Privacy Policy – Rules for Processing Information About You, Including Personal Data and Cookies

1. General Information

This policy applies to the website operating at the URL: www.axmed.pl
The operator of the website and the personal data administrator is:
AX Technology Sp. z o.o. Sp. K., ul. Szczecińska 1W, 72-003 Dobra, Poland
Operator’s contact email address: info@axmed.pl
The Operator is the Administrator of your personal data with regard to data provided voluntarily on the website.

The website uses personal data for the following purposes:

• Handling inquiries via forms
• Preparing, packaging, and shipping goods
• Providing ordered services
• Debt collection

The website collects information about users and their behavior in the following ways:

• Through data voluntarily entered into forms, which are then entered into the Operator’s systems.
• By storing cookies on end-user devices.

2. Selected Data Protection Methods Used by the Operator

• Login areas and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that the personal and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
• Personal data stored in the database is encrypted so that only the Operator holding the key can read it. This protects the data in case the database is stolen from the server.
• User passwords are stored in a hashed form. The hashing function is one-way – it cannot be reversed, which is the current standard for storing user passwords.
• The Operator periodically changes its administrative passwords.
• The Operator regularly creates backup copies to protect data.
• A crucial element of data protection is the regular updating of all software used by the Operator to process personal data, especially programming components.

3. Hosting

The website is technically hosted on the servers of: home.pl

To ensure technical reliability, the hosting company maintains server-level logs. These logs may include:

• Resources identified by a URL (addresses of requested pages and files)
• Time the request was received
• Time the response was sent
• Client station name (identified via HTTP protocol)
• Information about errors that occurred during HTTP transactions
• URL of the referring site (if the site was accessed via a link)
• User browser information
• IP address
• Diagnostic data related to the service ordering process through the forms on the site
• Information related to handling email sent to and from the Operator

4. Your Rights and Additional Information on Data Usage

In certain situations, the Administrator has the right to transfer your personal data to other recipients if necessary to fulfill a contract with you or to fulfill legal obligations. This applies to the following groups:

• Hosting company (on a data processing basis)
• Couriers
• Legal and debt collection firms
• Payment operators
• Authorized employees and associates who use the data to perform the site’s operations

Your personal data will be processed no longer than necessary for the tasks defined by legal regulations (e.g., accounting regulations). For marketing data, the processing period will not exceed 3 years.

You have the right to request from the Administrator:

• Access to your personal data
• Rectification of your data
• Erasure of your data
• Restriction of processing
• Data portability

You also have the right to object to the processing of your personal data (as described in point 3.2) when it is based on legitimate interests pursued by the Administrator, including profiling. However, this right may not apply if there are overriding legitimate grounds for processing, such as establishing, pursuing, or defending legal claims.

You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Providing personal data is voluntary but necessary to use the website.

Automated decision-making, including profiling, may be used for the purpose of providing services and for direct marketing by the Administrator.

Your personal data is not transferred outside the European Union.

5. Information in Forms

The website collects information voluntarily provided by the user, including personal data, if provided.

The website may store information about connection parameters (timestamp, IP address).

In some cases, the website may store information facilitating the association of form data with the user’s email address. In such cases, the user’s email address may appear in the URL of the page containing the form.

Data provided in the form is processed for the purpose of the specific form, such as handling service requests, business inquiries, or service registration. The context and description of each form clearly indicate its purpose.

6. Administrator Logs

User activity on the site may be logged. This data is used for website administration.

7. Important Marketing Techniques

• The Operator uses Google Analytics (by Google Inc., USA) for statistical analysis of site traffic. No personal data is shared—only anonymized data is used. The service relies on cookies. Users can view and modify preferences related to Google’s advertising network via: https://www.google.com/ads/preferences/
• The Operator uses remarketing techniques to match ads to user behavior on the site. This may give the impression that personal data is being used for tracking, but in fact, no personal data is transmitted to advertisers. The prerequisite for this is enabled cookie support.
• The Operator uses Facebook Pixel (by Facebook Inc., USA). This technology allows Facebook to know that a registered user has visited the site. Facebook acts as the data controller in this case. No additional personal data is provided to Facebook by the Operator. The service is based on cookies.
• The Operator uses automation tools to communicate with users, e.g., sending emails after a visit to a specific page, provided the user has agreed to receive marketing emails.

8. Information About Cookies

• The website uses cookies, which are text files stored on the user’s end device and used by the site. Cookies usually contain the website’s name, storage duration, and a unique identifier.
• The entity placing and accessing cookies is the website Operator.

Cookies are used for the following purposes:

• Maintaining user sessions (after logging in), so the user does not have to re-enter login credentials on each subpage
• For purposes listed in the “Important Marketing Techniques” section above

The site uses two types of cookies:

• Session cookies – temporary files stored until logout, site exit, or browser shutdown
• Persistent cookies – stored for a period specified in their parameters or until deleted by the user

Web browsers usually allow cookies by default. Users can change browser settings to block or delete cookies. More information is available in browser help files.

Disabling cookies may affect the functionality of the site.

Cookies may also be used by third-party partners, particularly: Google Inc. (USA), Facebook Inc. (USA), Twitter Inc. (USA)

9. Managing Cookies – How to Give or Withdraw Consent in Practice

If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies necessary for authentication, security, or user preferences may make it difficult or impossible to use the website.