Privacy policy

This Privacy Policy describes the rules for processing information about you, including personal data and cookies.


1. General Information

This policy applies to the website operating at the URL:

The operator of the website and the Administrator of personal data is: SONNIGER S.A. PODOLSKA 21, 81-321 GDYNIA

Contact email address of the operator:

The operator is the Administrator of your personal data with respect to the data provided voluntarily on the Website.


The Website uses personal data for the following purposes:


The Website obtains information about users and their behaviour in the following ways:


2. Selected Data Protection Methods Used by the Operator

Places for logging in and entering personal data are protected at the transmission layer (SSL certificate). This encrypts the personal data and login information at the user's computer and can only be read on the target server.


The operator periodically changes its administrative passwords.


An essential element of data protection is the regular updating of all software used by the Operator to process personal data, which particularly means regular updates of software components.


3. Hosting

The service is hosted (technically maintained) on the servers of the operator: Artnet Sp. z o.o.


The hosting company maintains server-level logs for the reliability of technology, which may include:


4. Your Rights and Additional Information on Data Usage

In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to fulfill a contract with you or to fulfill obligations incumbent upon the Administrator. Thispertains to groups of recipientsincluding:

Your personal data processed by the Administrator will not be kept longer than necessary to perform the related activities specified by separate regulations (e.g., accounting). Regarding marketing data, data will not be processed longer than three years.

You have the right to request from the Administrator:


You have the right to object to the processing of personal data for the performance of legally justified interests pursued by the Administrator, including profiling, although this right may not be executed if there are valid legally justified grounds for processing, overriding your interests, rights, and freedoms, particularly the establishment, pursuit, or defence of claims.

You can lodge a complaint regarding the Administrator's actions to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary but necessary for the operation of the Service.

The service may undertake actions consisting of automated decision making, including profiling, to provide services within the framework of the concluded agreement and for the Administrator to conduct direct marketing.

Personal data are not transferred outside of third countries within the meaning of the data protection regulations. This means that they are not transferred outside the territory of the European Union.


5. Information in Forms

The Service collects information provided voluntarily by the user, including personal data, if they are provided.

The Service may save information about the connection parameters (time mark, IP address).

In some cases, the Service may store information that facilitates linking data in the form with the email address of the user filling out the form. In such a case, the user's email address appears inside the url of the page containing the form.

Data provided in the form are processed for the purpose resulting from the function of a particular form, e.g., to handle a service request or business contact, service registration, etc. Each time, the context and description of the form clearly inform what it is used for.


6. Administrator Logs

Information about users' behaviour in the service may be logged. These data are used to administer the service.


7. Significant Marketing Techniques

The Operator applies statistical traffic analysis on the site, through Google Analytics (Google Inc. based in the USA). The operator does not transfer personal data to the service operator, only anonymized information. The service is based on the use of cookies in the end user's device. Users can view and edit information derived from cookies through the tool:


The Operator uses remarketing techniques, allowing for the adjustment of advertising messages to the user's behaviour on the site, which may create the illusion that personal data is being used to track the user, but in practice, no personal data is transferred from the Operator to advertising operators. The technical condition for such activities is the enabled handling of cookies.


The Operator uses Facebook pixel technology. This technology means that the Facebook service (Facebook Inc. based in the USA) knows that a registered person is using the Service. It is based on data over which it itself is the administrator, the Operator does not transfer any additional personal data from itself to the Facebook service. The service is based on the use of cookies in the end-user device.


The Operator uses solutions to study users' behaviour by creating heat maps and recording behaviour on the site. This informationare anonymized before being sent to the service operator, so that it does not know to whom they relate. Specifically, recorded entries do not include passwords or other personal data.


The Operator uses a solution that automates the operation of the Service in relation to users, e.g., able to send an email to a user after visiting a specific sub-page, if they have consented to receive commercial correspondence from the Operator.