Privacy Policy and Cookies
Good morning!
If you’ve landed here, it’s a sure sign that you value your privacy. We understand this perfectly, which is why we are providing you with a document in which in one place you will find the rules for the processing of personal data and the use of cookies and other tracking technologies in connection with the operation of the website https://oxybed.studio/
Formal information at the beginning – the administrator of the website is OxyBed
Bolesława Chrobrego 79 C
80 – 414 Gdańsk
If you have any doubts regarding the privacy policy, you can contact us at any time by sending a message to biuro@oxybed.studio .
#1: Who is the controller of your personal data?
The administrator of your personal data is
OxyBed
Bolesława Chrobrego 79 C
80 – 414 Gdańsk
#2: Who can you contact regarding the processing of your personal data?
As part of the implementation of personal data protection in our organization, we have decided not to appoint a personal data protection officer due to the fact that in our situation it is not mandatory. In matters related to the protection of personal data and broadly understood privacy, you can contact us at biuro@oxybed.studio .
#3: What information do we have about you?
Depending on the purpose, we may process the following information about you:
- first name and last name,
- address,
- business address,
- number nip,
- e-mail adress,
- Phone number,
- data contained in correspondence sent to us,
- Bank account number,
- IP address,
- image (profile photo),
- products you viewed
- details of orders placed,
- details about abandoned carts,
- activity in relation to messages sent as part of the newsletter,
- information about the operating system and web browser you are using,
- viewed by outsiders,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- Your approximate location limited to the town,
- Your interests determined by your online activity.
We have described the scope of processed data precisely in relation to each processing purpose. Information in this regard can be found later in this policy.
§ 4: Where do we get your personal data from?
In most cases, you provide them to us yourself. This happens when:
- you register a user account,
- you place an order,
- you send complaints or withdraw from the contract,
- you subscribe to the newsletter,
- you add a comment or opinion about the product,
- you contact us.
In addition, some information about you may be automatically collected by the tools we use:
- the website and newsletter system mechanism collect your IP address,
- the website mechanism collects information about the products you have viewed, details of orders placed, including unfinished ones,
- the mechanism of the newsletter system collects information about your activity in relation to the content sent to you as part of the newsletter, such as opening messages, clicking on links, etc.,
- Google Analytics collects a range of information about how you use our website.
#5: Is your data safe?
We care about the security of your personal data. We have analyzed the risks associated with the individual processing of your data and then implemented appropriate security and personal data protection measures. We constantly monitor the condition of our technical infrastructure, train our staff, review the procedures used, and introduce necessary improvements. If you have any questions regarding your personal data, we are at your disposal at biuro@oxybed.studio .
#6: For what purposes do we process your personal data?
There is more than one of these cells. Below is a list of them, followed by a more detailed discussion. We have also assigned appropriate legal bases for processing to individual purposes.
- registration and maintenance of a user account – art. 6 section 1 letter b GDPR,
- order processing – art. 6 section 1 letter b GDPR,
- handling complaints or withdrawal from the contract – art. 6 section 1 letter f GDPR,
- newsletter sending – art. 6 section 1 letter a GDPR,
- handling comments or opinions about the product – art. 6 section 1 letter a GDPR,
- handling correspondence – art. 6 section 1 letter f GDPR,
- fulfillment of tax and accounting obligations – art. 6 section 1 letter c GDPR,
- creating an archive for the possible need to defend, establish or pursue claims, as well as to identify a returning customer – Art. 6 section 1 letter f GDPR,
- own marketing – art. 6 section 1 letter f GDPR,
- analysis, statistics and optimization – art. 6 section 1 letter f GDPR.
User account – details
When creating a user account, you must provide the data necessary to create the account: e-mail address and password. Providing data is voluntary, but necessary to create an account.
When editing your account data, you can provide your further details, in particular data that may be used when placing orders, such as name and surname, address of residence or place of business, NIP number, telephone number. When editing your account details, you can also set your avatar, e.g. a profile photo that includes your image.
If you create an account through integration with an account on a social networking site, based on your prior authorization, we will gain access to certain data collected as part of the account on the social networking site (name and surname, e-mail address, profile photo).
In addition, our system used to handle user accounts saves your IP number that you used when registering a user account.
Moreover, we use the integration of Google Analytics with the user account mechanism. In this way, the data collected by the Google Analytics tracking code about your use of our website is assigned to your user account. This includes information such as:
- information about the operating system and web browser you are using,
- viewed by outsiders,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- Your approximate location limited to town.
- Your interests determined by your online activity.
We analyze such information about you in order to optimize our websites in terms of user experience, effectiveness and conversions, which is our legitimate interest referred to in Art. 6 section 1 letter f GDPR.
You can modify the information about you provided to us when registering a user account at any time. However, if you have created an account using integration with an account on a social networking site, the data downloaded from that social networking site cannot be modified.
The data provided by you in connection with setting up an account is processed in order to provide you with an electronic service consisting in ensuring that you can use your user account. This service is provided on the basis of a contract concluded on the terms described in the regulations, which means that in this respect the legal basis for the processing of your personal data is Art. 6 section 1 letter b GDPR.
The data will be stored for the duration of the user account. You can decide to delete your account at any time, but this will not result in deleting information about your orders placed using your account from our database. Order data is stored in our archive until the limitation period for claims under the contract expires / for the entire period of operation of the website to ensure the possibility of identifying a returning customer, reproducing his purchase history, granted discounts, etc., which constitutes our legitimate interest referred to in art. 6 section 1 letter f GDPR.
Orders – details
When placing an order, you must provide the data necessary to complete the order. Depending on the order details, the data catalog may be different. For example, if you order physical products, we need to know the address where the order can be delivered to you. If you are asking for a VAT invoice to be issued for a company, we need to know the NIP number and the business address. Providing data is voluntary, but necessary to place an order.
In addition, our system used to handle the order process saves your IP number that you used to place the order.
Each order is saved in our database, which means that your personal data assigned to the order is also accompanied by information about the order, such as the products ordered, the selected payment method, the selected delivery method, and the payment deadline.
The data collected in connection with the order is processed in order to perform the contract concluded by placing an order (Article 6(1)(b) of the GDPR), issuing an invoice (Article 6(1)(c) of the GDPR in connection with the provisions regulating matters issuing invoices), including the invoice in the accounting documentation and fulfilling other tax and accounting obligations (Article 6(1)(c) of the GDPR in connection with the provisions regulating tax and accounting obligations) and for archival purposes for the purposes of possible defense, determination or pursuing claims, as well as identifying a returning customer, which is our legitimate interest (Article 6(1)(f) of the GDPR).
Order data will be processed for the time necessary to complete the order and then until the limitation period for claims under the concluded contract expires. Moreover, after this period, the data may still be processed by us for archiving purposes for the purposes of any need to defend, establish or pursue claims, as well as to identify a returning customer. Please also remember that we are obliged to keep accounting documentation, which may contain your personal data, for the period required by law.
Complaints and withdrawals from the contract – details
If you submit a complaint or withdraw from the contract, you provide personal data contained in the content of the complaint or declaration of withdrawal from the contract, which includes name and surname, residential address, telephone number, e-mail address, bank account number. Providing data is voluntary, but necessary to file a complaint or withdraw from the contract.
The data provided to us in connection with submitting a complaint or withdrawing from the contract is used to implement the complaint or withdrawal procedure, and then for archival purposes, which is our legitimate interest (Article 6(1)(f) of the GDPR).
The data will be processed for the time necessary to complete the complaint or withdrawal procedure. Complaint documents will be stored until the warranty period expires. Declarations of withdrawal from the contract will be stored together with accounting documentation for the period required by law.
Newsletter – details
By subscribing to the newsletter, you provide us with your name and e-mail address. Providing data is voluntary, but necessary to subscribe to the newsletter.
In addition, our system used to handle the newsletter saves your IP number used when subscribing to the newsletter, determines your approximate location, the email client you use to handle e-mail and tracks your actions taken in connection with messages sent to you. you with messages. Therefore, we also have information about which messages you opened, which messages you clicked on links in, etc.
The data provided to us in connection with subscribing to the newsletter is used to send you the newsletter, and the legal basis for their processing is your consent (Article 6(1)(a) of the GDPR) expressed when subscribing to the newsletter. When it comes to the processing of information that does not come from you but was collected automatically by our mailing system, we rely on our legitimate interest (Article 6(1)(f) of the GDPR) consisting in analyzing the behavior of newsletter subscribers in to optimize mailing activities.
You can unsubscribe from the newsletter at any time by clicking on the dedicated link in each message sent as part of the newsletter or by simply contacting us. Despite unsubscribing from the newsletter, your data will still be stored in our database in order to identify the returning subscriber and possible defense of claims related to sending you the newsletter, in particular for the purpose of demonstrating the fact that you have consented to receive the newsletter and the moment of its withdrawal, which is our legal right. legitimate interest referred to in Art. 6 section 1 letter f GDPR.
You can modify your data provided for the purpose of receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting us.
Comments and opinions about products – details
When adding a comment or opinion about a product, you must provide at least the username that will be assigned to the comment or opinion (the name may contain personal data, such as name or surname) and e-mail address. Providing this data is voluntary, but necessary to add a comment or opinion. You can also add your avatar (it may contain your image, e.g. a photo) and provide the address of your website, but this is not obligatory.
