Privacy Policy

1. General Information

1. This policy applies to the website operating at: https://apkstudio.pl

2. The website operator and data controller is: Artur Komoter IT, Tax Identification Number (NIP) 7312069181, National Business Registry Number (REGON) 386781159

3. The operator’s e-mail address is: artur@apkstudio.pl

4. The Operator is the Controller of your personal data in relation to data provided voluntarily on the Website.

5. The website uses personal data for the following purposes:

   • Handling enquiries submitted through the form
   • Providing quotations or information

6. The website collects information about users and their behaviour in the following ways:

   1. Through information that users enter voluntarily in forms and that is submitted to the Operator’s systems.
   2. By storing cookies on users’ devices.

2. Selected Data Protection Methods Used by the Operator

1. Login pages and forms that collect personal data use SSL encryption. This protects personal data and login details in transit between the user’s device and the server.
2. User passwords are stored in hashed form. The hash function works in one direction; it is impossible to reverse its operation, which is currently the modern standard for storing user passwords.
3. To minimise the risk of unauthorised access to data, the Operator uses passwords of at least eight characters that contain upper- and lower-case letters, numbers and special characters.
4. The website uses two-factor authentication, which is an additional form of protection for logging in to the website.
5. The Operator regularly updates all software and components used to process personal data.
6. The Operator creates regular backups to protect the data.

3. Hosting

1. The website is hosted (technically maintained) on the operator’s server: HitMe

2. To ensure technical reliability, the hosting company keeps logs at the server level. The following may be recorded:

   • resources specified by the URL identifier (addresses of requested resources: pages, files),
   • request time,
   • time of sending the response,
   • name of the client station (identification carried out via the HTTP protocol),
   • information about errors that occurred during the HTTP transaction,
   • URL address of the page previously visited by the user (referrer link), if the Website was accessed via a link,
   • information about the user’s browser,
   • IP address information,
   • diagnostic information related to the process of self-ordering services via recorders on the website,
   • information related to the handling of e-mail addressed to the Operator and sent by the Operator.

4. Your Rights and Additional Information About How Your Data Is Used

1. In some situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfil the obligations imposed on the Controller. This applies to the following target groups:

   • hosting company on an entrusted basis
   • authorised employees and collaborators who use data to achieve the purpose of the website
   • companies providing marketing services to the Controller

2. Your personal data is processed by the Controller only for as long as necessary to carry out the related activities and meet legal obligations, such as accounting requirements. With respect to marketing data, data will not be processed for longer than 3 years.

3. You have the right to request from the Controller:

   • access to personal data relating to you,
   • rectification,
   • deletion,
   • restriction of processing,
   • and data portability.

4. You have the right to object to the processing described in point 3.3(c), including profiling based on the Controller’s legitimate interests. The Controller may continue processing where there are compelling legitimate grounds that override your interests, rights and freedoms, or where processing is necessary to establish, exercise or defend legal claims.

5. You may lodge a complaint against the Controller’s actions to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

6. Providing personal data is voluntary, but necessary to operate the Website.

7. Activities involving automated decision-making may be undertaken in relation to you, including profiling, in order to provide services under the concluded contract and for the purpose of conducting direct marketing by the Controller.

8. Personal data may be transferred to third countries within the meaning of personal data protection regulations. This means that such data may be sent outside the European Union.

5. Information in Forms

1. The website collects information provided voluntarily by the user, including personal data, if provided.
2. The website may save information about connection parameters (time stamp, IP address).
3. In some cases, the website may save information that makes it easier to link the data in the form with the e-mail address of the user completing the form. In this case, the user’s e-mail address appears inside the URL of the page containing the form.
4. Data submitted through a form is processed for the purpose stated in that form, such as handling a service enquiry or business contact. The context and description of each form explain how the data is used.

6. Controller Logs

1. Information about user behaviour on the website may be logged. This data is used to administer the website.

7. Website Analytics

1. Only after you opt in to the “Analytics” (analytics) category does the Operator use Google Analytics 4 for statistical traffic analysis and Microsoft Clarity to analyse website interactions, including heatmaps and session recordings.
2. These tools may process cookie identifiers, device and browser information, pages visited and interactions with the Website. This information may constitute personal data; analytics is not limited to anonymous information. The providers explain their data processing in the Google Privacy Policy and Microsoft Privacy Statement. These providers may process data outside the European Union, including in the USA.
3. Analytics consent does not cover advertising purposes. Google consent settings for advertising storage, advertising user data and ad personalisation, and Microsoft Clarity’s advertising storage consent setting, remain denied.

8. Information About Cookies

1. The website uses cookies.

2. Cookies are small text files stored on the Website User’s device and used when they access the Website. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.

3. The entity that places cookies on the Website User’s end device and obtains access to them is the Website operator.

4. Cookies are used for the following purposes:

   1. necessary (necessary): remembering your consent decision and an explicit choice made in the language popup;
   2. analytics (analytics): analysing traffic and user behaviour as described in section 7, only after consent.

5. Your consent decision is stored for 365 days in the apkstudio_consent cookie, scoped to the Website’s deployment path. Analytics cookies are stored for the time specified in their parameters or until deleted. Dismissal of the language popup is stored separately in the browser’s sessionStorage, under a Website-specific namespace, for the tab session.

6. Software for browsing websites (web browser) usually allows cookies to be stored on the User’s end device by default. Website users may change the settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of your web browser.

7. Blocking necessary storage may prevent your choices from being remembered. Rejecting analytics consent does not block access to the Website’s content.

8. After analytics consent, cookies may be used by Google and Microsoft for the purposes described in section 7.

9. Cookies Management (​​How to Express and Withdraw Consent in Practice?)

1. Analytics is disabled by default. The consent banner lets you accept analytics, reject it or open the settings. The necessary category remains active. Without saved consent, including after declining in the banner, the Website does not start external Google Analytics or Microsoft Clarity scripts.

2. You can reopen the settings at any time using “Manage consent” in the footer (“Zarządzaj zgodą” in Polish). Withdrawing consent clears first-party Google Analytics and Microsoft Clarity cookies on the Website’s domain and reloads the page to stop the tools, including their web workers. This does not cancel requests already sent or automatically delete data already sent to the providers.

3. The browser’s Global Privacy Control (GPC) signal overrides analytics consent and prevents analytics from starting, even when consent was previously saved. The Do Not Track (DNT) signal does not change the choice made in the consent banner.

4. You can also delete or block cookies in your browser. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera

   Mobile devices:

   • Android
   • Safari (iOS)
   • Windows Phone

This policy template has been generated free of charge, for informational purposes, based on our knowledge, industry practices and legal provisions in force as of August 14, 2018. We recommend checking the policy template before using it on the website. The template is based on situations most frequently occurring on websites, but may not fully and accurately reflect the specifics of your website. Read the generated document carefully and, if necessary, adapt it to your situation or seek legal advice. We are not responsible for the consequences of using this document, because only you can influence whether all the information contained in it is truthful. Please also note that the Privacy Policy, even the best one, is only one element of your concern for personal data and user privacy on the website.