86-021 Maksymilianowo

Operator's contact email address: marcin.wrebel@tedesolutions.pl

The Operator is the Controller of your personal data with respect to data provided voluntarily on the Website.

The Website uses personal data for the following purposes:

  • Conducting online chat conversations
  • Handling inquiries via forms
  • Fulfillment of ordered services
  • Presentation of offers or information

Legal basis for data processing:

  • Art. 6 sec. 1 lit. a GDPR - consent (marketing, newsletter)
  • Art. 6 sec. 1 lit. b GDPR - performance of a contract
  • Art. 6 sec. 1 lit. f GDPR - legitimate interest (analytics, security)

The Website performs the functions of obtaining information about users and their behavior in the following way:

  • Through data voluntarily entered in forms, which are entered into the Operator's systems
  • By storing cookies in end devices

Selected data protection methods used by the Operator

  • Login areas and personal data entry are protected at the transmission layer (SSL certificate). Thanks to this, personal data and login data entered on the website are encrypted on the user's computer and can only be read on the target server.
  • Personal data stored in the database is encrypted in such a way that only the Operator possessing the key can read it. This protects the data in case the database is stolen from the server.
  • User passwords are stored in hashed form. The hashing function works one-way - it is not possible to reverse its operation, which is currently the modern standard for storing user passwords.
  • Two-factor authentication is used on the website, which is an additional form of protection for logging into the Website.
  • The Operator periodically changes its administrative passwords.
  • To protect data, the Operator regularly performs security backups.
  • An important element of data protection is regular updates of all software used by the Operator to process personal data, which in particular means regular updates of programming components.

Hosting

The Website is hosted (technically maintained) on the servers of the operator:

Domena.pl sp. z o.o.

Gdańska 119

85-022 Bydgoszcz

Tax ID: 554-24-68-096

The hosting company, in order to ensure technical reliability, keeps logs at the server level. The following may be recorded:

  • resources identified by URL (addresses of requested resources - pages, files)
  • query arrival time
  • response sending time
  • client station name - identification carried out by HTTP protocol
  • information about errors that occurred during HTTP transactions
  • URL of the page previously visited by the user (referer link) - in case the transition to the Website occurred through a link
  • user's browser information
  • IP address information
  • diagnostic information related to the process of self-ordering services through recorders on the website
  • information related to handling e-mail addressed to and sent by the Operator

Your rights and additional information on how data is used

In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to the following groups of recipients:

  • authorized employees and associates who use data to achieve the purpose of the website
  • companies providing marketing services on behalf of the Administrator
  • IT and hosting service providers
  • analytical tool providers (Google, Facebook, Twitter)

Data retention period:

  • Your personal data is processed by the Administrator no longer than is necessary to perform the activities associated with them specified by separate regulations (e.g., on accounting - 5 years).
  • With regard to marketing data, data will not be processed for longer than 3 years.
  • Data necessary for the performance of the contract - for the duration of the contract and the limitation period for claims.

You have the right to request from the Administrator:

  • access to your personal data
  • their rectification
  • deletion
  • restriction of processing
  • and data portability

You have the right to object to the processing of personal data for the purpose of performing legitimate interests pursued by the Administrator, including profiling, provided that the right to object may not be exercised in the case of valid legally justified grounds for processing, superior to your interests, rights and freedoms, in particular establishing, pursuing or defending claims.

Complaints about the Administrator's actions can be submitted to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary but necessary to operate the Website.

Actions may be taken against you consisting of automated decision-making, including profiling, in order to provide services under the concluded contract and for the purpose of the Administrator conducting direct marketing.

Transfer of data to third countries:

Personal data may be transferred to the USA in connection with the use of Google Analytics, Facebook and Twitter services. The transfer takes place on the basis of standard contractual clauses approved by the European Commission and adequacy decisions under the EU-U.S. Data Privacy Framework.

Information in forms

  • The Website collects information provided voluntarily by the user, including personal data, if provided.
  • The Website may store information about connection parameters (time stamp, IP address).
  • The Website, in some cases, may save information facilitating the association of data in the form with the e-mail address of the user filling out the form. In such case, the user's e-mail address appears inside the URL of the page containing the form.
  • Data provided in the form is processed for the purpose resulting from the function of a specific form, e.g., to carry out a service request or business contact, service registration, etc. Each time the context and description of the form clearly informs what it is for.

Administrator Logs

Information about user behavior on the website may be subject to logging. This data is used for website administration purposes.

Important marketing techniques

Google Analytics

The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user's end device.

Regarding information about user preferences collected by the Google advertising network, users can view and edit information resulting from cookies using the tool:https://www.google.com/ads/preferences/

Remarketing

The Operator uses remarketing techniques, allowing advertising messages to be matched to user behavior on the website, which may give the illusion that the user's personal data is used to track them, but in practice no personal data is transferred from the Operator to advertising operators. The technological condition for such actions is enabled cookie support.

Heat maps

The Operator uses a solution that examines user behavior by creating heat maps and recording behavior on the website. This information is anonymized before being sent to the service operator so that they do not know which natural person it concerns. In particular, entered passwords and other personal data are not recorded.

Marketing automation

The Operator uses a solution automating the operation of the Website in relation to users, e.g., it may send an email to the user after visiting a specific subpage, provided that they have consented to receiving commercial correspondence from the Operator.

Information about cookies

The Website uses cookies.

Cookies are IT data, in particular text files, which are stored in the Website User's end device and are intended for use on the Website's web pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.

The entity placing cookies on the Website User's end device and obtaining access to them is the Website operator.

Cookies are used for the following purposes:

  • maintaining the user session of the Website (after logging in), thanks to which the user does not have to re-enter login and password on each subpage of the Website
  • implementation of the purposes specified above in the "Important marketing techniques" section

Types of cookies:

Two basic types of cookies are used within the Website:

  • "session" cookies - temporary files that are stored in the User's end device until logging out, leaving the website or turning off the software (web browser)
  • "persistent" cookies - stored in the User's end device for the time specified in the cookie parameters or until they are deleted by the User

Web browsing software (web browser) usually allows cookies to be stored on the User's end device by default. Website Users can change settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject is contained in the help or documentation of the web browser.

Restrictions on the use of cookies may affect some functionalities available on the Website's web pages.

Cookies placed on the Website User's end device may also be used by entities cooperating with the Website operator, in particular this applies to companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

Managing cookies – how to express and withdraw consent in practice?

If the user does not want to receive cookies, they can change browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may hinder, and in extreme cases may prevent the use of websites.

Privacy policy valid as of the publication date. The Administrator reserves the right to make changes to this privacy policy, of which users will be informed.

Last update: September 2025

Privacy Policy - TEDESolutions | GDPR Personal Data Protection