Privacy & cookies policy

1. General Information

1. This policy applies to the website operating at the URL: primax.fit
2. The operator of the website and the Administrator of personal data is: North Fit s.r.o., Emila Filly 296/13, 709 00 Ostrava, Czech Republic
3. The operator's email contact address: kontakt@primax.fit
4. The operator is the Administrator of your personal data regarding data voluntarily provided on the website.
5. The website uses personal data for the following purposes:

• Running a newsletter
• Operating a comment system
• Conducting online chat conversations
• Handling inquiries via forms
• Preparation, packing, and shipping of goods
• Providing ordered services
• Debt collection
• Presenting offers or information

1. Through data voluntarily entered into forms, which are entered into the operator's systems.
2. By saving cookies (so-called “cookies”) on end devices.

2. Selected Data Protection Methods Used by the Operator

1. Login and personal data entry points are protected at the transmission layer (SSL certificate). This ensures that personal data and login credentials entered on the website are encrypted on the user's computer and can only be read on the target server.
2. Personal data is stored in the database in an encrypted form so that only the operator with the key can read it. This protects the data in case the database is stolen from the server.
3. User passwords are stored in a hashed form. The hashing function works one-way—it cannot be reversed, which is currently a modern standard for storing user passwords.
4. The operator periodically changes its administrative passwords.
5. To protect the data, the operator regularly creates backups.
6. An essential element of data protection is the regular updating of all software used by the operator to process personal data, which particularly involves regular updates of software components.

3. Hosting

1. The website is hosted (technically maintained) on servers operated by: cyberFolks.pl
2. The hosting company ensures technical reliability by maintaining server-level logs. These logs may include:
   • Resources specified by the URL identifier (addresses of requested resources – pages, files),
   • Time of the request,
   • Time of response,
   • The name of the client station – identification through the HTTP protocol,
   • Information about errors that occurred during the HTTP transaction,
   • The URL address of the previously visited page (referer link) if the transition to the site occurred via a link,
   • Information about the user’s browser,
   • IP address information,
   • Diagnostic information related to the self-ordering of services through the website,
   • Information related to email correspondence directed to and sent by the operator.

4. Your Rights and Additional Information on Data Usage

1. In certain situations, the Administrator has the right to transfer your personal data to other recipients, if necessary to perform the contract concluded with you or to fulfill obligations imposed on the Administrator. This applies to the following groups of recipients:
   • Hosting company under the entrustment agreement
   • Couriers
   • Postal operators
   • Insurers
   • Law firms and debt collectors
   • Banks
   • Payment operators
   • Public authorities
   • Operators of comment systems
   • Operators of online chat solutions
   • Authorized employees and associates who use data to fulfill the purpose of the website
   • Companies providing marketing services for the Administrator
2. Your personal data processed by the Administrator will not be kept longer than necessary to perform related activities defined by separate regulations (e.g., accounting rules). For marketing data, it will not be processed for more than 3 years.
3. You have the right to request from the Administrator:
   • Access to your personal data,
   • Rectification,
   • Deletion,
   • Restriction of processing,
   • And data portability.
4. You have the right to object to the processing described in point 3.2 concerning data processing for legitimate interests pursued by the Administrator, including profiling. However, the right to object cannot be exercised if there are valid, legally justified grounds for processing, overriding your interests, rights, and freedoms, particularly establishing, pursuing, or defending claims.
5. Actions taken by the Administrator can be appealed to the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.
6. Providing personal data is voluntary but necessary for the website's operation.
7. Automated decision-making, including profiling, may occur concerning you to provide services under the contract and for the Administrator's direct marketing purposes.
8. Personal data is not transferred to third countries within the meaning of data protection regulations. This means that we do not transfer them outside the European Union.

5. Information in Forms

1. The website collects information voluntarily provided by the user, including personal data, if provided.
2. The website may store information about connection parameters (timestamp, IP address).
3. The website, in some cases, may save information to associate form data with the user's email address. In this case, the user's email address appears in the URL of the form page.
4. Data provided in the form is processed for purposes arising from the function of the specific form, e.g., handling service requests or business contact, registering services, etc. The context and description of the form clearly indicate its purpose.

6. Administrator Logs

1. Information about user behavior on the website may be logged. This data is used to administer the site.

7. Important Marketing Techniques

1. The operator uses statistical traffic analysis through Google Analytics (Google Inc., USA). No personal data is transmitted to Google; only anonymized information is shared. This service uses cookies. Users can review and modify their preferences through: [Google Ads Preferences](https://www.google.com/ads/preferences/).
2. The operator uses remarketing techniques, which adapt advertisements to user behavior. However, this does not involve the transfer of personal data. The technological condition is cookies enabled in the user's device.
3. The operator uses the Facebook pixel. This technology allows Facebook to know that a registered user is on the website. The operator does not share additional personal data.
4. The operator applies tools for user behavior analysis through heat maps and recording sessions. These tools anonymize the data before sending it.

8. Cookie Information

1. The website uses cookies.
2. Cookies are IT data, primarily text files, stored on the user’s device.
3. Cookies are used to maintain the user session and fulfill marketing purposes.

9. Managing Cookies

1. To block cookies, users can change their browser settings. However, this may affect the website's functionality.