1) General Information

a) This policy applies to the website operating at the URL: naomifitnessdesign.com.
b) The website operator and Personal Data Administrator is: SportiC Duboisa 103, 07-300, Ostrów Mazowiecka.
c) The operator's email contact address: info@naomifitness.com.
d) The operator is the Administrator of your personal data in relation to data voluntarily provided on the Website.
e) The Website uses personal data for the following purposes: a. Running a newsletter, b. Handling inquiries through a form, c. Realization of ordered services, d. Presentation of the offer or information.

2) Selected Data Protection Methods Used by the Operator

a) Login and personal data entry points are transmission layer protected (SSL certificate). This encrypts personal and login data on the user's computer, readable only on the target server.
b) The operator periodically changes its administrative passwords.
c) A key element of data protection is the regular updating of all software used by the Operator to process personal data, including software components.

3) Hosting

a) The Website is hosted (technically maintained) on the servers of another company.
b) To ensure technical reliability, the hosting company maintains server-level logs. Recorded information may include: a. Resources identified by URL, b. Time of the query's arrival, c. Time of sending the response, d. Client station name - identification carried out by HTTP protocol, e. Information about errors occurred during HTTP transaction, f. URL of the page previously visited by the user (referer link), g. User's browser information, h. IP address, i. Diagnostic information related to the self-ordering process through site recorders, j. Information related to the handling of electronic mail sent to and by the Operator.

4) Your Rights and Additional Information on Data Usage

a) In some situations, the Administrator has the right to transfer your personal data to other recipients, if necessary to perform the contract with you or to fulfill the obligations of the Administrator. This includes authorized employees and associates who use the data to fulfill the purpose of the site's operation.
b) Your personal data processed by the Administrator no longer than is necessary to perform related activities specified by separate regulations (e.g., on accounting). For marketing data, it will not be processed longer than 3 years.
c) You have the right to request from the Administrator: a. Access to personal data concerning you, b. Their correction, c. Deletion, d. Processing restrictions, e. And data portability.
d) You have the right to object to the processing indicated in point 3.2 regarding the processing of personal data to perform the legally justified interests pursued by the Administrator, including profiling, provided that there are no valid legally justified grounds for processing,
overriding your interests, rights, and freedoms, especially for establishing, investigating, or defending claims.
e) Actions of the Administrator are subject to complaint to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
f) Providing personal data is voluntary but necessary for the Service's operation.
g) Automated decision-making may be undertaken concerning you, including profiling, to provide services under the concluded contract and for the Administrator to conduct direct marketing.
h) Personal data is not transferred from third countries within the meaning of the data protection regulations. This means they are not sent outside the European Union.

5) Information in Forms

a) The service collects information voluntarily provided by the user, including personal data, if provided.
b) The service may save information about connection parameters (time stamp, IP address).
c) In some cases, the service may record information facilitating the linking of data in the form with the email address of the user filling out the form. In such cases, the user's email address appears within the URL of the page containing the form.
d) Data provided in the form is processed for the purpose related to the specific form function, e.g., to process a service request or contact.

6) Administrator Logs

a) Information about users' behavior in the service may be logged. This data is used for administering the service.

7) Marketing Techniques

a) The operator uses statistical analysis of website traffic through Google Analytics (Google Inc., USA). The operator does not transfer personal data to this service, only anonymized information. It is based on the use of cookies on the user's end device. For information on user preferences collected by Google's advertising network, users can view and edit information derived from cookies using the tool: https://www.google.com/ads/preferences/
b) The operator uses remarketing techniques, allowing for the adjustment of advertising messages to the user's behavior on the site, which may give the illusion that the user's personal data is used for tracking, but in practice, no personal data is transferred from the operator to advertisers. The technical condition for such actions is the enabled cookie support.
c) The operator uses Facebook pixel. This technology allows Facebook (Facebook Inc., USA) to know that a registered person uses the Service. It is based on data for which it is the administrator, and the operator does not transfer any additional personal data to Facebook. The service is based on the use of cookies on the user's end device.

8) Information about Cookies

a) The service uses cookies.
b) Cookies are IT data, especially text files, stored on the Service User's end device intended for use with the Service's websites. Cookies usually contain the website's name from which they originate, their storage time on the end device, and a unique number.
c) The entity placing cookies on the Service User's end device and accessing them is the service operator.
d) Cookies are used for the following purposes: a. Maintaining the Service user's session (after logging in), so the user does not have to re-enter the login and password on every page of the Service; b. The purposes specified above in "Important marketing techniques".
e) The Service uses two basic types of cookies: "session" and "persistent". "Session" cookies are temporary files stored on the User's end device until logging out, leaving the website, or disabling the software (web browser). "Persistent" cookies are stored on the User's end device for the time specified in the cookies' parameters or until the User deletes them.
f) Web browsing software (web browser) usually allows storing cookies on the User's end device by default. Service Users can change these settings. The web browser allows for deleting cookies. It is also possible to automatically block cookies. Detailed information on this subject is provided in the help or documentation of the web browser.
g) Restrictions on the use of cookies may affect some functionalities available on the Service's websites.
h) Cookies placed on the Service User's end device may also be used by entities cooperating with the service operator, especially companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).

9) Managing Cookies – How to Express and Withdraw Consent?

a) If the user does not want to receive cookies, they can change the browser settings. We reserve that disabling cookies necessary for authentication, security, maintaining user preferences may hinder, and in extreme cases, prevent the use of websites.
b) To manage cookie settings, select the web browser you use from the list below and follow the instructions:
i) Edge
ii) Internet Explorer
iii) Chrome
iv) Safari
v) Firefox
c) Opera Mobile devices: i) Android
ii) Safari (iOS)
iii) WindowsPhone