Privacy Policy

The Privacy Policy describes the rules by which we process information about you, including personal data and “cookies.”

1. General Information
This policy applies to the website operating at URL: s35apartments.pl
The operator of the site and the controller of personal data is:
S35 Apartments | Qt Investments
Ul. Świerkowa 35, 81‑526 Gdynia, Poland
Contact e‑mail of the operator: kontakt@s35apartments.pl
The Operator is the Controller of your personal data for any information you provide voluntarily via the Site.

The Site uses personal data for the following purposes:

• Operating a newsletter

• Handling inquiries via contact forms

• Fulfilling ordered services

• Presenting offers or information

The Site gathers information about users and their behavior in the following ways:

• Data voluntarily entered into forms, which are then stored in the Operator’s systems.

• By saving cookie files on end‑user devices.

2. Selected Data‑Protection Measures Employed by the Operator

• Login pages and data‑entry fields are protected in transit by SSL encryption. Data entered on the site is encrypted on the user’s computer and can only be read on the destination server.

• Personal data stored in the database are encrypted so that only the Operator—who alone holds the key—can decrypt them, protecting data in the event of database theft.

• User passwords are stored in hashed form. The hashing function is one‑way and cannot be reversed, which is the current standard for password storage.

• The Operator periodically changes its administrative passwords.

• The Operator regularly performs backups to secure data.

• All software used by the Operator to process personal data is kept up to date, including frequent updates of programming components.

3. Hosting
The Site is hosted on the Operator’s servers by dhosting. To ensure technical reliability, the hosting provider logs at the server level, which may include:

• Resources identified by URL (requests for pages or files)

• Time of request receipt

• Time of response dispatch

• Client station name (via HTTP protocol)

• Error information for HTTP transactions

• Referrer URL (if the user arrived via a link)

• Browser information

• IP address

• Diagnostic data related to self‑service ordering processes on the site

• Information related to e‑mail correspondence to and from the Operator

4. Your Rights and Additional Information on Data Use
In certain cases, the Controller may transfer your personal data to other recipients if necessary to perform a contract with you or to fulfill legal obligations. These recipients may include:

• Authorized employees and collaborators who use the data to operate the Site

• Marketing service providers acting on behalf of the Controller

Your personal data are processed only as long as necessary to carry out the purposes specified by law (e.g., accounting). Marketing data will not be processed for more than 3 years.

You have the right to request from the Controller:

• Access to your personal data

• Correction of any inaccurate data

• Deletion of data (“right to be forgotten”)

• Restriction of processing

• Portability of your data

You also have the right to object to processing under the Controller’s legitimate interests (including profiling), except where there are overriding legitimate grounds for processing (e.g., establishment, exercise, or defense of legal claims).

Complaints may be lodged with the President of the Personal Data Protection Office, ul. Stawki 2, 00‑193 Warsaw.

Providing personal data is voluntary but necessary for using the Site. Automated decision‑making, including profiling, may be used for service provision and direct marketing.

Your personal data are not transferred to third countries outside the European Union.

5. Information in Forms
The Site collects information that users voluntarily provide in forms, including personal data if supplied. The Site may also log connection parameters (timestamp, IP address). In some cases, the Site may embed the user’s e‑mail address within the form’s URL to link form data to the address. Data entered in forms are processed for the form’s specific function (e.g., service requests, commercial inquiries, service registration), and each form clearly states its purpose.

6. Server Logs
Information about user behavior on the Site may be logged for administrative purposes.

7. Key Marketing Techniques
The Operator uses statistical analysis of site traffic via Google Analytics (Google Inc., USA). No personal data are sent to Google—only anonymized information. This service relies on cookies. To view or edit advertising‑preferences data stored by Google’s ad network, visit: https://www.google.com/ads/preferences/

8. Information about Cookies
The Site uses cookies—small text files stored on your device containing the site’s name, storage duration, and a unique identifier. Cookies are placed and accessed by the Site operator. They are used for:

• Maintaining user sessions (after login) so you don’t have to re‑enter credentials on each page

• Marketing techniques as described above

Two main types of cookies are used:

• Session cookies (temporary, expire when you log out, leave the site, or close your browser)

• Persistent cookies (stored for a specified time or until you delete them)

Most browsers allow cookies by default. You can delete or block cookies via your browser settings, though disabling essential cookies may impair site functionality. Cookies may also be used by third‑party services cooperating with the Operator, such as Google Inc. (USA), Facebook Inc. (USA), and Twitter Inc. (USA).

9. Managing Cookies: How to Give and Withdraw Consent
If you do not wish to receive cookies, you can change your browser settings. Note, disabling cookies necessary for authentication, security, or user preferences may hinder or prevent use of the Site. For instructions on managing cookies, select your browser from the list and follow the guidelines:

• Edge

• Internet Explorer

• Chrome

• Safari

• Firefox

• Opera

Mobile devices:

• Android

• Safari (iOS)

• Windows Phone