Privacy Policy describes the principles of processing information about you, including personal data and cookies.

1. General Information
This policy concerns the www Service, operating under the url: apkostore.com
The service operator and administrator of personal data is: APKO Sp. z o. o. ul. Sienkiewicza 8, 26-600 Radom (NIP: 9482636579).
Operator’s contact email address: biuro@apkostore.com
The Operator is the Administrator of your personal data with regard to data voluntarily provided in the Service.
The Service uses personal data for the following purposes:

• Managing the newsletter
• Operating the comment system
• Conducting online chat conversations
• Handling inquiries via the form
• Preparing, packing, and shipping goods
• Fulfilling ordered services
• Presenting offers or information

The Service collects information about users and their behavior in the following way:
Through data voluntarily entered into the Operator’s systems via forms.
By storing cookie files (so-called “cookies”) on end devices.

2. Selected Data Protection Methods Used by the Operator
Login and personal data input areas are protected in the transmission layer (SSL certificate). As a result, personal data and login information entered on the website are encrypted on the user’s computer and can only be read on the target server.
Personal data stored in the database is encrypted in such a way that only the Operator with the key can read it. This ensures data protection in the event of a database breach.
User passwords are stored in a hashed form, which means they cannot be reversed, ensuring modern standards for storing user passwords.
The Operator periodically changes administrative passwords for security purposes.
To protect data, the Operator regularly performs backups.
Regular software updates are performed to keep the data processing software up-to-date.

3. Hosting
The Service is hosted (technically maintained) on the Operator’s servers: lh.pl

4. Your Rights and Additional Information on Data Use
In some situations, the Administrator has the right to transfer your personal data to other recipients if necessary to fulfill the contract with you or to fulfill the Administrator’s obligations. This applies to such recipient groups as:

• Hosting companies under data entrustment agreements
• Couriers
• Postal operators
• Banks
• Payment operators
• Online chat solution operators
• Authorized employees and associates who use data for the purpose of website operation
• Companies providing marketing services on behalf of the Administrator

Your personal data processed by the Administrator will not be stored longer than necessary for the specific activities related to them, as required by separate regulations (e.g., accounting purposes). In the case of marketing data, it will not be processed for more than 3 years.
You have the right to demand from the Administrator:

• access to your personal data,
• their correction,
• deletion,
• processing limitations,
• data transfer.

You have the right to object to the processing described in point 3.3 c) regarding the processing of personal data for the purpose of the Administrator’s legitimate interests, including profiling. The right to object cannot be exercised if there are valid legal grounds for processing that take precedence over your interests, rights, and freedoms, especially when establishing, investigating, or defending claims.
You have the right to lodge a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary but necessary to use the Service.
Automated decision-making, including profiling, is applied to provide services under the contract and for direct marketing by the Administrator.
Personal data is not transferred to third countries within the meaning of personal data protection regulations, meaning it is not sent outside the European Union.

5. Information in Forms
The Service collects information voluntarily provided by the user, including personal data if provided.
The Service may save information about connection parameters (time stamp, IP address).
In some cases, the Service may save information facilitating the linking of data in the form with the user’s email address completing the form. In such a case, the user’s email address appears inside the url of the page containing the form.
Data provided in the form is processed for the purpose resulting from the function of a specific form, e.g., to handle a service request or commercial contact, registration of services, etc. Each time, the context and description of the form clearly inform what it is used for.

6. Administrator’s Logs
Information about user behavior on the Service may be subject to logging. This data is used for Service administration.

7. Significant Marketing Techniques
The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to the operators of this service; it only uses anonymized information. The service is based on the use of cookies on the user’s end device. Users can access and edit the information from Google’s ads preferences page: https://www.google.com/ads/preferences/
The Operator uses remarketing techniques, allowing tailoring of advertisements to user behavior on the site, which may create the impression that the user’s personal data is being used for tracking. However, in practice, no personal data is transferred from the Operator to advertisers. This technology requires the use of cookies.
The Operator uses the Facebook pixel. This technology enables Facebook (Facebook Inc., based in the USA) to be aware that a specific person registered on Facebook uses the Service. Facebook has access to the data collected in this way, and the Operator has no influence over this data transfer. The use of the Facebook pixel is based on cookies on the user’s end device.

8. Information About Cookies
The Service uses cookies.
Cookies are IT data, in particular, text files, which are stored on the user’s end device and are intended for using the Service’s websites. Cookies usually contain the name of the website they come from, storage time on the end device, and a unique number.
The entity placing cookies on the user’s end device and gaining access to them is the Service Operator.
Cookies are used for the following purposes:
Maintaining user sessions (after logging in), allowing users to not have to re-enter their login and password on each page of the Service;
Achieving the purposes specified in the section “Significant Marketing Techniques”.
Two main types of cookies are used within the Service: “session” cookies and “persistent” cookies. “Session” cookies are temporary files that are stored on the user’s end device until they log out, leave the website, or close the software (web browser). “Persistent” cookies are stored on the user’s end device for a specified period of time or until they are deleted by the user.
Web browsing software (web browser) usually allows cookies to be stored on the user’s end device by default. Service users can change their cookie settings. Web browsers allow you to delete cookies automatically. Detailed information on this subject can be found in the browser’s help or documentation.
Restricting the use of cookies may affect some functionalities available on the Service’s websites.
Cookies placed on the user’s end device may also be used by the Service Operator’s partners, in particular, it applies to companies such as Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Cookie management – how to give and withdraw consent in practice?
If a user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication processes, security, and user preference maintenance may make it difficult, and in extreme cases, may prevent the use of websites.
To manage cookie settings, choose your internet browser from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

Mobile devices:

• Android
• Safari (iOS)
• Windows Phone