§1. General Provisions

1. The data controller is G-Lift Sp. z o. o. with its registered office in Warsaw, ul. Rembrandta 4a/39, postal code 03-531, KRS: 0001013725, NIP: 5242961220, REGON: 524257383. Data protection is carried out in accordance with the requirements of generally applicable laws, and the data is stored on secure servers.

2. For the interpretation of terms, the glossary of the Terms of Service is used or as described in the Privacy Policy (if it follows directly from the description).

3. For the purpose of better reception of the Privacy Policy, the term "User" has been replaced by "You", "Administrator" - "We". The term "GDPR" means Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

4. We respect the right to privacy and care for data security.

5. Personal data provided in the form on the website is treated as confidential and is not visible to unauthorized persons.

§2. Data Controller

1. The Service Provider is the controller of its clients' data. This means that if you are our client or have given optional consents visible when providing your data on our website, we process your data such as: first and last name, e-mail address, phone number, position, place of work, company name, physical address (postal code, city, street name), and identification data of your business/company/enterprise/organizational unit and IP address.

2. The Service Provider is also the controller of persons subscribed to the newsletter.

3. Personal data is processed:

   1. in accordance with the provisions on the protection of personal data,

   2. in accordance with the implemented Privacy Policy,

   3. to the extent and for the purpose necessary to establish, shape the content of the Agreement, change or terminate it, and correctly implement the Services provided electronically,

   4. to the extent and for the purpose necessary to fulfill legitimate interests (legally justified purposes), and the processing does not violate the rights and freedoms of the data subject:

   5. to the extent and for the purpose consistent with the consent you have given if you have subscribed to the newsletter.

4. Every data subject (if we are their controller) has the right to access the data, rectify, delete or limit processing, the right to object, and the right to lodge a complaint with the supervisory authority.

5. Contact with the person supervising the processing of personal data in the Service Provider's organization is possible electronically at the e-mail address: info@glift.eu.

6. We reserve the right to process your data after the termination of the Agreement or withdrawal of consent only to the extent necessary to pursue any claims in court or if national or EU regulations or international law oblige us to retain data.

7. The Service Provider has the right to share the User's personal data and other data with entities authorized under applicable law (e.g., law enforcement agencies).

8. Deletion of personal data may occur as a result of withdrawing consent or lodging a legally permissible objection to the processing of personal data.

9. The Service Provider does not share personal data with entities other than those authorized under applicable law.

10. We have implemented pseudonymization, data encryption, and we have introduced access control, which minimizes the effects of a possible data security breach.

11. Personal data is processed only by persons authorized by us or by processors with whom we closely cooperate.

§3. Cookies

1. The website www.glift.eu uses cookies. These are small text files sent by a web server and stored by the browser's computer software. When the browser reconnects with the site, the site recognizes the type of device the user is connecting from. The parameters allow the information contained in them to be read only by the server that created them. Cookies therefore facilitate the use of previously visited websites.
   The information collected relates to the IP address, type of browser used, language, type of operating system, internet service provider, time and date information, location, and information sent to the website via the contact form.

2. The collected data is used to monitor and check how users use our sites to improve the functioning of the service, ensuring more effective and seamless navigation. We monitor user information using the Google Analytics tool, which records user behavior on the site.
   Cookies identify the user, which allows the content of the website they use to be tailored to their needs. By remembering their preferences, it allows for the appropriate adjustment of advertisements targeted at them. We use cookies to guarantee the highest standard of convenience of our service, and the collected data is used only within our company to optimize operations.

3. We use the following cookies on our website:

   1. "necessary" cookies, enabling the use of services available within the service, e.g., authentication cookies used for services that require authentication within the service;

      • Name: gdpr_consent
        Service: Cookie Consent
        Purpose: Remembers third-party cookie preferences (the user will not be asked again).
        Cookie type and validity: Persistent cookie, 5 years

      • Name: laravel_session
        Service: Website
        Purpose: Remembers website operation preferences (navigation, filters).
        Cookie type and validity: Persistent cookie, 2 hours

   2. cookies used to ensure security, e.g., used to detect authentication abuse within the service;

      • Name: XSRF-TOKEN
        Service: Website
        Purpose: Protects the site from spamming robot attacks.
        Cookie type and validity: Persistent cookie, 2 hours

   3. "performance" cookies, enabling the collection of information on how the service's websites are used;

      • Name: __cf_bm
        Service: Video delivery service Vimeo - learn more about this provider
        Purpose: Distinguishes users from bots.
        Cookie type and validity: Persistent cookie, 1.5 hours

   4. "functional" cookies, enabling the "remembering" of user-selected settings and personalization of the user interface, e.g., in terms of the selected language or region from which the user comes, font size, website appearance, etc.;

   5. "advertising" cookies, enabling the delivery of advertising content more tailored to their interests.

      • Name: _ga
        Service: Web analytics service based on Google Analytics - learn more about this provider
        Purpose: Recognizes users visiting the website (anonymously - does not collect user information).
        Cookie type and validity: Persistent cookie, 2 years

      • Name: _ga_#
        Service: Web analytics service based on Google Analytics - learn more about this provider
        Purpose: Counts the number of page views (anonymously - does not collect user information).
        Cookie type and validity: Persistent cookie, 2 years

      • Name: _gcl_au
        Service: Web analytics service based on Google Adsense - learn more about this provider
        Purpose: Counts and tracks conversions (anonymously - does not collect user information).
        Cookie type and validity: Persistent cookie, 3 months

      • Name: vuid
        Service: Video delivery service Vimeo - learn more about this provider
        Purpose: Counts the number of page views.
        Cookie type and validity: Persistent cookie, 10 years

4. The user can at any time disable or restore the option of collecting cookies by changing the settings in their web browser. Instructions for managing cookies are available at
   http://www.allaboutcookies.org/manage-cookies.

5. Additional personal data, such as e-mail address, is collected only in places where the user has expressly consented to it by filling out a form. We save and use the above data only for the needs necessary to perform a given function.