The data provided in connection with adding a comment or opinion will be processed for the purpose of publishing the comment or opinion on the website. The basis for processing is your consent (Article 6(1)(a) resulting from sending a form for publishing a comment or opinion. You can withdraw your consent at any time by requesting that your comment or opinion be deleted.
Your comment or opinion will be publicly available on the website for the duration of its availability on the Internet, unless you previously request that the comment or opinion be removed. At any time, you can also modify the content of the comment, as well as modify the data assigned to it as the person who added the comment or opinion.
Correspondence handling – details
When contacting us, you naturally provide us with your personal data contained in the correspondence, in particular your e-mail address and name and surname. Providing data is voluntary, but necessary to establish contact.
In this case, your data is processed for the purpose of contacting you, and the basis for processing is Art. 6 section 1 letter f GDPR, i.e. our legitimate interest. The legal basis for processing after the end of contact is also our justified purpose of archiving correspondence to ensure the possibility of demonstrating certain facts in the future (Article 6(1)(f) of the GDPR).
The content of correspondence may be archived and we are unable to clearly determine when it will be deleted. You have the right to request the history of your correspondence with us (if it was archived), as well as to request its deletion, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims from you.
Tax and accounting obligations – details
If we issue an invoice to you, it is part of the accounting documentation, which will be kept for the period required by law. In such a situation, your personal data are processed in order to fulfill our tax and accounting obligations (Article 6(1)(c) of the GDPR in connection with the provisions regulating tax and accounting obligations).
Archive – details
As part of the description of the individual purposes of personal data processing above, we have indicated the deadlines for storing personal data. These terms are often related to our archiving of specific data in order to ensure the possibility of demonstrating specific facts in the future, reconstructing the course of cooperation with the client, exchanged correspondence, defending, determining or pursuing claims. In this respect, we rely on our legitimate interest referred to in Art. 6 section 1 letter f GDPR.
Own marketing – details
Our website uses an abandoned cart recovery mechanism. If you start the ordering process but do not complete it, our system will record this fact in order to take action to encourage you to finalize the order. These activities may include, in particular, sending you an e-mail encouraging you to complete your order or displaying a targeted advertisement while browsing the Internet.
Our website may also collect information about your activity and, on this basis, display targeted advertisements to you while browsing the Internet. However, if you are not a registered user, the information used for this purpose does not constitute personal data. Only when they are combined with your personal data collected in your user account do they become personal data.
We carry out the activities described above based on our legitimate interest referred to in Art. 6 section 1 letter f GDPR consisting in marketing your own products.
Analysis, statistics, optimization – details
We collect statistical information about users’ behavior while browsing our websites, such as clicks on links, transitions between subpages, time spent on individual pages, etc. We analyze this information in order to optimize our websites in terms of user experience, effectiveness and conversions. In most cases, information processed in this way does not constitute personal data. The exception is if you are a registered user. We can then combine this information with your other data collected in your user account.
We carry out the activities described above based on our legitimate interest referred to in Art. 6 section 1 letter f GDPR consisting in optimizing our websites.
#7: How long will we keep your personal data?
Data storage periods are indicated separately for each processing purpose. You will find this information within the details for each separate processing purpose.
#8: Who are the recipients of your personal data?
We will venture to say that modern business cannot do without services provided by third parties. We also use such services. Some of these services involve the processing of your personal data. External service providers that are involved in the processing of your personal data are:
- hosting provider who stores data on the server,
- cloud computing service provider where backup copies that may contain your personal data are stored,
- provider of the mailing system in which your data is stored if you are a newsletter subscriber,
- CRM system provider in which we store your data to improve the customer service process and for archival purposes,
- provider of the invoicing system where your data is stored for the purpose of issuing an invoice,
- an accounting office that processes your data visible on invoices,
- courier companies that process your data to the extent necessary to deliver your order,
- a law firm that obtains access to data if it is necessary to provide legal assistance to us,
- an entity providing technical support services that obtains access to data if the technical work carried out concerns areas where personal data are located,
- other subcontractors who gain access to the data if the scope of their activities requires such access.
Moreover, we participate in the Zaufane Opinie Ceneo program. During the ordering process, you may consent to the transfer of your order-related data in order to examine your opinion on the level of satisfaction with your purchase. If you give such consent, your data will be made available to Ceneo pl. Sp. z o. o., which will thus become the administrator of your personal data. Details regarding data processing by Ceneo are described in Ceneo’s regulations: http://info.ceneo.pl/regulamin/ .
Your personal data may also be transferred to tax offices to the extent necessary to fulfill tax, settlement and accounting obligations. This applies in particular to all declarations, reports and other accounting documents containing your personal data.
Moreover, if necessary, your personal data may be made available to entities, bodies or institutions authorized to gain access to data on the basis of legal provisions, such as police and security services, courts and prosecutor’s offices.
