Privacy Policy

1. General Information
This Policy applies to the Website operating at the URL: sambacargo.com.
The Website Operator and Personal Data Administrator is:
SambaCargo Sp. z o.o.
Omulewska 26/104
04-128 Warsaw
POLAND
Email contact address of the Operator: info@sambacargo.com

The Operator is the Administrator of your personal data in relation to any data you provide voluntarily via the Website.
The Website uses personal data for the following purposes:

Managing the newsletter
Handling inquiries submitted through the form
Fulfilling ordered services
Presenting an offer or information

The Website collects information about users and their behavior in the following ways:

Via data voluntarily entered in forms, which are then stored in the Operator’s systems.
By saving cookies (“cookies”) on end-user devices.

2. Selected Data Protection Methods Applied by the Operator

Login pages and fields for entering personal data are protected at the transmission layer (SSL certificate). This ensures that personal data and login credentials entered on the site are encrypted on the user’s device and can only be read on the destination server.
User passwords are stored in hashed form. The hashing function is one-way and cannot be reversed, which is the current standard for storing user passwords.
Two-factor authentication is implemented on the Website, providing an additional layer of login protection.
The Operator periodically changes its administrative passwords.
To protect data, the Operator regularly creates backup copies.
An important element of data protection is the regular updating of all software used by the Operator to process personal data, which includes timely updates of programming components.

3. Hosting
The Website is hosted (technically maintained) on the Operator’s servers at: home.pl.
The hosting company maintains server-level logs to ensure technical reliability. Logged data may include:

Resources identified by URL (addresses of requested resources—pages, files)
Time of the request
Time of the response
Client station name—identification realized via the HTTP protocol
Information on errors occurring during the HTTP transaction
URL of the page previously visited by the user (referer), if access to the Website was made via a link
Information about the user’s browser
Information about the IP address
Diagnostic information related to the process of self-service ordering via registries on the site
Information related to handling email sent to and from the Operator

4. Your Rights and Additional Information on Data Usage
In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to perform a contract concluded with you or to fulfill obligations incumbent on the Administrator. This applies to the following groups of recipients:

Hosting company (under a data-processing agreement)
Couriers
Postal operators
Insurers
Law firms and debt collection agencies
Banks
Payment service providers
Public authorities
Comment system operators
Authorized employees and collaborators who use the data for the purpose of the Website’s operation
Companies providing marketing services on behalf of the Administrator

Your personal data processed by the Administrator will be kept no longer than necessary to perform the operations defined by specific regulations (e.g., accounting). With regard to marketing data, they will not be processed for more than three years.

You have the right to request from the Administrator:

Access to your personal data
Rectification of your personal data
Erasure of your personal data
Restriction of processing
Data portability

You also have the right to object to processing (as indicated in section 4.2) when personal data are processed to pursue the Administrator’s legitimate interests, including profiling, unless there are compelling legitimate grounds for processing that override your interests, rights, and freedoms—particularly for the establishment, exercise, or defense of legal claims.

You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, POLAND.

Providing personal data is voluntary but necessary to use the Website.
Automated decision-making, including profiling, may be carried out with respect to you for the purpose of providing services under a concluded contract and for the Administrator’s direct marketing.

Personal data are not transferred outside “third countries” as defined in data protection regulations. This means we do not send them outside the European Union.

5. Information in Forms
The Website collects information voluntarily provided by the user, including personal data if submitted.
The Website may record information about connection parameters (timestamp, IP address).
In some cases, the Website may record information that helps link data entered in a form with the user’s email address. In such cases, the user’s email address appears within the URL of the page containing the form.
Data provided in a form are processed for the purpose resulting from the function of that specific form—for example, to handle a service request, a commercial inquiry, service registration, etc. Each form’s context and description clearly inform the user of its purpose.

6. Administrator’s Logs
Information about user behavior on the Website may be subject to logging. Such data are used for Website administration.

7. Significant Marketing Techniques

The Operator uses statistical analysis of traffic on the site via Google Analytics (Google Inc., USA). The Operator does not transmit personal data to this service provider—only anonymized information. This service relies on cookies stored on the user’s device. Regarding information on user preferences collected by Google’s advertising network, the user may view and edit cookie-based information using the tool at https://www.google.com/ads/preferences/.
The Operator employs remarketing techniques that allow advertising messages to be tailored to the user’s behavior on the site, which may give the impression that the user’s personal data are used for tracking. In practice, however, no personal data are transferred from the Operator to advertising operators. The technical condition for such activities is that cookies remain enabled.
The Operator uses the Facebook Pixel. This technology causes Facebook (Facebook Inc., USA) to know when a registered Facebook user visits the Website. It is based on data over which Facebook itself is the administrator; the Operator does not share any additional personal data with Facebook. This service relies on cookies stored on the user’s device.
The Operator uses a solution for analyzing user behavior by creating heat maps and session recordings. These data are anonymized before being sent to the service provider so that they cannot be linked to a specific natural person. In particular, entered passwords and other personal data are not recorded.
The Operator uses a solution to automate Website interactions with users—for example, sending an email to a user after they visit a particular subpage, provided they have consented to receive commercial communications from the Operator.

8. Information on Cookies
The Website uses cookies.
Cookies are digital information, particularly text files, that are stored on the end user’s device and intended for use on the Website. Cookies typically contain the domain name of the website from which they originate, their storage duration on the end user’s device, and a unique identifier.
The entity placing cookies on the user’s device and accessing them is the Website Operator.

Cookies are used for the following purposes:

Maintaining the user’s session on the Website (after login), so the user does not have to re-enter login and password on each page;
Fulfilling the purposes specified above under “Significant Marketing Techniques.”

Two basic types of cookies are used on the Website: “session cookies” and “persistent cookies.” Session cookies are temporary and remain in the user’s device until logout, leaving the site, or closing the browser. Persistent cookies stay on the user’s device for the period specified in the cookie parameters or until deleted by the user.

Web browser software usually allows cookies to be stored by default. Website users may change these settings. The browser allows for the deletion of cookies. Automatic blocking of cookies is also possible. Detailed information is provided in the help or documentation of the user’s browser.

Limiting the use of cookies may affect some functionalities available on the Website.

Cookies placed on the user’s device may also be used by entities collaborating with the Operator, in particular: Google (Google Inc., USA), Facebook (Facebook Inc., USA), Twitter (Twitter Inc., USA).

9. Managing Cookies—How to Grant and Withdraw Consent in Practice
If a user does not wish to receive cookies, they may change their browser settings. Please note that disabling cookies necessary for authentication, security, and maintaining user preferences may hinder or, in extreme cases, prevent the use of the Website.

To manage cookie settings, select your browser from the list below and follow the instructions:

Mobile devices:

Privacy Policy

Company details:

Contact

Sitemap