Privacy policy

1. General Information
   This policy applies to the website located at the URL: vidiana.ai
   The operator of the website and the data controller is: Vidiana
   The operator’s contact email address: info@vidiana.net
   The operator is the data controller for the personal data you provide voluntarily on the website.
   The website uses personal data for the following purposes:

• Handling inquiries through the form

• Presenting offers or information

The website collects information about users and their behavior in the following ways:

• Through voluntarily entered data in forms, which is entered into the operator’s systems.

• By storing cookies (so-called “cookies”) on end-user devices.

2. Selected Data Protection Methods Used by the Operator
   Login and personal data entry fields are protected at the transmission layer (SSL certificate). This ensures that personal data and login data entered on the site are encrypted in the user’s computer and can only be read on the target server.
   Personal data stored in the database is encrypted in such a way that only the operator holding the key can read it. This protects the data in case of a data breach from the server.
   User passwords are stored in a hashed form. The hashing function works in a one-way manner—its operation cannot be reversed, which is the current standard for storing user passwords.
   The website uses two-factor authentication as an additional form of protection for logging into the service.
   The operator periodically changes administrative passwords.
   To protect data, the operator regularly performs security backups.
   An essential element of data protection is the regular update of all software used by the operator for processing personal data, which specifically means regular updates to software components.

3. Hosting
   The website is hosted (technically maintained) on the operator’s servers: dhosting
   The hosting company maintains logs at the server level to ensure technical reliability. These logs may include:

• Resources identified by URL (requested resource addresses—pages, files)

• Request arrival time

• Response sending time

• Client station name—identification via the HTTP protocol

• Information on errors occurring during the execution of HTTP transactions

• URL of the page previously visited by the user (referer link)—if the visit to the service was via a link

• Information about the user’s browser

• Information about the IP address

• Diagnostic information related to the process of self-ordering services through registrars on the website

• Information related to email correspondence with the operator

4. Your Rights and Additional Information about Data Usage
   In certain situations, the Administrator has the right to transfer your personal data to other recipients if necessary to execute the contract concluded with you or to fulfill the obligations of the Administrator. This applies to the following groups of recipients:

• Hosting company under the terms of data processing

• Companies providing marketing services to the Administrator

The personal data processed by the Administrator will not be stored longer than necessary to perform the related tasks specified by separate regulations (e.g., accounting). In the case of marketing data, the data will not be processed for more than 3 years.
You have the right to request from the Administrator:

• Access to your personal data

• Rectification

• Deletion

• Limitation of processing

• Data portability

You have the right to object to the processing of your personal data for the legitimate interests pursued by the Administrator, including profiling, provided that the right to object cannot be exercised if there are significant legal grounds for processing, overriding your interests, rights, and freedoms, in particular, the establishment, exercise, or defense of legal claims.
You have the right to file a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary, but necessary for the operation of the service.
Automated decision-making processes, including profiling, may be undertaken in relation to you in order to provide services under the concluded contract and for direct marketing by the Administrator.
Personal data is not transferred from third countries within the meaning of data protection regulations. This means that they are not sent outside the European Union.

5. Information in Forms
   The service collects information voluntarily provided by the user, including personal data, if provided.
   The service may store connection parameters (timestamp, IP address).
   In some cases, the service may store information to help associate data in a form with the email address of the user completing the form. In this case, the user’s email address appears within the URL of the page containing the form.
   The data provided in the form is processed for the purpose resulting from the function of the specific form, e.g., for handling a service request or commercial contact, registration of services, etc. The context and description of the form clearly inform its purpose.

6. Administrator Logs
   Information on user behavior on the website may be logged. This data is used for administering the website.

7. Important Marketing Techniques
   The operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not provide personal data to this service provider but only anonymized information. The service uses cookies on the user’s device. Regarding the information about the user’s preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/
   The operator uses remarketing techniques to tailor advertising messages to user behavior on the site, which may create the illusion that personal data is being used to track the user. However, in practice, no personal data is transferred from the operator to the advertising providers. The technological condition for these actions is that cookies are enabled.
   The operator uses the Facebook pixel. This technology allows Facebook (Facebook Inc. based in the USA) to know that a registered user is using the website. This is based on data that Facebook controls, and the operator does not provide additional personal data to Facebook. The service uses cookies on the user’s device.
   The operator uses solutions that analyze user behavior by creating heatmaps and recording behavior on the website. These details are anonymized before being sent to the service operator, so they do not know which individual the data relates to. Specifically, passwords and other personal data are not recorded.

8. Information about Cookies
   The service uses cookies.
   Cookies are small text files stored on the end-user device, intended for use on the service’s website. They typically contain the website name, the duration of storage, and a unique number.
   The operator of the service places cookies on the user’s device and has access to them.
   Cookies are used for the following purposes:

• To maintain the user’s session (after login), so the user does not have to re-enter login details on every page of the website.

• For the purposes described in the “Important Marketing Techniques” section above.

The service uses two basic types of cookies: “session cookies” and “persistent cookies.” Session cookies are temporary files stored on the user’s device until they log out, leave the website, or close the browser. Persistent cookies are stored on the user’s device for the duration specified in the cookie parameters or until they are deleted by the user.
Web browser software usually allows cookies to be stored on the user’s device by default. Service users can change these settings. The browser allows users to delete cookies and automatically block them. Detailed information on this is available in the browser’s help or documentation.
Limiting the use of cookies may affect some functionalities available on the service’s website.
Cookies placed on the user’s device may also be used by entities cooperating with the service operator, particularly Google (Google Inc. based in the USA), Facebook (Facebook Inc. based in the USA), and Twitter (Twitter Inc. based in the USA).

9. Managing Cookies – How to Give and Withdraw Consent?
   If the user does not want to receive cookies, they can change the browser settings. However, we note that disabling cookies essential for authentication, security, and user preference retention may hinder or, in extreme cases, prevent the use of the website.
   To manage cookie settings, select your browser from the list below and follow the instructions:

• Edge

• Internet Explorer

• Chrome

• Safari

• Firefox

• Opera
  Mobile Devices:

• Android

• Safari (iOS)

• Windows Phone