Moreover, we use tools that collect a range of information about you related to the use of our website. This concerns, in particular, the following information:
- information about the operating system and web browser you are using,
- viewed by outsiders,
- time spent on the website,
- transitions between individual subpages,
- clicks on individual links,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- Your approximate location limited to town.
- Your interests determined by your online activity.
This information in itself does not, in our opinion, constitute personal data. Because this information is collected by external tools that we use, this information is also processed by tool providers on the terms arising from their regulations and privacy policies. Generally, this information is used to provide and improve services, manage them, develop new services, measure advertising effectiveness, protect against fraud and abuse, and personalize the content and advertising displayed on particular services, sites and applications. We have tried to describe details in this regard later in this policy, as part of the explanations devoted to individual tools.
#9: Do we transfer your data to third countries or international organizations?
Yes, some of the processing of your personal data may involve transferring it to third countries.
We transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, in particular in the USA. Providers of these tools guarantee an adequate level of personal data protection through appropriate compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program or using standard contractual clauses.
Personal data is stored on servers located in third countries using the following tools:
- MailChimp mailing system, provided by Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA – regarding your name, e-mail address, IP address and statistical information related to your reactions to the messages sent messages from us,
- Google services as part of the G-Suite package, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland – in the scope of all data processed as part of Google services, including data contained in files that need to be synchronized with Google Drive.
Both Rocket Science Group LLC and Google Ireland Limited ensure an adequate level of personal data protection by using compliance mechanisms provided for by the GDPR, in particular by joining the Privacy Shield program. Below are links to confirmation of participation in the Privacy Shield program, where you can read information about the processing of personal data by these entities.
- Google: https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI ,
- MailChimp: https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG .
We would also like to remind you here that we use external tools that may collect anonymous information about you. We have mentioned this several times within this policy, including in response to the previous question. Providers of these tools often use servers located around the world, in particular in the United States of America (USA), to store the collected information.
#10: Do we use profiling? Do we make automated decisions based on your personal data?
We do not make decisions regarding you based solely on automated processing, including profiling, that would produce legal effects for you or significantly affect you in a similar way.
Yes, we use tools that can take specific actions depending on the information collected as part of tracking mechanisms, but we believe that these actions do not have a significant impact on you because they do not differentiate your situation as a customer and do not affect the terms of the contract you may conclude with us etc.
Using specific tools, we can, for example, direct personalized advertisements to you based on previous actions you have taken on our website or suggest products that may interest you. We are talking about the so-called behavioral advertising. We encourage you to learn more about behavioral advertising, especially regarding privacy issues. Detailed information, including the ability to manage your behavioral advertising settings, can be found here: http://www.youronlinechoices.com .
We emphasize that the tools we use do not have access to information that would allow you to be identified. The information we are talking about here is, in particular:
- information about the operating system and web browser you are using,
- viewed by outsiders,
- time spent on the website,
- transitions between individual subpages,
- the source from which you come to our website,
- the age range you are in,
- your gender,
- Your approximate location limited to the town,
- Your interests determined by your online activity.
We do not combine the information indicated above with your personal data contained in our databases. This information is anonymous and does not allow us to identify you. This information is stored on the servers of the suppliers of individual tools, and these servers can usually be located all over the world.
The exception to the anonymous nature of the information mentioned above is if you have a user account. This information may then be combined with your data collected in your user account. However, we still do not use this information to make decisions based solely on automated processing, including profiling, that would produce legal effects for you or significantly affect you in a similar way. We believe that targeting you with advertisements depending on your activity on our website and taking optimization actions do not significantly affect you. Therefore, in this respect, we rely on our legitimate interest referred to in Art. 6 section 1 letter f GDPR.
#11: What rights do you have in relation to the processing of your personal data?
The GDPR grants you the following potential rights related to the processing of your personal data:
- the right to access your data and receive a copy thereof,
- the right to rectify (correct) your data,
- the right to delete data (if, in your opinion, there are no grounds for us to process your data, you can request that we delete it),
- the right to limit data processing (you can request that we limit data processing only to storing it or performing activities agreed with you if, in your opinion, we have incorrect data or we process it unjustifiably),
- the right to object to data processing (you have the right to object to data processing on the basis of legitimate interest; you should indicate a special situation that, in your opinion, justifies our cessation of processing covered by the objection; we will stop processing your data for these purposes unless we demonstrate that the basis for our data processing overrides your rights or that your data is necessary for us to establish, pursue or defend claims),
- the right to transfer data (you have the right to receive from us in a structured, commonly used, machine-readable format the personal data that you provided to us on the basis of the contract or your consent; you can instruct us to send this data directly to another entity),
- the right to withdraw consent to the processing of personal data, if you have previously expressed such consent,
- the right to lodge a complaint with the supervisory authority (if you find that we are processing your data unlawfully, you may submit a complaint to the President of the Office for Personal Data Protection or another competent supervisory authority).
