Privacy Policy
Rules for processing personal data and cookies on the autona.pl website
1. General information
This policy applies to the website operating at: autona.pl
The operator of the website and the Controller of personal data is:
Autona Dystrybucja Sp. z o.o., Aleje Jana Pawła II 43a/37b, 01‑001 Warszawa
Contact address: [email protected]
The Operator is the Controller of your personal data provided voluntarily on the Website.
The Website uses personal data for the following purposes:
- Running a newsletter
- Operating a comment system
- Conducting online chat conversations
- Handling enquiries via a form
- Preparing, packing and shipping goods
- Fulfilling ordered services
- Debt collection
- Presenting offers or information
The Website collects information about users in the following ways:
- Through data voluntarily entered in forms, which is entered into the Operator's systems.
- By saving cookie files on end devices.
2. Selected data protection methods used by the Operator
- Login and personal data entry areas are protected at the transmission layer (SSL certificate). Personal data and login credentials are encrypted on the user's side and can only be read on the target server.
- Personal data in the database is encrypted – only the Operator holding the key can read it.
- User passwords are stored in hashed form (one-way function – irreversible).
- The Operator periodically changes its administrative passwords.
- To protect data, the Operator regularly performs backups.
- Regular updating of all software used to process personal data is an important element of protection.
3. Hosting
The Website is hosted (technically maintained) on the servers of an external hosting operator.
4. Your rights and additional information on how data is used
In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to perform a concluded contract or fulfil legal obligations. This applies to the following categories of recipients:
- hosting company (on an entrustment basis)
- couriers and postal operators
- insurers
- law firms and debt collectors
- banks and payment operators
- comment system operators
- authorised employees and associates
- companies providing marketing services on behalf of the Controller
Your personal data is processed no longer than necessary to carry out the related activities. For marketing data – no longer than 3 years.
You have the right to request the Controller to:
- access your personal data,
- rectify it,
- erase it,
- restrict processing,
- transfer the data.
You have the right to object to the processing of personal data for the purposes of legitimate interests pursued by the Controller, including profiling.
You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00‑193 Warszawa.
5. Information in forms
- The Website collects information voluntarily provided by the user, including personal data if provided.
- The Website may save information about connection parameters (time stamp, IP address).
- In some cases, the Website may save information that makes it easier to link form data with the user's email address.
- Data provided in a form is processed for the purpose resulting from the function of that particular form. The context and description of the form clearly state what it is used for.
6. Administrator logs
Information about user behaviour on the website may be subject to logging. This data is used solely for the purpose of administering the website.
7. Important marketing techniques
- Google Analytics – The Operator performs statistical analysis of website traffic. Only anonymised information is transmitted to the service operator. The service is based on cookies. Preferences can be managed at: google.com/ads/preferences
- Remarketing – The Operator uses remarketing techniques to tailor advertising messages to user behaviour. No personal data is transmitted to advertising operators. Requires cookies to be enabled.
- Facebook Pixel – The Facebook service (Facebook Inc., USA) may recognise a registered user using the Website. The Operator does not transmit any additional personal data. The service is based on cookies.
- Heat maps and session recording – The Operator uses solutions that examine user behaviour through heat maps and recordings. Information is anonymised before being transmitted to the service operator. Passwords and personal data are not recorded.
- Website automation – The Operator uses solutions that automate Website operations, e.g. sending an email after visiting a subpage – only to users who have consented to commercial correspondence.
8. Information about cookies
The Website uses cookies.
Cookies are IT data – in particular text files – stored on the User's end device. They usually contain the name of the website they come from, the storage time and a unique number.
Cookies are used for the following purposes:
- Maintaining the user session after logging in (no need to log in again on every subpage).
- Fulfilling the marketing purposes described in section 7.
Types of cookies:
- Session – temporary, stored until the user logs out or closes the browser.
- Persistent – stored for the time specified in the parameters or until deleted by the User.
Web browsers allow cookie storage by default. The user may change these settings or delete cookies. Restrictions on the use of cookies may affect certain Website functionalities.
Cookies may also be placed by entities cooperating with the Operator: Google (USA), Facebook (USA), Twitter (USA).
9. Managing cookies
If the user does not want to receive cookies, they can change their browser settings. Disabling cookies required for authentication processes may make it difficult or, in extreme cases, impossible to use websites.
Cookie management instructions for browsers:
Mobile devices:
- Android
- Safari (iOS)
- Windows Phone
