General information.

The operator of the website www.sofija.pl is "Sofija" Ewa Klepacz with its registered office at ul. Bursztynowa 7, 26-600 Radom, using the Regon number: 670156418, NIP 948-15-25-777, e-mail address: sklep@sofija.pl, telephone: (+ 48) 48 365 23 51.

The website performs the functions of obtaining information about users and their behavior in the following way:

• Through information entered voluntarily in forms.
• By saving cookie files (so-called "cookies") in end devices.
• By collecting www server logs.

GDPR personal data policy

Dear User
In connection with the entry into force on 25 May 2018, REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or GDPR), we would like to provide you with some information: First of all, we care about maintaining your privacy and the security of your personal data and information about your online activity, as well as ensuring that you can exercise all your rights in connection with the GDPR. We also want to provide you with the best possible tailored marketing content.

Who is the administrator of your data?
The administrator of your data is "Sofija" Ewa Klepacz with its registered office at ul. Bursztynowa 7, 26-600 Radom, using the Regon number: 670156418, NIP 948-15-25-777, e-mail address: sklep@sofija.pl, telephone: (+ 48) 48 365 23 51, hereinafter referred to as the Administrator

Why do we want to process your data?
Your data is processed by us for the purpose of providing our services and, in the case of expressing appropriate consents, for marketing purposes. The data is subject to profiling in order to present you with the most beneficial offer tailored to your preferences and to conduct analyses that will allow us to improve our services and personalize communication as much as possible. To ensure greater security of services, including detection of possible abuses. The data will not be transferred to third countries.

What are the legal grounds for data processing?
Data is processed for the purpose of executing contracts between us and you or for direct marketing regarding the Administrator's products and services in the event of expressing appropriate consents, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (GDPR)

What are your rights in relation to the data?
The data will be processed until you withdraw your consent or for the duration of the contract between us and you and fulfill the obligations arising from the law. You have the right to access your data, to rectify and delete them and to request the restriction of their processing due to your special situation and to file a complaint with the Office for Personal Data Protection, and in the event of granting consent, to withdraw the consent granted at any time, provided that the withdrawal of the previously expressed consent will not affect the legality of processing before its withdrawal.

Who to contact to exercise your rights?
By e-mail to the address: sklep@sofija.pl

Information in forms

1. The Service collects information provided voluntarily by the user.
2. The Service may also save information about connection parameters (time stamp, IP address). Data in the form is not made available to third parties otherwise than with the user's consent.
3. The data provided in the form may constitute a set of potential customers, registered by the Service Operator in the register maintained by the Inspector General for Personal Data Protection
4. The data provided in the form is processed for the purpose resulting from the function of a specific form, e.g. in order to process a service request or commercial contact.
5. The data provided in the forms may be transferred to entities technically implementing certain services - in particular, this concerns the transfer of information about the holder of the registered domain to entities that are operators of Internet domains (primarily the Scientific and Academic Computer Network j.b.r - NASK), payment services or other entities with which the Service Operator cooperates in this area.

Information about cookies

1. The Service uses cookies.
2. Cookies (so-called "cookies") are computer data, in particular text files, which are stored on the end device of the Service User and are intended for using the websites of the Service. Cookies usually contain the name of the website from which they originate, the time of their storage on the end device and a unique number.
3. The entity that places cookies on the end device of the Service User and obtains access to them is the Service operator.
4. Cookies are used for the following purposes:
   1. creating statistics that help understand how Service Users use websites, which allows for improving their structure and content;
   2. maintaining the Service User's session (after logging in), thanks to which the User does not have to re-enter their login and password on each subpage of the Service;
   3. defining the user's profile in order to display tailored materials in advertising networks, in particular the Google network.
5. The Service uses two basic types of cookies: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files that are stored on the User's end device until logging out, leaving the website or disabling the software (internet browser). "Permanent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
6. Website browsing software (internet browser) usually allows cookies to be stored on the User's end device by default. Users of the Service can change the settings in this regard. The internet browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help or documentation of the internet browser.
7. Restrictions on the use of cookies may affect some functionalities available on the Service's websites.
8. Cookies placed on the Service User's end device and may also be used by advertisers and partners cooperating with the Service operator.
9. We recommend that you read the privacy policies of these companies to learn about the principles of using cookies used in statistics: Google Analytics Privacy Policy
10. Cookies may be used by advertising networks, in particular the Google network, to display advertisements tailored to the way in which the user uses the Service. For this purpose, they may store information about the user's navigation path or the time spent on a given page.
11. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

Server logs

1. Information about some user behavior is subject to logging in the server layer. This data is used solely for the purpose of administering the service and to ensure the most efficient handling of the provided hosting services.
2. Browsed resources are identified by URL addresses. In addition, the following may be recorded:
   1. time of request arrival,
   2. time of sending the response,
   3. name of the client station - identification performed by the HTTPS protocol,
   4. information about errors that occurred during the execution of the HTTPS transaction,
   5. URL address of the page previously visited by the user (referrer link) - in the case when the transition to the Service was made via a link,
   6. information about the user's browser,
   7. IP address information.
   8. The above data is not associated with specific people browsing the pages.
   9. The above data is used solely for the purposes of administering the server.

Sharing data

1. The data is subject to sharing with external entities only within the limits permitted by law.
2. Data enabling the identification of a natural person is shared only with the consent of that person.
3. The Operator may be required to provide information collected by the Service to authorized
   authorities on the basis of lawful requests to the extent resulting from the request.

Cookie management - how to express or withdraw consent in practice

1. If the user does not want to receive cookies, they can change their browser settings. We reserve that disabling the support of cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites.
2. To manage cookie settings, select a web browser/system from the list below and follow the instructions:
   1. Internet Explorer
   2. Chrome
   3. Safari
   4. Firefox
   5. Opera
   6. Safari (iOS)