Skip to main content
Accessibility menu (CTRL+U)
Change contrast
Highlight links
Stop animations
Enlarge text
Text width
Line height
Reset settings

Privacy Policy

1. General information

  1. This policy concerns the website operating at the URL: https://steinhof.pl

  2. The website operator and Controller of personal data is:
    Grupa Steinhof spółka z ograniczoną odpowiedzialnością
    ul. Przemysłowa 27A, 33-100 Tarnów
    NIP: 9930665744,
    REGON: 369231966,
    KRS: 0000712975

  3. The operator's contact e-mail address: sekretariat@steinhof.pl
  4. The operator is the Controller of your personal data with respect to the data you provide voluntarily on the website.
  5. The website uses personal data for the following purposes:
    • Running a newsletter
    • Handling enquiries via the form
    • Delivering the requested services
  6. The website obtains information about users and their behaviour in the following ways:
    1. Through data voluntarily entered in the forms, which is then entered into the Operator's systems.

    2. By storing cookie files on end devices (so-called "cookies").

2. Selected data protection methods used by the Operator

  1. Login pages and pages where personal data is entered are protected at the transmission layer (SSL certificate). As a result, personal data and login details entered on the website are encrypted on the user's computer and can only be read on the target server.
  2. Personal data stored in the database is encrypted in such a way that only the Operator, who holds the key, can read it. This protects the data in the event the database is stolen from the server.
  3. User passwords are stored in hashed form. The hashing function works one way — it cannot be reversed, which is currently the modern standard for storing user passwords.
  4. The Operator periodically changes its administrative passwords.
  5. In order to minimise the risk of unauthorised access to data, the Operator uses complex passwords containing lower- and upper-case letters, digits and special characters, no shorter than 8 characters.
  6. The website uses two-factor authentication, which is an additional form of protection for logging in.
  7. An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.

  8. To protect the data, the Operator regularly makes backup copies.

3. Hosting

  1. The website is hosted (technically maintained) on the server of the operator: ovh.pl
  2. In order to ensure technical reliability, the hosting company keeps logs at server level. The following may be recorded:
    • resources identified by a URL (addresses of requested resources – pages, files),
    • the time the request arrived,
    • the time the response was sent,
    • the client station name – identification carried out via the HTTP protocol,
    • information about errors that occurred during the HTTP transaction,
    • the URL of the page previously visited by the user (referrer link) – where access to the website took place via a link,
    • information about the user's browser,
    • information about the IP address,
    • diagnostic information related to the process of self-ordering services via forms on the website,

    • information related to handling e-mail sent to and by the Operator.

4. Your rights and additional information on how your data is used

  1. In some situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to perform a contract concluded with you or to fulfil the Controller's obligations. This applies to the following groups of recipients:
    • the hosting company, on an entrustment basis
    • postal operators
    • authorised employees and associates who use the data in order to operate the website
    • online chat solution providers
    • companies providing marketing services for the Controller
  2. Your personal data is processed by the Controller no longer than is necessary to carry out the related activities specified by separate regulations (e.g. on keeping accounts). With regard to marketing data, the data will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • access to your personal data,
    • their rectification,
    • erasure,
    • restriction of processing,
    • and data portability.
  4. You have the right to object to the processing referred to in point 3.3 c) regarding the processing of personal data for the purpose of pursuing the legitimate interests of the Controller, including profiling, although the right to object may not be exercised where there are important legitimate grounds for the processing which override your interests, rights and freedoms, in particular the establishment, exercise or defence of claims.
  5. You may lodge a complaint about the Controller's actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
  6. Providing personal data is voluntary but necessary for the operation of the website.
  7. Activities may be carried out in relation to you consisting of automated decision-making, including profiling, in order to provide services under the concluded contract and for the Controller to carry out direct marketing.

  8. Personal data is transferred to third countries within the meaning of the personal data protection regulations. This means that we transfer it outside the European Union.

5. Information in forms

  1. The website collects information provided voluntarily by the user, including personal data, if provided.
  2. The website may record information about connection parameters (time stamp, IP address).
  3. In some cases, the website may record information making it easier to link the data in the form with the e-mail address of the user filling in the form. In such a case, the user's e-mail address appears within the URL of the page containing the form.

  4. The data provided in the form is processed for the purpose arising from the function of the specific form, e.g. to handle a service request or a commercial contact, register services, etc. In each case, the context and description of the form clearly informs what it is used for.

6. Controller's logs

  1. Information about users' behaviour on the website may be logged. This data is used to administer the website.

7. Significant marketing techniques

  1. The Operator uses statistical analysis of website traffic through Google Analytics (Google Inc., based in the USA). The Operator does not transfer personal data to the provider of this service, only anonymised information. The service is based on the use of cookies on the user's end device. As regards information about the user's preferences collected by the Google advertising network, the user may view and edit the information resulting from cookies using the tool: https://www.google.com/ads/preferences/
  2. The Operator uses the Facebook pixel. This technology means that Facebook (Facebook Inc., based in the USA) knows that a person registered with it uses the website. It relies in this case on data for which it is itself the controller; the Operator does not transfer any additional personal data to Facebook. The service is based on the use of cookies on the user's end device.
  3. The Operator uses remarketing techniques that allow advertising messages to be matched to the user's behaviour on the website, which may give the impression that the user's personal data is used to track them, but in practice no personal data is transferred from the Operator to the advertising providers. The technological condition for such activities is having cookies enabled.

  4. The Operator uses a solution that automates the operation of the website in relation to users, e.g. capable of sending an e-mail to a user after they have visited a specific subpage, provided they have consented to receiving commercial correspondence from the Operator.

8. Information about cookies

  1. The website uses cookies.
  2. Cookies (so-called "cookies") are IT data, in particular text files, which are stored on the end device of the website User and are intended for use with the website's pages. Cookies usually contain the name of the website they come from, the time they are stored on the end device, and a unique number.
  3. The entity that places cookies on the end device of the website User and accesses them is the website operator.
  4. Cookies are used for the following purposes:
    1. maintaining the website user's session (after logging in), so that the user does not have to re-enter their login and password on every subpage of the website;
    2. achieving the purposes specified above in the "Significant marketing techniques" section;
  5. The website uses two main types of cookies: "session" cookies and "persistent" cookies. "Session" cookies are temporary files stored on the User's end device until they log out, leave the website or switch off the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookie parameters or until they are deleted by the User.
  6. Web browsing software (web browser) usually allows cookies to be stored on the User's end device by default. Website Users may change these settings. The web browser makes it possible to delete cookies. It is also possible to automatically block cookies. Detailed information on this subject is contained in the help or documentation of the web browser.
  7. Restrictions on the use of cookies may affect some of the functionalities available on the website's pages.

  8. Cookies placed on the end device of the website User may also be used by entities cooperating with the website operator, in particular the companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9. Managing cookies – how to give and withdraw consent in practice?

  1. If the user does not want to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may hinder, and in extreme cases may prevent, the use of websites.
  2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:


    Mobile devices: