This Privacy Policy demonstrates our commitment to the rights of people visiting the website and using the services offered through it. It is also a fulfillment of the information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR).
The website owner pays particular attention to respecting the privacy of website users. Data obtained via the website is especially protected and secured against access by unauthorized persons. The privacy policy is made available to all interested parties. The website is open in character.
The owner’s main goal is to ensure that people using the website are protected to a level at least in line with the requirements set out by applicable laws, especially GDPR and the Act of July 18, 2002 on the provision of electronic services.
The website owner may collect personal data and other types of data. Data collection takes place automatically or as a result of the website visitor’s actions, depending on the nature of the data.
Everyone using the website in any way accepts all the rules described in this Privacy Policy. The website owner reserves the right to make changes to this document.
I. General information and cookies
- The owner and operator of the website is Arriva Shipping Polska Łukasz Skrzypczak, hereinafter referred to as "Arriva Shipping Polska" or "Arriva Agency", based in Gdańsk, address: Piwna 1/2, 80-831 Gdańsk, registered in the business register, NIP: 5833169932, REGON: 222150851. According to GDPR, the owner is also the Data Controller ("Administrator").
- As part of its activities, the Administrator uses cookies by observing and analyzing website traffic and undertaking remarketing activities. However, these activities do not involve personal data processing under GDPR.
- The website collects information about users and their behavior in the following ways:
- Automatically through cookies.
- Via voluntarily provided data in website forms.
- Via automated collection of web server logs by the hosting provider.
- Cookies ("ciasteczka") are IT data, particularly text files, stored on the user's device, intended for website use. Cookies usually contain the website name, storage time, and a unique number.
- During a visit, data may be automatically collected regarding the visit, such as IP address, browser type, domain name, number of page views, OS type, screen resolution, number of screen colors, website addresses of entry, usage duration, etc. This data is not personal and does not allow the identification of the user.
- The site may include links to other websites. The website owner is not responsible for privacy policies on those sites and encourages users to read privacy policies of those external sites. This privacy policy does not apply to other websites.
- The party placing cookies on users’ devices and accessing them is the website owner.
- Cookies are used for:
- Adapting website content to users’ preferences and optimizing website use;
- Creating statistics for the improvement of website structure and content;
- Maintaining user sessions (after logging in), so the user does not need to enter login and password on every subpage.
- The following types of cookies are used:
- "Essential" cookies for using services available on the website;
- Security cookies, e.g., for detecting abuse;
- "Performance" cookies to obtain information on how users use the site;
- "Advertising" cookies for providing advertising content more suited to users’ interests;
- "Functional" cookies to "remember" the settings selected by the user, e.g., language.
- Two types of cookies are used: "session" cookies (temporary, stored until leaving the website, logging out, or browser shutdown) and "persistent" cookies (stored for the time specified in cookie parameters or until deleted by the user).
- By default, most web browsers allow the storage of cookies. Users can change browser settings at any time to block cookies or notify them when cookies are placed. Details about cookie handling are available in browser settings.
- Cookie restrictions may affect some website functionalities.
- Cookies may also be used by cooperating advertisers and partners.
II. Processing of personal data, information about forms
- Users’ personal data may be processed by the Administrator:
- if the user consents via forms for actions specified in those forms (GDPR art. 6.1a), or
- if processing is necessary for the performance of a contract to which the user is a party (GDPR art. 6.1b), if the website enables such.
- Personal data is only processed if voluntarily provided by users, and only to the extent and for the period necessary for these purposes, or until the user's consent is revoked. Not providing data may result in the inability to achieve the purposes requiring such data.
- Data collected via forms or for contracts may include: name, surname, address, email address, telephone number, login, password.
- Data may be transferred to third parties cooperating with the Administrator in connection with the purposes above.
- Data entered into website forms is processed for purposes arising from the function of the form, and may also be used for archiving and statistics. Consent is expressed by checking the appropriate box on the form.
- If the site has such functionality, the user can refuse or express consent to receive commercial information electronically, per the Act of July 18, 2002. Consent can be revoked at any time by emailing the owner with name and surname.
- Data may be provided to technical service providers (e.g., domain operators, payment services) or other partners.
- Personal data is stored in a database with technical and organizational measures ensuring compliance with legal requirements.
- To prevent re-registration of persons banned for misuse, the Administrator may refuse to delete the data necessary to block re-registration. Legal grounds are art. 19.2.3 and 21.1 of the Act of July 18, 2002. Refusal may also occur in other cases provided by law.
- In legally justified cases, the Administrator may share some data with third parties to protect their rights.
- The Administrator reserves the right to send all users emails regarding important website or policy changes. Commercial emails (advertisements, trade info) may be sent if the user has agreed and may be attached to inbound/outbound system account emails.
III. User rights regarding their personal data
According to GDPR art. 15–22, users have the following rights:
- Right of access (art. 15): Right to confirmation and access to personal data. Administrator will provide a copy.
- Right to rectification (art. 16): Right to request correction of incorrect personal data.
- Right to erasure ("right to be forgotten", art. 17): Right to request immediate deletion of personal data if they are no longer necessary, consent is withdrawn, or there is an objection per art. 21.1 and there are no overriding legal grounds.
- Right to restriction of processing (art. 18): Right to restrict processing in certain cases (e.g., data is incorrect, objection, unlawful processing, user opposes erasure and requests restriction instead).
- Right to data portability (art. 20): Right to receive data in a commonly used, machine-readable format for transfer to another administrator. Direct transfer by Administrator is possible if technically feasible.
- Right to object (art. 21): Right to object at any time to processing for direct marketing, including profiling for such purposes.
The above rights may require payment if provided for by law.
If your rights are violated or you notice your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority.
IV. Server logs
- As is standard practice, the website operator stores HTTP requests to the server (some user behavior is logged at the server level). Resources are identified by URLs.
- Public IP address,
- Client station name (if possible)
- Username (for authorization)
- Arrival time,
- HTTP response code,
- Number of bytes sent,
- Referrer URL (if entered from a link)
- Browser info,
- Info on errors during HTTP transactions.
These data are not associated with specific users. Logs may be analyzed for website administration and improvement. Statistics do not contain identifying features.
- Logs are stored for an indefinite period for site administration. The information is not shared except with operator-related parties. Summaries/statistics do not identify site visitors.
For questions about your data and rights, contact us: