1. General Information

1. This policy applies to the website functioning under the URL address: b3transport.pl
2. The service operator and Data Controller is: B3 MARCIN SOKOŁOWSKI 5, 78-320 Bolkowo
3. The operator’s contact email address: biuro@b3transport.pl
4. The operator is the Controller of your personal data with respect to data voluntarily provided in the Service.
5. The Service uses personal data for the following purposes:
   • Running a newsletter
   • Managing the comment system
   • Operating an online forum
   • Conducting online chat conversations
   • Running a classifieds system
   • Presenting user profiles to other users
   • Displaying user advertisements
   • Handling inquiries through a form
   • Preparation, packaging, and shipping of goods
   • Providing ordered services
   • Debt collection
   • Presentation of offers or information
6. The Service collects information about users and their behavior in the following ways:
   1. Through data voluntarily entered in forms, which are entered into the operator’s systems.
   2. Through the saving of cookies in end-user devices (so-called “cookies”).

2. Selected Data Protection Methods Used by the Operator

1. Login and data entry points are protected at the transmission layer (SSL certificate). As a result, personal and login data entered on the site are encrypted on the user’s computer and can only be read on the target server.
2. Personal data stored in the database is encrypted in such a way that only the operator with the key can read it. This protects the data in case of database theft from the server.
3. User passwords are stored in a hashed form. The hashing function is one-way, meaning it cannot be reversed, which is the current standard for storing user passwords.
4. The Service uses two-factor authentication, providing an additional layer of login protection.
5. The operator periodically changes its administrative passwords.
6. To protect data, the operator regularly performs backups.
7. An important aspect of data protection is the regular updating of all software used by the operator to process personal data, which includes regular updates of programming components.

3. Hosting

1. The Service is hosted (technically maintained) on the servers of the operator: LH.pl Sp. z o.o.
2. The hosting company maintains logs at the server level to ensure technical reliability. Logged information may include:
   • resources identified by URL (addresses of requested resources – pages, files),
   • time of request arrival,
   • time of response dispatch,
   • client station name – identification via HTTP protocol,
   • information on errors that occurred during the HTTP transaction,
   • URL of the page previously visited by the user (referrer link) – if the transition to the Service occurred via a link,
   • information about the user’s browser,
   • IP address information,
   • diagnostic information related to the process of self-ordering services through the site’s recorders,
   • information related to the handling of email correspondence sent to and by the operator.

4. Your Rights and Additional Information on Data Usage

1. In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to fulfill a contract with you or to fulfill obligations imposed on the Controller. This applies to such groups of recipients:
   • hosting company on the basis of entrustment
   • couriers
   • postal operators
   • insurers
   • law firms and debt collectors
   • banks
   • payment operators
   • public authorities
   • comment system operators
   • online chat solution operators
   • authorized employees and collaborators who use the data to achieve the purpose of the website’s operation
   • companies providing marketing services to the Controller
2. Your personal data processed by the Controller is not kept longer than necessary for the activities specified by separate regulations (e.g., accounting). For marketing data, the data will not be processed for more than 3 years.
3. You have the right to request from the Controller:
   • access to your personal data,
   • rectification,
   • deletion,
   • restriction of processing,
   • and data portability.
4. You have the right to object to the processing mentioned in point 3.2 regarding the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling, with the proviso that the right to object cannot be exercised if there are valid legitimate grounds for processing, overriding your interests, rights, and freedoms, in particular, the establishment, exercise, or defense of claims.
5. You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary, but necessary for the operation of the Service.
7. You may be subject to automated decision-making, including profiling, to provide services under a concluded contract and for the Controller’s direct marketing purposes.
8. Personal data is not transferred to third countries as defined by data protection regulations. This means that we do not send them outside the European Union.

5. Information in Forms

1. The Service collects information voluntarily provided by the user, including personal data, if provided.
2. The Service may save information about connection parameters (time stamp, IP address).
3. The Service may, in some cases, save information that facilitates linking the data in the form to the user’s email address. In such cases, the user’s email address appears within the URL address of the page containing the form.
4. Data provided in the form is processed for the purpose resulting from the function of the specific form, e.g., to handle a service request or commercial contact, service registration, etc. The context and description of the form clearly indicate what it is used for.

6. Administrator’s Logs

1. Information about user behavior in the Service may be logged. This data is used for the purpose of administering the Service.

7. Important Marketing Techniques

1. The operator uses statistical analysis of site traffic through Google Analytics (Google Inc. based in the USA). The operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies in the user’s end device. Regarding information about user preferences collected by Google’s advertising network, the user can view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/
2. The operator uses remarketing techniques to tailor advertising messages to the user’s behavior on the site, which may give the illusion that the user’s personal data is being used to track them. However, in practice, no personal data is transferred from the operator to the advertising operators. The technological condition for such actions is the enabled support of cookies.
3. The operator uses the Facebook pixel. This technology causes the Facebook service (Facebook Inc. based in the USA) to know that a given person registered there is using the Service. This is based on data for which it is the controller; the operator does not transfer any additional personal data from itself to the Facebook service. The service is based on the use of cookies in the user’s end device.
4. The operator uses solutions to study user behavior by creating heat maps and recording behavior on the site. This information is anonymized before being sent to the service operator, so they do not know which physical person it pertains to. In particular, passwords and other personal data are not recorded.
5. The operator uses solutions that automate the functioning of the Service concerning users, such as sending an email to a user after visiting a specific subpage, provided they have consented to receive commercial correspondence from the operator.

8. Information about Cookies

1. The Service uses cookies.
2. Cookies are IT data, in particular text files, that are stored on the end device of the Service User and are intended for use on the Service’s websites. Cookies usually contain the name of the website from which they originate, the storage time on the end device, and a unique number.
3. The entity placing cookies on the Service User’s end device and accessing them is the Service operator.
4. Cookies are used for the following purposes:
   1. maintaining the Service user’s session (after logging in), thanks to which the user does not have to re-enter their login and password on every subpage of the Service;
   2. achieving the purposes outlined above in the section “Important Marketing Techniques”;
5. Within the Service, two primary types of cookies are used: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the User’s end device until they log out, leave the website, or turn off the software (web browser). “Persistent” cookies are stored on the User’s end device for the time specified in the cookie parameters or until the User deletes them.
6. Web browsing software (web browser) typically allows cookies to be stored on the User’s end device by default. Service Users can change these settings. The web browser allows for the deletion of cookies. It is also possible to automatically block cookies. Detailed information on this is provided in the help or documentation of the web browser.
7. Restrictions on the use of cookies may affect some functionalities available on the Service’s websites.
8. Cookies placed on the Service User’s end device may also be used by entities cooperating with the Service operator, particularly including companies: Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Express and Withdraw Consent in Practice?

1. If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, or maintaining user preferences may make it difficult, and in extreme cases, impossible to use the website.
2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:
   • Edge
   • Internet Explorer
   • Chrome
   • Safari
   • Firefox
   • Opera
   Mobile devices:
   • Android
   • Safari (iOS)
   • Windows Phone