Privacy Policy

This Privacy Policy sets out the rules for storing and accessing data on Users’ devices using the Service, as well as the rules for collecting and processing personal data voluntarily provided by Users via the tools available in the Service.

§1 Definitions

• Service – the “Testy Bezpieczeństwa” website, available at: https://www.testy-bezpieczenstwa.pl
• External Service – websites of partners, service providers, or clients cooperating with the Administrator
• Administrator – the company “Omnus Sp. z o.o.”, ul. Strzeszyńska 35/37, NIP: 7812091918, KRS: 0001181496
• User – a natural person for whom the Administrator provides services electronically through the Service
• Device – an electronic device with software through which the User gains access to the Service
• Cookies – text data in the form of files placed on the User’s Device
• GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
• Personal Data – information about an identified or identifiable natural person
• Processing – any operation or set of operations performed on personal data
• Restriction of processing – marking data to limit its processing in the future
• Profiling – automated processing of personal data to assess certain factors about a natural person
• Consent – voluntary, specific, informed, and unambiguous indication of the data subject’s wishes
• Data breach – a security breach resulting in the loss, disclosure, or unauthorized access to personal data
• Pseudonymization – processing data in such a way that it cannot be linked to a specific person without additional information
• Anonymization – an irreversible process that prevents identifying a natural person based on the data

§2 Data Protection Officer

In accordance with Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.

For matters related to data processing, please contact the Administrator directly.

§3 Types of Cookies

• Internal Cookies – stored by the Service’s system
• External Cookies – stored by systems of External Services
• Session Cookies – deleted after the browser session ends
• Persistent Cookies – stored until manually deleted by the User

§4 Data Storage Security

• Cookies mechanisms – operate through web browsers and do not allow data retrieval from other websites or the device
• Internal Cookies – secure and do not contain malicious code
• External Cookies – the Administrator strives to cooperate only with trusted entities but is not responsible for their actions
• Cookies Control:
  • The User may change their Cookies settings in their browser
  • The User may delete stored Cookies at any time
• Risks – the Administrator is not responsible for viruses, malware, or negligence on the User’s side
• Personal data protection – the Administrator applies appropriate technical and organizational measures to ensure data security

§5 Purposes of Using Cookies

• Facilitating access to the Service
• Personalizing the Service
• Traffic statistics and analysis

§6 Purposes of Personal Data Processing

Personal data provided by Users:

• Providing electronic services
• Contacting Users
• Pursuing the legitimate interests of the Administrator

Data collected automatically:

• Statistics
• Pursuing the legitimate interests of the Administrator

§7 Cookies of External Services

The Administrator may use external services that may place their own cookies. List of partners:

• Statistics:
  • WP Statistics

The Administrator is not responsible for the actions of these entities – they may change their privacy policies and data processing practices.

§8 Types of Collected Data

Automatically collected (anonymous) data:

• IP address
• Browser type
• Screen resolution
• Location (approximate)
• Visited subpages
• Time spent on the site
• Operating system
• Referring page
• Previous URL
• Browser language

Data from contact forms:

• First and last name or pseudonym
• Email address
• Phone number
• IP address

§9 Access to Data by Third Parties

Data is not shared or sold to third parties. The only exception is entities maintaining the technical infrastructure:

• Hosting providers

Hosting – OVH Sp. z o.o.
Data is processed within infrastructure located in the EU. Access may be granted only for maintenance purposes and is governed by a data processing agreement.

§10 Personal Data Processing

Voluntarily provided data:

• Will not be transferred outside the EU (unless publicly shared by the User)
• Is not subject to profiling
• Is not sold

Anonymous data:

• Is not transferred outside the EU
• Is not subject to profiling
• Is not sold