The rules related to the implementation of the above-mentioned rights are described in detail in Art. 16 – 21 GDPR. We encourage you to familiarize yourself with these regulations. For our part, we consider it necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to all processing activities of your personal data.
We emphasize that you always have one of the rights indicated above – if you believe that we have violated the provisions on personal data protection when processing your personal data, you have the option of filing a complaint with the supervisory authority (President of the Personal Data Protection Office).
You can also always ask us to provide you with information about what data we have about you and for what purposes we process it. Just send a message to biuro@oxybed.studio . However, we have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. You can also use the e-mail address provided above in case of any questions related to the processing of your personal data.
#12: Do we use cookies and what exactly are they?
Our website, like almost all other websites, uses cookies.
Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by our IT system (own cookies) or third-party IT systems (third-party cookies). Cookies may save and store certain information, which can then be accessed by IT systems for specific purposes.
Some of the cookies we use are deleted after the browser session ends, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and enable us to recognize your browser the next time you visit the website (persistent cookies).
If you want to learn more about cookies as such, you can read, for example, this material: https://pl.wikipedia.org/wiki/HTTP_cookie .
#13: On what basis do we use cookies?
We use cookies based on your consent, except when cookies are necessary for the proper provision of services to you electronically.
Cookies that are not necessary for the proper provision of the service electronically remain blocked until you consent to our use of cookies. During your first visit to our website, we display a message asking for your consent along with the option to manage cookies, i.e. decide which cookies you agree to and which ones you want to block.
In terms of your consent to cookies, we assume that you express such consent through the settings of your web browser or additional software supporting cookie management. We assume that you agree to all cookies we use that are not blocked by your browser or additional software you use.
Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available on our website and may cause difficulties in using our website, as well as many other websites that use cookies. For example, if you block social networking plug-in cookies, the buttons, widgets and social functions implemented on our website may be unavailable to you.
#14: Can you disable cookies?
Yes, you can manage cookie settings in your web browser. You can block all or selected cookies. You can also block cookies for specific websites. You can also delete previously saved cookies and other website and plug-in data at any time.
Web browsers also offer the option of using incognito mode. You can use it if you do not want information about visited websites and downloaded files to be saved in your browsing and download history. Cookies created in incognito mode are deleted when all incognito windows are closed.
Browser plug-ins are also available to control cookies, such as Ghostery ( https://www.ghostery.com ). The option to control cookies may also be provided by additional software, in particular anti-virus packages, etc.
In addition, there are tools available on the Internet that allow you to control certain types of cookies, in particular the collective management of behavioral advertising settings (e.g. www.youronlinechoices.com/ , www.networkadvertising.org/choices ).
We also give you the ability to control cookies directly from our website. We have implemented a special cookie management mechanism that allows you to block cookies that you do not wish to have.
Remember that disabling or limiting the use of cookies may prevent you from using some of the functions available on our website and may cause difficulties in using our website, as well as many other websites that use cookies. For example, if you block social networking plug-in cookies, the buttons, widgets and social functions implemented on our website may be unavailable to you.
#15: For what purposes do we use first-party cookies?
Own cookies are used to ensure the proper functioning of individual website mechanisms, such as maintaining the session after logging in to the account, remembering the recently viewed products and products added to the basket.
Own cookies also store information about your cookie settings defined via the cookie management mechanism.
Own cookies are also used to support the mechanism for recovering abandoned carts.
#16: What third-party cookies are used?
Our website uses the following third-party cookies:
- Google Analytics,
- Google Tag Manager,
- Google AdWords,
- Google AdSense,
- Facebook Custom Audiences,
- Facebook, Twitter, LinkedIN, Pinterest (social media cookies),
- Disqus,
- Hotjar,
- SoundCloud,
- YouTube.
Details about individual third-party cookies are described below.
Google Analytics – details
We use Google Analytics provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest in creating statistics and analyzing them in order to optimize our websites.
In order to use Google Analytics, we have implemented a special Google Analytics tracking code in the code of our website. The tracking code uses cookies from Google LLC for the Google Analytics service. You can block the Google Analytics tracking code at any time by installing the browser add-on provided by Google: https://tools.google.com/dlpage/gaoptout .
Google Analytics automatically collects information about your use of our website. The information collected in this way is most often transferred to Google servers, which may be located around the world, and stored there.
Due to the IP anonymization that we have activated, your IP address is shortened before being forwarded. Only in exceptional cases is the full IP address transferred to Google servers and shortened there. The anonymized IP address transmitted by your browser as part of Google Analytics is generally not combined with other Google data.
We emphasize that Google Analytics does not collect any data that would allow your identification. Therefore, data collected as part of Google Analytics does not constitute personal data for us. The information we have access to within Google Analytics includes, in particular:
- information about the operating system and web browser you are using,
- subpages you view on our website,
- time spent on our website and its subpages,
- transitions between individual subpages,
- the source from which you come to our site.
In addition, we use the following Advertising Features within Google Analytics:
- demographic and interest reports,
- remarketing,
- advertising reporting functions, user-ID.
We also do not collect personal data as part of Advertising Features. The information we have access to is, in particular:
- the age range you are in,
- your gender,
- Your approximate location limited to the town,
- Your interests determined by your online activity.
Google Analytics and Google Analytics 360 services have been certified by the independent security standard ISO 27001. ISO 27001 is one of the most widely recognized standards in the world and certifies that systems supporting Google Analytics and Google Analytics 360 meet the appropriate requirements.
If you are interested in details related to Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites .
Google Tag Manager – details
We use the Google Tag Manager tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA, which enables the management of tags, i.e. small pieces of code thanks to which we are able to
control user traffic and behavior, collect information about advertising effectiveness and
take action to improve our website. Google Tag Manager
does not collect any information that identifies you, however, this tool triggers other tags, which in turn may collect data.
Google AdWords – details
We use the remarketing functions available within the Google AdWords system operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest in marketing our own products or services.
When you visit our website, a Google remarketing cookie is automatically left on your device and collects information about your activity on our website. Thanks to the information collected in this way, we are able to display advertisements within the Google network depending on your behavior on our website. For example, if you display a product, information about this fact will be recorded in the remarketing cookie, which will allow us to direct you an advertisement regarding this product or any other advertisement that we consider appropriate. This advertisement will be displayed to you within the Google network while you use the Internet, browse other websites, etc.
We emphasize that when using Google Ads, we do not collect any data that would allow you to be identified. Possible compilation of data in such a way that it becomes personal data may be carried out by Google, but in this respect we are no longer responsible for it, because Google carries out these activities on the basis of the contract concluded with you as a user of Google services.
Using Google AdWords, we are only able to define the groups of recipients we would like our ads to reach. On this basis, Google decides when and how it will present our advertising to you.
Further processing of information only takes place if you have given your consent to Google to combine your browsing history with your account and to use information from your Google account to personalize the advertisements that are displayed on websites. In such a situation, Google will use your data to create and define lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily combines the collected information with other data in its possession to create target groups.
If you do not want to receive personalized ads, you can manage your ad settings directly on the Google website: https://adssettings.google.com/ .
If you are interested in details related to Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites .
Google AdSense – details
We display advertisements on our websites as part of the Google AdSense network operated by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We carry out activities in this area based on our legitimate interest in monetizing the content we publish.
Due to the display of advertisements within the AdSense network, our website contains advertising tags that instruct your web browser to send a request for advertising content from Google servers. Together with the advertising content, the server also sends a cookie. Cookies are used to display advertisements based on your previous visits to our website or other websites. AdSense also uses cookies to improve the quality of advertising. Common applications include: Target ads based on topics you’re interested in, improve campaign performance reports, and skip ads you’ve already seen.
We emphasize that, when using Google AdSense, we do not collect any data that would allow you to be identified. Possible compilation of data in such a way that it becomes personal data may be carried out by Google, but in this respect we are no longer responsible for it, because Google carries out these activities on the basis of the contract concluded with you as a user of Google services.
Further processing of information only takes place if you have given your consent to Google to combine your browsing history with your account and to use information from your Google account to personalize the advertisements that are displayed on websites. In such a situation, Google will use your data to create and define lists of target groups for remarketing purposes on various devices. For this purpose, Google temporarily combines the collected information with other data in its possession to create target groups.
If you do not want to receive personalized ads, you can manage your ad settings directly on the Google website: https://adssettings.google.com/ .
If you are interested in details related to Google’s use of data from websites and applications that use Google services, we encourage you to read this information: https://policies.google.com/technologies/partner-sites .
Facebook Custom Audiences – details
As part of the Facebook Ads advertising system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, we use the Custom Audiences feature to deliver targeted advertising messages to specific groups of users. We carry out activities in this area based on our legitimate interest in marketing our own products or services.
In order to target you with ads personalized to your behavior on our website, we have implemented Facebook Pixel on our website, which automatically collects information about your use of our website. The information collected in this way is most often transferred to Facebook servers, which may be located around the world, in particular in the United States of America (USA).
The information collected as part of Facebook Pixel is anonymous, i.e. it does not allow us to identify you. Depending on your activity on our websites, you may reach a specific group of recipients, but we do not in any way identify individual people belonging to these groups.
