1. General Information

This policy applies to the website located at the URL: mycfo.pl.

The service is operated by and the personal data is administered by: MyCFO, Grunwaldzka 27C, 63-100 Śrem, Poland.

The operator’s contact email address is kontakt@mycfo.pl.

The operator is the administrator of your personal data in relation to data voluntarily provided on the website.

The website uses personal data for the following purposes:

• Newsletter subscription
• Handling inquiries via forms
• Processing orders for goods – preparation, packaging, and shipping
• Fulfillment of ordered services
• Handling relevant accounting documents
• Debt collection
• Presentation of offers or information
• Compliance with legal obligations related to data processing, according to Art. 6(1)(c) of the GDPR, as required by specific regulations (e.g., accounting).

The website collects information about users and their behavior through the following methods:

• Voluntarily provided data in forms, which are entered into the operator’s systems.
• Storing cookies (so-called “cookies”) on end-user devices.

2. Selected Data Protection Methods Used by the Operator

Login and personal data entry areas are protected in the transmission layer with an SSL certificate. This ensures that personal data and login information entered on the website are encrypted on the user’s computer and can only be read on the target server.

3. Hosting

The service is hosted and technically maintained on servers provided by another company.

4. Your Rights and Additional Information on Data Use

In some situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary to fulfill a contract with you or to meet the obligations of the Administrator. This includes the following recipient groups:

• Individuals authorized by us, employees, and collaborators who need access to personal data to perform their duties.
• Hosting companies.
• Mailing service providers.
• SMS communication service providers.
• Companies with which the Administrator cooperates in terms of marketing.
• Couriers.
• Insurers.
• Legal firms and debt collectors.
• Banks.
• Payment operators.
• Public authorities.

Your personal data processed by the Administrator will not be retained longer than necessary for the actions associated with them, as specified in separate regulations (e.g., accounting). Regarding marketing data, they will not be processed for more than 3 years.

You have the right to request from the Administrator:

• Access to your personal data.
• Rectification of your personal data.
• Deletion of your personal data.
• Restriction of data processing.
• Data portability.

You have the right to object to the processing mentioned in point 3.3 c), concerning the processing of personal data for the legitimate interests pursued by the Administrator, including profiling. However, this right to object cannot be exercised if there are compelling legitimate grounds for processing that override your interests, rights, and freedoms, especially for the establishment, exercise, or defense of legal claims.
You have the right to file a complaint with the President of the Office for Personal Data Protection, ul. Stawki 2, 00-193 Warsaw.
Providing personal data is voluntary but necessary to use the service.
Automated decision-making, including profiling, may be carried out with respect to you for the purpose of providing services under the concluded agreement and for conducting direct marketing by the Administrator.
Personal data is not transferred to third countries as defined in the provisions on personal data protection. This means that they are not transferred outside the European Union.

5. Information in forms

The service collects information voluntarily provided by the user, including personal data if provided.

The service may also store information about connection parameters (timestamp, IP address).

In some cases, the service may save information to facilitate the connection of data in the form with the user’s email address. In such cases, the user’s email address appears within the URL of the page containing the form.

Data provided in the form is processed for the purpose that corresponds to the specific form’s function, such as handling service requests, commercial inquiries, or service registration. Each time, the form’s context and description clearly inform the user of its intended use.

6. Administrator’s Logs

Information about user behavior on the service may be subject to logging. This data is used for service administration.

7. Essential Marketing Techniques

The operator uses statistical analysis of website traffic through Google Analytics (Google Inc., USA). The operator does not transmit personal data to the service provider, only anonymized information is shared. This service relies on the use of cookies on the user’s end device. Users can view and edit information derived from cookies through the following tool: https://www.google.com/ads/preferences/

8. Information about Cookies

The service uses cookies.

Cookies are computer data, specifically text files, stored on the end user’s device and intended for use on the service’s web pages. Cookies typically contain the name of the originating website, the duration of their storage on the end device, and a unique number.

The entity placing cookies on the end user’s device and accessing them is the service operator.

Cookies are used for the following purposes:

• Maintaining the user’s session on the service (after logging in), which eliminates the need for the user to re-enter their login and password on each subpage of the service.
• Achieving the goals specified in the “Essential Marketing Techniques” section above.

Within the service, two fundamental types of cookies are used: “session” cookies and “persistent” cookies. “Session” cookies are temporary files stored on the end user’s device until they log out, leave the website, or close the web browser software. “Persistent” cookies are stored on the end user’s device for the time specified in the cookie parameters or until the user deletes them.

Web browsing software (web browser) usually allows cookies to be stored on the end user’s device by default. Service users can change their settings in this regard. The web browser allows you to delete cookies. It is also possible to automatically block cookies. Detailed information on this topic can be found in the web browser’s help or documentation.

Limiting the use of cookies may affect some of the functionalities available on the service’s web pages.

Cookies placed on the end user’s device by the service may also be used by entities cooperating with the service operator, particularly companies such as Google (Google Inc., USA), Facebook (Facebook Inc., USA), and Twitter (Twitter Inc., USA).

9. Managing Cookies – How to Give and Withdraw Consent in Practice?

If a user does not wish to receive cookies, they can change their browser settings. Please note that disabling cookies necessary for authentication, security, and user preference maintenance processes may make it more difficult to use the website and, in extreme cases, prevent the use of web pages.

To manage cookie settings, please select the web browser you are using from the list below and follow the instructions:

• Edge
• Internet Explorer
• Chrome
• Safari
• Firefox
• Opera

For mobile devices:

• Android
• Safari (iOS)
• Windows Phone