1. General information This policy concerns the website www, operating at the url address: baltictowers.pl The operator of the service and the administrator of personal data is: Baltic Towers Na Ostrowiu 15/20 80-873 Gdańsk The operator’s contact email address: kontakt@baltictowers.pl The Operator is the Administrator of Your personal data in relation to data voluntarily provided in the Service. The Service uses personal data for the following purposes:

• Running a newsletter
• Handling inquiries via the form
• Handling orders for goods – preparation, packaging, shipping
• Execution of ordered services
• Handling relevant accounting documents
• Debt collection
• Presentation of offers or information
• Performing legally binding tasks by the Administrator of personal data according to art. 6 sec. 1 lit. c) GDPR to the extent to which the regulations provide for it (e.g., accounting). The Service performs the function of acquiring information about users and their behavior in the following way:
• Through voluntarily entered data in forms, which are entered into the Operator’s systems.
• By storing cookie files (so-called “cookies”) on end devices.

2. Selected data protection methods used by the Operator

• Login and personal data entry areas are protected in the transmission layer (SSL certificate). This ensures that personal data and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
• Personal data stored in the database is encrypted in such a way that only the Operator has the key to read it.
• User passwords are stored in hashed form. The hashing function works one-way – it is not possible to reverse its operation.
• The Service uses two-factor authentication, which provides an additional form of protection for logging into the Service.
• The Operator periodically changes its administrative passwords.
• To minimize the risk of unauthorized access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers, and special characters, no less than 8 characters long.

3. Hosting The Service is hosted (technically maintained) on servers operated by the operator: nazwa.pl The hosting company, to ensure technical reliability, maintains server logs. The logs may include:

• resources specified by URL identifier (addresses of requested resources – pages, files),
• time of arrival of the query,
• response send time,
• the name of the client station – identification performed by the HTTP protocol,
• information about errors that occurred during the HTTP transaction,
• URL address of the page previously visited by the user (referer link) – in the case when entering the Service occurred through a link,
• user’s browser information,
• IP address information,
• diagnostic information related to the process of independently ordering services through registrars on the site,
• information related to handling e-mail directed to the Operator and sent by the Operator.

4. Your rights and additional information about how data is used In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to such groups of recipients:

• persons authorized by us, employees, and associates who must have access to personal data in order to perform their duties,
• hosting company,
• companies handling mailings,
• companies handling SMS communication,
• companies with which the Administrator cooperates in its own marketing,
• couriers,
• insurers,
• law firms and debt collectors,
• banks,
• payment operators,
• public authorities.

Your personal data processed by the Administrator will not be stored for longer than necessary for the purposes for which the data is processed. With regard to marketing data, the data will not be processed for more than 3 years.