However, we would like to inform you that Facebook may combine the collected information with other information about you collected as part of your use of the Facebook website and use it for its own purposes, including marketing. Such Facebook activities are no longer dependent on us, and you can find information about them directly in Facebook’s privacy policy: https://www.facebook.com/privacy/explanation . You can also manage your privacy settings from your Facebook account. Here you will find useful information in this regard: https://www.facebook.com/ads/settings .
Social tools – details
Our website uses plug-ins, buttons and other social media tools, hereinafter collectively referred to as “plug-ins”, provided by social networking sites such as Facebook, Instagram, LinkedIN, Twitter, Pinterest.
When you display our website that contains a plug-in of a given social networking site, your browser sends information about your visit to the administrator of that social networking site. Since the plug-in is a fragment of a social networking site embedded in our website, the browser sends information about a request to download the content of a given social networking site to our website.
The plug-ins collect certain information about you, such as your user ID, the website you are visiting, the date and time, and other information about your web browser.
The administrators of social networking sites use some of this information to personalize the viewing conditions of our website. For example, when you visit a page with a “Like” button, the social media administrator needs to know who you are in order to show you which of your friends also like our page.
The information collected by plug-ins may also be used by social media administrators for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, and targeting advertising. We have no real influence on how the information collected by plug-ins is then used by social media administrators. You can find details in this regard in the regulations and privacy policies of individual social networking sites.
Social networking plug-ins collect and transmit information to the administrators of these websites even when you browse our website without being logged in to your social networking account. However, the browser then sends a more limited set of information.
If you have logged in to one of the social networking sites, the website administrator will be able to directly assign your visit to our website to your profile on a given social networking site.
If you do not want social networking sites to assign the data collected during your visit to our website directly to your profile on a given website, you must log out of that website before visiting our website. You can also completely prevent plug-ins from being loaded on the website by using appropriate extensions for your browser, e.g. script blocking.
In addition, the use of some plug-ins may involve publishing certain information on your social media profiles. For example, information about clicks on the “Like” button may be available on your Facebook timeline. Of course, if you share some content on your social media using plugins embedded on our website, this share will naturally be visible in your profile.
When it comes to details related to the processing of information collected by plug-ins by the administrators of social networking sites, in particular the purpose and scope of data collection and their further processing and use by the administrators, as well as the possibility of contact and your rights in this regard and the possibility of making settings ensuring the protection of your privacy, you will find everything in the privacy policies of individual service providers:
- Facebook – https://www.facebook.com/privacy/explanation,
- Twitter – https://twitter.com/en/privacy ,
- LinkedIN – https://www.linkedin.com/legal/privacy-policy ,
- Instagram – https://www.facebook.com/help/instagram/155833707900388 ,
- Pinterest – https://policy.pinterest.com/pl/privacy-policy .
Disqus – details
Our website uses the Disqus comment system operated by an external entity, i.e. Disqus, Inc., 717 Market St San Francisco, CA 94103, USA.
When you view a page containing comments powered by Disqus, Disqus sends one or more cookies to your device that identifies your web browser. Disqus cookies are responsible for the proper functioning of the comment system, in particular they improve the login process. Disqus cookies also collect information on how you use our website (e.g. subpages you visit, links you click) in order to analyze your activity and personalize the content displayed to you within the Disqus system, including advertisements.
If Disqus displays advertisements, it uses technologies that support this process, such as Google, Polymorph, ServeBid, which may set cookies for the purposes of marketing personalization, linking advertisements with subsequent activities, and limiting how often individual advertisements are displayed to you.
Remember that you use the Disqus comment system as its own user, based on the Disqus regulations and privacy policy. Disqus is an independent entity that provides electronic services to you, independent of us. Details regarding the rules of using the Disqus system, including privacy protection, can be found in the documents provided directly by Disqus:
- regulations: https://help.disqus.com/en/articles/1717102-terms-of-service#publisher-terms-of-service-agreement ,
- privacy policy: https://help.disqus.com/en/articles/1717103-disqus-privacy-policy .
Hotjar – details
We use the Hotjar tool to better understand your needs and optimize our website in terms of your experience of using it, which is our legitimate interest. The tool is provided by an external entity, i.e. Hotjar Limited, Level 2, St Julian’s Business Center, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.
Hotjar records every visitor to our website and allows you to play a video of their movement on our website, as well as generate the so-called heat maps. As part of the Hotjar tool, we do not have access to information that allows us to identify you because Hotjar does not record the process of completing forms. The information we have access to within Hotjar is, in particular:
- information about the operating system and web browser you are using,
- subpages you view on our website,
- time spent on our website and its subpages,
- transitions between individual subpages on our website,
- the source from which you come to our website,
- places where you click with the mouse.
In order to use Hotjar, we have implemented a special Hotjar tracking code in the code of our website. The tracking code uses cookies from Hotjar Limited. The information collected in cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor we use this information to identify you.
