1. General Information
This policy applies to the website operating at the following URL: https://welaw-marbella.com/
The operator of the website and the Controller of personal data is: Anna Weronika Dzik
Address: Urb. Cascada de Camojan, Calle el Olivar 45c, 29602 Marbella (Malaga), Spain
NIF (ES): Z3728736-G
The operator’s contact email address is: contact@welaw-marbella.com
The Operator is the Controller of your personal data in relation to data provided voluntarily through the Website.
The Website uses personal data for the following purposes:
Handling enquiries submitted through the form
Providing ordered services
Presenting an offer or information
The Website obtains information about users and their behaviour in the following ways:
Through data voluntarily entered in forms, which is then entered into the Operator’s systems.
Through storing cookies on end devices.
2. Selected Data Protection Methods Used by the Operator
Login areas and places where personal data is entered are protected at the transmission layer by an SSL certificate. As a result, personal data and login details entered on the website are encrypted on the user’s computer and can only be read on the target server.
User passwords are stored in hashed form. The hashing function is one-way, meaning that it is not possible to reverse its operation. This is currently a modern standard for storing user passwords.
In order to minimise the risk of unauthorised access to data, the Operator uses complex passwords containing lowercase and uppercase letters, numbers and special characters, with a minimum length of 8 characters.
An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means regular updates of software components.
In order to protect data, the Operator regularly performs backups.
3. Hosting
The Website is hosted and technically maintained on the server of the following provider: lh.pl
In order to ensure technical reliability, the hosting company maintains server-level logs. The following may be recorded:
resources identified by URL, meaning the addresses of requested resources such as pages and files,
the time the request was received,
the time the response was sent,
the name of the client station, identified through the HTTP protocol,
information about errors that occurred during the execution of the HTTP transaction,
the URL address of the page previously visited by the user, known as the referrer link, if the user accessed the Website through a link,
information about the user’s browser,
information about the IP address,
diagnostic information related to the process of independently ordering services through registrars on the website,
information related to the handling of email correspondence addressed to the Operator and sent by the Operator.
4. Your Rights and Additional Information on the Use of Data
In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary for the performance of an agreement concluded with you or for the fulfilment of obligations imposed on the Controller. This applies to the following categories of recipients:
the hosting company, on the basis of data processing entrustment,
postal operators,
authorised employees and associates who use the data for the purpose of operating the website,
public authorities,
companies providing marketing services to the Controller.
Your personal data processed by the Controller will not be processed for longer than is necessary to perform the related activities specified by separate provisions, for example accounting regulations. In relation to marketing data, the data will not be processed for longer than 3 years.
You have the right to request from the Controller:
access to your personal data,
rectification of your personal data,
erasure of your personal data,
restriction of processing,
and data portability.
You have the right to object to the processing indicated in point 3.3 c) in relation to the processing of personal data for the purposes of legitimate interests pursued by the Controller, including profiling. However, the right to object may not be exercised if there are valid legally justified grounds for processing which override your interests, rights and freedoms, in particular the establishment, pursuit or defence of claims.
You have the right to lodge a complaint against the actions of the Controller with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Providing personal data is voluntary, but necessary for the operation of the Website.
Actions involving automated decision-making, including profiling, may be taken in relation to you for the purpose of providing services under the concluded agreement and for the purpose of conducting direct marketing by the Controller.
Personal data is not transferred to third countries within the meaning of personal data protection regulations. This means that we do not transfer it outside the European Union.
5. Information in Forms
The Website collects information provided voluntarily by the user, including personal data, if such data is provided.
The Website may record information about connection parameters, such as timestamp and IP address.
In some cases, the Website may save information that facilitates linking the data in the form with the email address of the user completing the form. In such a case, the user’s email address appears within the URL of the page containing the form.
The data provided in the form is processed for the purpose resulting from the function of the specific form, for example to handle a service request, commercial contact, service registration, etc. In each case, the context and description of the form clearly indicate what it is used for.
6. Administrator Logs
Information about user behaviour on the Website may be logged. This data is used for the purpose of administering the Website.
7. Important Marketing Techniques
The Operator uses statistical analysis of website traffic through Google Analytics, provided by Google Inc. with its registered office in the USA. The Operator does not transfer personal data to the provider of this service, but only anonymised information. The service is based on the use of cookies on the user’s end device. In relation to information about user preferences collected by the Google advertising network, the user may view and edit information resulting from cookies using the following tool: https://www.google.com/ads/preferences/
The Operator uses a solution that analyses user behaviour by creating heatmaps and recording behaviour on the website. This information is anonymised before being sent to the service provider, so that the provider does not know which natural person it relates to. In particular, entered passwords and other personal data are not recorded.
The Operator uses a solution that automates the operation of the Website in relation to users, for example by sending an email to the user after visiting a specific subpage, provided that the user has consented to receiving commercial correspondence from the Operator.
8. Information About Cookies
The Website uses cookies.
Cookies are IT data, in particular text files, which are stored on the end device of the Website User and are intended for use of the Website’s pages. Cookies usually contain the name of the website from which they originate, the period for which they are stored on the end device, and a unique number.
The entity placing cookies on the end device of the Website User and accessing them is the Website operator.
Cookies are used for the following purposes:
maintaining the session of the Website User after logging in, so that the user does not have to re-enter their login and password on each subpage of the Website,
carrying out the purposes described above in the section “Important Marketing Techniques”.
The Website uses two basic types of cookies: session cookies and persistent cookies. Session cookies are temporary files stored on the User’s end device until the user logs out, leaves the website, or closes the software, meaning the web browser. Persistent cookies are stored on the User’s end device for the period specified in the cookie parameters or until they are deleted by the User.
Web browsing software, meaning the web browser, usually allows cookies to be stored on the User’s end device by default. Website Users may change their settings in this respect. The web browser allows cookies to be deleted. It is also possible to automatically block cookies. Detailed information on this subject can be found in the help section or documentation of the web browser.
Restrictions on the use of cookies may affect certain functionalities available on the Website.
Cookies placed on the end device of the Website User may also be used by entities cooperating with the Website operator, in particular companies such as Google (Google Inc. with its registered office in the USA), Facebook (Facebook Inc. with its registered office in the USA), and Twitter (Twitter Inc. with its registered office in the USA).
9. Managing Cookies – How to Give and Withdraw Consent in Practice
If the user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication processes, security, and maintaining user preferences may make it difficult, and in extreme cases may make it impossible, to use the website.
In order to manage cookie settings, select the web browser you use from the list below and follow the instructions:
Edge
Internet Explorer
Chrome
Safari
Firefox
Opera
Mobile devices:
Android
Safari (iOS)
Windows Phone