Privacy Policy

General Information

This policy applies to the Website operating under the URL: yutra.eu The Website operator and Data Controller is: Salag sp. z o.o., ul. Szafirowa 5, 16-400 Suwałki, Poland Operator's contact email address: [email protected]

The Operator is the Controller of your personal data with respect to data voluntarily provided on the Website.

The Website uses personal data for the following purposes:

• Newsletter management
• Comment system operation
• Online chat conversations
• User profile presentation to other users
• Handling inquiries through forms
• Preparation, packaging, shipping of goods
• Execution of ordered services
• Presentation of offers or information

The Website collects information about users and their behavior in the following ways:

• Through data voluntarily entered in forms, which is then entered into the Operator's systems
• Through cookie files stored in end devices ("cookies")

Selected Data Protection Methods Used by the Operator

• Login locations and personal data entry points are protected in the transmission layer (SSL certificate). This ensures that personal data and login information entered on the website are encrypted on the user's computer and can only be read on the destination server.
• Personal data stored in the database is encrypted in such a way that only the Operator possessing the key can read it. This protects the data in case of database theft from the server.
• User passwords are stored in a hashed form. The hashing function works one-way - it is impossible to reverse its operation, which is currently the modern standard for storing user passwords.
• The Operator periodically changes its administrative passwords.
• To protect data, the Operator regularly performs security backups.
• An important element of data protection is regular updates of all software used by the Operator for personal data processing, which particularly means regular updates of programming components.

Hosting

The Website is hosted (technically maintained) on the servers of: external company

The hosting company, to ensure technical reliability, maintains server logs. The following may be recorded:

• Resources identified by URL (addresses of requested resources - pages, files)
• Time of request arrival
• Response time
• Client station name - identification performed by HTTP protocol
• Information about errors that occurred during HTTP transaction execution
• URL address of the previously visited page (referer link) - if the Website was accessed through a link
• Information about the user's browser
• IP address information
• Diagnostic information related to the process of self-ordering services through registers on the site
• Information related to email handling directed to and sent by the Operator

Your Rights and Additional Information About Data Usage

In certain situations, the Controller has the right to transfer your personal data to other recipients if it is necessary to perform the agreement concluded with you or to fulfill obligations incumbent on the Controller. This applies to such groups of recipients as:

• Hosting company on the basis of entrustment
• Couriers
• Postal operators
• Payment operators
• Online chat solution operators
• Authorized employees and collaborators who use the data to achieve the website's purpose
• Companies providing marketing services for the Controller

Your personal data processed by the Controller will not be stored longer than necessary to perform related activities specified by separate regulations (e.g., accounting). Regarding marketing data, data will not be processed for longer than 3 years.

You have the right to request from the Controller:

• Access to personal data concerning you
• Their rectification
• Deletion
• Processing restrictions
• Data portability

You have the right to object to processing indicated in point 3.2 regarding the processing of personal data for the purpose of legitimate interests pursued by the Controller, including profiling.

Information in Forms

The Website collects the following information voluntarily provided by the user:

• Customer's first and last name (required)
• Address details (required)
• Email (required)
• Phone number (required)
• For entrepreneurs: company name and VAT ID (required for entrepreneurs)
• Shipping address (optional)
• In case of specifying a different person for shipment: recipient's first and last name, address details and phone number (optional)
• Payment details

Providing the above data marked as required is mandatory to process the order. Failure to provide this data may result in inability to place an order.

The Website may record information about connection parameters (timestamp, IP address). The Website, in some cases, may save information facilitating the linking of form data with the email address of the user filling out the form. Data provided in the form is processed for purposes resulting from the function of the specific form.

Administrator Logs

Information about user behavior on the website may be subject to logging. This data is used for website administration.

Profiling of Personal Data

What is profiling?

Profiling means any form of automated processing of personal data that involves using personal data to evaluate certain personal aspects relating to a natural person — particularly to analyze or predict preferences, interests, behavior, location, or movements.

Does the Operator use profiling?

Yes. The Operator uses profiling in the following ways:

• Personalized product offers and services

  – Based on your browsing history and previous purchases

  – Based on items added to cart or wishlist

  – To suggest products you may be interested in

• Marketing personalization

  – To tailor marketing messages to your preferences

  – To segment users for targeted advertising campaigns

  – To choose the optimal time/channel for communication

• Website customization

  – To display relevant content and remember your preferences

  – To adapt functionality and appearance of the website

  – To enhance user experience

• Analysis and improvement

  – To evaluate user interaction and improve site usability

  – To measure marketing campaign effectiveness

What are the effects of profiling?

Profiling may influence:

• The range of products and services shown to you

• The marketing content you receive

• Personalized discounts and promotions

• Product display order in search results

• Product recommendations while browsing

Your rights regarding profiling

According to the GDPR, you have the right to:

• Object to profiling at any time, particularly in direct marketing contexts

• Request human intervention if decisions are made solely through automated processing

• Express your point of view and contest decisions based on profiling

To exercise these rights, please contact us at: [email protected]

Important Marketing Techniques

• The Operator uses statistical analysis of traffic on the website through Google Analytics (Google Inc. based in the USA). The Operator does not transfer personal data to this service provider, only anonymized information.
• The Operator uses remarketing techniques allowing for adjustment of advertising messages to user behavior on the website.
• The Operator uses Facebook pixel technology.
• The Operator uses solutions analyzing user behavior through heat maps and recording behavior on the website. This information is anonymized.
• The Operator uses solutions automating the Website's operation in relation to users.

Cookie Information

The Website uses cookies. Cookies are IT data, in particular text files, stored in users' end devices and intended for use with the Website's pages.

Two main types of cookies are used:

• "Session" cookies: temporary files stored until logging out, leaving the website, or closing the browser
• "Permanent" cookies: stored for a specified time in the user's end device

Cookie Management - How to Express and Withdraw Consent in Practice?

If you don't want to receive cookies, you can change your browser settings. We reserve that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult or impossible to use the website.

To manage cookie settings, choose your internet browser from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

Mobile devices:

• Android
• Safari (iOS)
• Windows Phone

Complaints about the Administrator's actions can be submitted to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, or the relevant data protection authority in your country of residence within the EU.

Personal data is not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.

This privacy policy was updated on January 1, 2025. We regularly review and update this policy to ensure it accurately reflects how we use your personal data.