You can object to Hotjar creating your user profile, Hotjar storing information about your use of our website and the use of Hotjar cookies here: https://www.hotjar.com/legal/compliance/opt-out .
If you are interested in details related to data processing within Hotjar, we encourage you to read Hotjar’s privacy policy: https://www.hotjar.com/legal/policies/privacy .
SoundCloud – details
SoundCloud widgets are embedded on our websites, allowing you to play recordings available on SoundCloud directly from our websites. The operator of the SoundCloud website is SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.
When you visit a site with an embedded SoundCloud widget, SoundCloud receives certain information, including information about the site you visited and your interactions with the widget. SoundCloud and the widget can recognize you, in particular using cookie technology. SoundCloud uses the information collected in this way to ensure the correct and safe functioning of the widget, analysis and optimization of the services provided by SoundCloud, as well as for personalization and advertising purposes.
Please remember that when you play recordings available on SoundCloud, you are using services provided electronically by SoundCloud. SoundCloud is an independent entity that provides electronic services to you, independent of us. You can find details on the principles of using SoundCloud, including privacy protection, in the documents provided directly by SoundCloud:
- terms and conditions: https://soundcloud.com/terms-of-use ,
- privacy policy: https://soundcloud.com/pages/privacy ,
- cookie policy: https://soundcloud.com/pages/cookies .
YouTube – details
YouTube widgets are embedded on our websites, allowing you to play recordings available on YouTube directly from our websites. YouTube is operated by Google LLC.
Videos are embedded on the website in privacy protection mode. Based on information provided by YouTube, this means that no cookies are saved on your device and Google does not collect any information about you until you play the recording.
When you play a recording, YouTube saves cookies on your device and receives information that you played the recording from a specific website, even if you do not have a Google account or are not currently logged in. If you have logged in to your Google account, the service provider will be able to directly assign your visit to our website to your account. The purpose and scope of data collection and its further processing and use by Google, as well as the possibility of contact and your rights in this regard and the possibility of making settings to protect your privacy are described in Google’s privacy policy.
If you do not want Google to assign data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent plug-ins from being loaded on the website by using appropriate extensions for your browser, e.g. script blocking.
The information collected in cookies related to YouTube videos embedded on our websites is used by Google to ensure the proper and safe functioning of the widget, analysis and optimization of the services provided by YouTube, as well as for personalization and advertising purposes.
Remember that when playing recordings available on YouTube, you are using services provided electronically by Google LLC. Google LLC is an independent entity that provides electronic services to you, independent of us. You can find details on YouTube’s rules of use, including privacy protection, in the documents provided directly by YouTube:
- terms and conditions: https://www.youtube.com/t/terms ,
- privacy policy: https://policies.google.com/privacy .
#17: Do we track your behavior on our website?
Yes, we use Google Analytics, Google AdWords, Hotjar and Facebook Custom Audiences, which collect information about your activities on our website. These tools were described in detail in the question about third-party cookies, so we will not repeat this information here.
#18: Are we targeting you with targeted ads?
Yes, we use Facebook Ads and Google Ads, within which we can direct advertisements to specific target groups defined based on various criteria such as age, gender, interests, profession, work, and activities previously undertaken on our website. These tools were described in detail in the question about third-party cookies, so we will not repeat this information here.
§ 19: How can you manage your privacy?
The answer to this question can be found in many places in this privacy policy when describing individual tools, behavioral advertising, cookie consent, etc. However, for your convenience, we have once again collected this information in one place. Below you will find a list of options for managing your privacy.
- cookie settings in the web browser,
- browser plug-ins supporting cookie management, e.g. Ghostery,
- additional software managing cookies,
- incognito mode in the web browser,
- behavioral advertising settings, e.g. youronlinechoices.com,
- cookie management mechanism on our website,
- Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout ,
- Google Ads Settings: https://adssettings.google.com/ ,
- Facebook Ads Settings: https://www.facebook.com/ads/settings ,
- HotJar Opt-out: https://www.hotjar.com/legal/compliance/opt-out
#20: What are server logs?
Using the website involves sending queries to the server where the website is stored. Each query sent to the server is saved in the server logs.
Logs include, among others: Your IP address, server date and time, information about the web browser and operating system you are using. Logs are saved and stored on the server.
The data saved in the server logs is not associated with specific people using the website and is not used by us to identify you.
Server logs are only auxiliary material used to administer the website, and their content is not disclosed to anyone other than persons authorized to administer the server.
#21: Is there anything else you should know?
As you can see, the subject of personal data processing, the use of cookies and managing generally understood privacy is quite complicated. We have made every effort to ensure that this document provides you with the most comprehensive knowledge possible on issues that are important to you. If anything is unclear to you, you want to learn more or just want to talk about your privacy, please write to us at biuro@oxybed.studio .