Privacy Policy

 

The following Privacy Policy specifies the terms for storing and accessing data on Users’ Devices using the Website for the purpose of providing services electronically by the Administrator and the terms for collecting and processing Users’ data that they have provided personally and voluntarily through the tools available on the Website.

§1 Definitions

  • Website – the website “www.nfoxsport.com” operating at https://www.nfoxsport.com
  • External service – websites of partners, service providers, or service recipients cooperating with the Administrator
  • Website/Data Administrator – Website Administrator and Data Administrator (hereinafter: the Administrator) is the company nfoxSPORT Sp. z o.o., operating at the following address: Wrocławska 44C, 76-200 Słupsk, with the assigned tax identification number (NIP): 8393238210, with the assigned KRS number: 0001041929, providing services electronically via the Website
  • User – a natural person for whom the Administrator provides services electronically via the Website.
  • Device – an electronic device with software through which the User gains access to the Website
  • Cookies – text data collected in the form of files placed on the User’s Device
  • GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
  • Personal data – information on an identified or identifiable natural person (‘data subject’); an identifiable natural person is a person, who can be directly or indirectly identified, in particular on the basis of an identifier such as first name and last name, identification number, location data, internet identifier or one or more specific factors, which determine physical, physiological, genetic, psychological, economic, cultural or social identity of a natural person.
  • Processing – means an operation or a set of operations, which are performed on personal data or sets of personal data in an automated or non-automated manner, such as collecting, recording, organizing, structuring, storing, adapting or modifying, downloading, browsing, using, disclosing through sending, distributing or sharing in any other way, aligning or combining, restricting, deleting or destroying;
  • Restriction of processing – means the marking of stored personal data to limit its future processing;
  • Profiling – means any form of automated processing of personal data, which involves the use of personal data to assess some of the personal factors of a natural person, in particular, to analyze or forecast aspects related to the performance of that natural person, their economic situation, health, personal preferences, interests, credibility, behavior, location or movement;
  • Consent – the consent of the data subject means any freely given, specific, informed, and unambiguous indication of the Data Subject’s wishes by which the data subject, by means of a statement or a clear affirmative action, signifies agreement to the Processing of Personal Data that concerns them.
  • Breach of personal data protection – means a breach of security, which leads to accidental or unlawful destruction, loss, modification, unauthorized disclosure, or unauthorized access to personal data that is transmitted, stored, or processed in any other way;
  • Pseudonymisation – means the processing of personal data in such a way that it can no longer be attributed to the specific person, to whom the data relates, without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that prevent it from being attributed to an identified or an identifiable natural person;
  • Anonymization – Data anonymization is an irreversible process of data operations that destroys/overwrites ‘personal data’ making it impossible to identify or associate a given record with a specific user or natural person.

 

§2 Data Protection Inspector

 

Under Art. 37 of the GDPR, the Administrator did not appoint a Data Protection Inspector.

 

In matters related to the processing of data, including personal data, the Administrator should be contacted directly.

 

§3 Types of Cookies

 

  • Internal Cookies – files uploaded to and read from the User’s Device by the Website’s ICT system
  • External cookies – files uploaded to and read from the User’s Device by the ICT systems of External Websites Scripts of External Websites that may place Cookies on the User’s Devices have been consciously placed on the Website through scripts and services made available and installed on the Website
  • Session cookies – files placed and read from the User’s Device by the Website during one session of that Device. After the session ends the files are deleted from the User’s Device.
  • Persistent cookies – files placed and read from the User’s Device by the Website until they are manually removed. These files are not deleted automatically after the end of the Device session unless the User’s Device configuration is set to delete Cookies after the Device session ends.

 

§4 Security of data storage

 

