Privacy Policy

1. General Information This policy applies to the Website operating under the URL: yutra.eu The Website operator and Data Controller is: Salag sp. z o.o., ul. Szafirowa 5, 16-400 Suwałki, Poland Operator's contact email address: [email protected]

The Operator is the Controller of your personal data with respect to data voluntarily provided on the Website.

The Website uses personal data for the following purposes:

• Newsletter management
• Comment system operation
• Online chat conversations
• User profile presentation to other users
• Handling inquiries through forms
• Preparation, packaging, shipping of goods
• Execution of ordered services
• Presentation of offers or information

The Website collects information about users and their behavior in the following ways:

• Through data voluntarily entered in forms, which is then entered into the Operator's systems
• Through cookie files stored in end devices ("cookies")

2. Selected Data Protection Methods Used by the Operator

• Login locations and personal data entry points are protected in the transmission layer (SSL certificate). This ensures that personal data and login information entered on the website are encrypted on the user's computer and can only be read on the destination server.
• Personal data stored in the database is encrypted in such a way that only the Operator possessing the key can read it. This protects the data in case of database theft from the server.
• User passwords are stored in a hashed form. The hashing function works one-way - it is impossible to reverse its operation, which is currently the modern standard for storing user passwords.
• The Operator periodically changes its administrative passwords.
• To protect data, the Operator regularly performs security backups.
• An important element of data protection is regular updates of all software used by the Operator for personal data processing, which particularly means regular updates of programming components.

3. Hosting The Website is hosted (technically maintained) on the servers of: external company

The hosting company, to ensure technical reliability, maintains server logs. The following may be recorded:

• Resources identified by URL (addresses of requested resources - pages, files)
• Time of request arrival
• Response time
• Client station name - identification performed by HTTP protocol
• Information about errors that occurred during HTTP transaction execution
• URL address of the previously visited page (referer link) - if the Website was accessed through a link
• Information about the user's browser
• IP address information
• Diagnostic information related to the process of self-ordering services through registers on the site
• Information related to email handling directed to and sent by the Operator

4. Your Rights and Additional Information About Data Usage In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the agreement concluded with you or to fulfill obligations incumbent on the Controller. This applies to such groups of recipients as:

• Hosting company on the basis of entrustment
• Couriers
• Postal operators
• Payment operators
• Online chat solution operators
• Authorized employees and collaborators who use the data to achieve the website's purpose
• Companies providing marketing services for the Controller

Your personal data processed by the Controller will not be stored longer than necessary to perform related activities specified by separate regulations (e.g., accounting). Regarding marketing data, data will not be processed for longer than 3 years.

You have the right to request from the Controller:

• Access to personal data concerning you
• Their rectification
• Deletion
• Processing restrictions
• Data portability

You have the right to object to processing indicated in point 3.2 regarding the processing of personal data for the purpose of legitimate interests pursued by the Controller, including profiling.

5. Information in Forms The Website collects the following information voluntarily provided by the user:

• Customer's first and last name (required)
• Address details (required)
• Email (required)
• Phone number (required)
• For entrepreneurs: company name and VAT ID (required for entrepreneurs)
• Shipping address (optional)
• In case of specifying a different person for shipment: recipient's first and last name, address details and phone number (optional)
• Payment details

Providing the above data marked as required is mandatory to process the order. Failure to provide this data may result in inability to place an order.

The Website may record information about connection parameters (timestamp, IP address). The Website, in some cases, may save information facilitating the linking of form data with the email address of the user filling out the form. Data provided in the form is processed for purposes resulting from the function of the specific form.

6. Administrator Logs Information about user behavior on the website may be subject to logging. This data is used for website administration.
7. Important Marketing Techniques

• The Operator uses statistical analysis of traffic on the website through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to this service provider, only anonymized information.
• The Operator uses remarketing techniques allowing for adjustment of advertising messages to user behavior on the website.
• The Operator uses Facebook pixel technology.
• The Operator uses solutions analyzing user behavior through heat maps and recording behavior on the website. This information is anonymized.
• The Operator uses solutions automating the Website's operation in relation to users.

8. Cookie Information The Website uses cookies. Cookies are IT data, in particular text files, stored in users' end devices and intended for use with the Website's pages.

Two main types of cookies are used:

• "Session" cookies: temporary files stored until logging out, leaving the website, or closing the browser
• "Permanent" cookies: stored for a specified time in the user's end device

9. Cookie Management - How to Express and Withdraw Consent in Practice? If you don't want to receive cookies, you can change your browser settings. We reserve that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult or impossible to use the website.

To manage cookie settings, choose your internet browser from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

Mobile devices:

• Android
• Safari (iOS)
• Windows Phone

Complaints about the Administrator's actions can be submitted to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, or the relevant data protection authority in your country of residence within the EU.

Personal data is not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.

This privacy policy was updated on January 1, 2024. We regularly review and update this policy to ensure it accurately reflects how we use your personal data.