  • Mechanisms of storing and reading Cookies – Mechanisms of storing, reading, and exchanging data between Cookies stored on the User’s Device and the Website are implemented through built-in mechanisms of web browsers and do not allow for downloading other data from the User’s Device or data of other websites visited by the User, including personal data or confidential information. It is also practically impossible to transfer viruses, Trojan horses, or other worms to the User’s Device.
  • Internal Cookies – Cookies used by the Administrator are safe for Users’ Devices and do not contain scripts, content, or information that may threaten the security of personal data or the security of the Device used by the User.
  • External Cookies – the Administrator performs all possible actions to verify and select website partners in the context of Users’ security. The administrator chooses to cooperate with well-known, large partners with global social trust. However, they do not have full control over the content of cookies originating from external partners. The Administrator is not responsible for the security of Cookies, their content, and their license-compliant use by Scripts installed on the Website, originating from external Websites, to the extent permitted by law. The list of partners is provided in the further part of the Privacy Policy.
  • Cookie control
  • Threats on the User’s side – the Administrator applies all possible technical measures to ensure the security of data stored in Cookies. However, it should be noted that ensuring the security of this data depends on both parties, including the User’s activity. The Administrator is not responsible for intercepting this data, impersonating the User’s session, or removing the data as a result of the User’s conscious or unconscious activity, viruses, Trojan horses, and other spyware that may infect or may have infected the User’s Device. Users should take care of their Cybersecurity when using the Internet to protect themselves against these threats.
  • Storage of personal data – the Administrator ensures that they make every effort to ensure that the processed personal data entered voluntarily by Users is safe, access to it is limited, and implemented in accordance with its purpose and processing purposes. The Administrator also ensures that they make every effort to protect data against its loss by applying appropriate physical and organizational security measures.

§5 Purposes for which Cookies are used

 

  • Improving and facilitating access to the Website
  • Personalization of the Website for Users
  • Marketing, Remarketing on external websites
  • Affiliate services
  • Keeping statistics (users, number of visits, types of devices, connection, etc.)
  • Serving multimedia services
  • Providing social services

 

§6 Purposes of personal data processing

 

Personal data voluntarily provided by Users is processed for one of the following purposes:

  • Implementation of electronic services:
    • Newsletter Services (including sending advertising content with consent)
    • Services for sharing information about content posted on the Website, on social networks, or other websites.
  • The Administrator’s communication with Users on matters related to the Website and data protection
  • Ensuring the legally justified interest of the Administrator

Users’ data collected anonymously and automatically is processed for one of the following purposes:

  • Keeping statistics
  • Remarketing
  • Affiliate programs management
  • Ensuring the legally justified interest of the Administrator

 

§7 External websites’ Cookies

 

The Administrator uses javascript scripts and web components of partners who may place their cookies on the User’s Device. Remember that in the settings of your browser, you can decide on the allowed cookies that can be used by individual websites. Below is a list of partners or their services implemented on the Website that may place cookies:

Services provided by third parties are beyond the Administrator’s control. These entities may change their terms of service, privacy policy, purpose of data processing, and the method of using cookies at any time.

 

§8 Types of data collected

 

The Website collects data about Users. Some data is collected automatically and anonymously, and some is personal data provided voluntarily by the Users when signing up for individual services offered by the Website.

 

Anonymous data collected automatically:

 

  • IP address
  • Browser type
  • Screen resolution
  • Approximate location,
  • Opened website subpages
  • Time spent on the appropriate subpage of the website
  • Type of operating system
  • Address of the previous subpage
  • Referrer address
  • Browser language
  • Internet connection speed
  • Internet service provider

 

Data collected during registration:

 

  • Name/surname/nickname
  • E-mail address
  • Website addresses
  • Phone number
  • IP address (collected automatically)
  • Other regular data

 

Data collected when subscribing to the Newsletter service

 

  • Name/surname/nickname
  • E-mail address
  • IP address (collected automatically)

 

Part of the data (without identifying data) may be stored in cookies. Part of the data (without identifying data) may be transferred to the statistical service provider.

 

§9 Access to personal data by third parties

 

As a rule, the only recipient of personal data provided by Users is the Administrator. Data collected as part of the services provided is not transferred or resold to third parties.

 

Access to data (most often on the basis of a Data Processing Agreement) may be granted to entities responsible for maintaining the infrastructure and services necessary to run the website, i.e.:

 

  • Hosting companies providing hosting services or related services to the Administrator
  • Companies through which the Newsletter service is provided

 

Entrusting the Processing of Personal Data – Newsletter

 

To provide the Newsletter service, the Administrator uses the services of a third party – Freshmail, MailChimp, The data entered in the newsletter subscription form is transferred, stored, and processed on the external website of this service provider.

 

Please be advised that the indicated partner may modify the indicated privacy policy without the consent of the Administrator.

 

Entrusting the processing of personal data – Hosting, VPS, or Dedicated Servers

 

To run the website, the Administrator uses the services of an external hosting provider, VPS, or Dedicated Servers – Nazwa.pl