Privacy Policy

Privacy and cookies policy

Hello, good morning!

If you ended up here, it’s a reliable sign that you value your privacy. I understand this perfectly well, so I am putting in your hands a document in which you will find in one place the rules for the processing of personal data and the use of cookies and other tracking technologies in connection with the operation of the https://littledragon.com.pl website.

Formal information to start – the administrator of the site is Little Dragon Żaneta Ogonowska Ul. Strzelców 1a/10 81-586 Gdynia NIP: 742-218-98-51

This privacy policy is structured in the form of questions and answers. The choice of such a form was dictated by attention to clarity and readability of the information presented to you. Below you will find a table of contents of this policy corresponding to the questions I answer in turn.

If you have any concerns about the privacy policy, you can contact me at any time by sending an email to office@littledragon.com.pl.

# 1: Who is the controller of your personal data?

The administrator of your personal data is Little Dragon Żaneta Ogonowska Ul. Strzelców 1a/10 81-586 Gdynia NIP: 742-218-98-51

# 2: Who can you contact regarding the processing of your personal data?

As part of the implementation of data protection in my organization, a decision was made not to appoint a Data Protection Officer due to the fact that it is not mandatory in my situation. You can contact office@littledragon.com.pl by e-mail on matters related to data protection and privacy more broadly .

# 3: What information do I have about you?

Depending on the purpose, I may process the following information about you:

name,
residential address,
business address,
tax ID number,
email address,
phone number,
data contained in e-mail correspondence,
details of orders placed in the online store,
bank account number,
IP address,
approximate location,
image (profile photo),
Statistics related to newsletters received,
favorite mail client,
interest in specific topics,
content of comments / opinions added to the site.

We have described the scope of the processed data precisely for each processing purpose. Information in this regard is provided later in this policy.

Moreover, I use tools that collect a range of information about you related to your use of my website. This includes, in particular, the following information:

Operating system and browser information,
subpages viewed,
time spent on the site,
transitions between different subpages,
clicks on individual links,
The source from which you go to the site,
The age range you are in,
Your gender,
Your approximate location limited to localities.
Your interests determined by your online activity.

This information is referred to hereafter in this privacy policy as ” Anonymous Information“.

Anonymous information by itself does not, in my opinion, have the character of personal information, because it does not allow me to identify you and I do not collate it with the typical personal information I collect about you. Nevertheless, given the strict jurisprudence of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution, in case Anonymous Information is attributed to the nature of personal data, detailed explanations are also included in this privacy policy regarding the processing of such information.

Because Anonymous Information is collected by third-party tools I use (the tools are discussed in detail later in this privacy policy), Anonymous Information is also processed by tool providers under the terms of their terms of use and privacy policies.

Anonymous information is also used by providers of particular tools to provide and improve services, manage services, develop new services, measure the effectiveness of advertising, protect against fraud and abuse, and personalize content and ads displayed on particular services, sites and applications.

# 4: How did I get your personal information?

In most cases, you pass them on yourself. This happens when:

You register a user account,
placing an order,
You send a complaint or withdraw from the contract,
you sign up for the newsletter,
add comment/feedback,
You contact via email,
You observe social media profiles or interact with content published on social media.

In addition, some information about you may be automatically collected by the tools I use:

The mechanism of the site and the newsletter system collect your IP address,
The newsletter system mechanism collects information about your activity with regard to the content sent to you within the newsletter, such as opening messages, clicking on links, etc,
Third-party tools that use cookies (the tools are described in detail later in this privacy policy) collect Anonymous Information related to your activities on the Site.

# 5: Is your data safe?

I take care of the security of your personal information. I analyzed the risks involved in the various processes of processing your data, and then implemented appropriate security and data protection measures. I constantly monitor the state of the technical infrastructure, train staff, look at the procedures in place, and make the necessary improvements. If you have any questions about your personal information, I am at your service at office@littledragon.com.pl.

# 6: For what purposes do I process your personal data?

These targets are more than one. Below is a list of them, followed by a more detailed discussion. The various purposes have also been assigned corresponding legal bases for processing:

user account operation – art. 6 paragraph. 1(b) RODO,
order handling – art. 6 paragraph. 1(b) RODO,

recovering an abandoned shopping cart – art. 6 paragraph. 1(f) RODO,

handling of complaints or withdrawal from the contract – art. 6 paragraph. 1(f) RODO,
newsletter service – art. 6 paragraph. 1(a) and Art. 6 paragraph. 1(f) RODO,
comment handling – art. 6 paragraph. 1(f) RODO,
mail handling – art. 6 paragraph. 1(f) RODO,
Implementation of tax and accounting obligations – Art. 6 paragraph. 1(c) of the RODO in connection with the relevant tax laws,
Creation of an archive for the possible need to defend, establish or assert claims – Art. 6 paragraph. 1(f) RODO,
Creating Facebook audience groups – art. 6 paragraph. 1(f) RODO,
social media handling – art. 6 paragraph. 1(f) RODO,
Analysis and statistics using only Anonymous Information – Art. 6 paragraph. 1(f) RODO,
Self-marketing using only Anonymous Information – Art. 6 paragraph. 1(f) RODO,
To ensure the functioning of the YouTube and SoundCloud player, social plugins and Disqus comments using only Anonymous Information – Art. 6 paragraph. 1(f) RODO.

User account – details

When you create a user account, you will need to provide the necessary information for the account: email address and password. Provision of data is voluntary, but necessary to create an account.

Within the framework of editing your account data, you can provide your further data, in particular, data that can be used for placing orders, such as your name, address of residence or place of business, Tax ID number, telephone number.

If you create an account through integration with a social network account, based on your prior authorization, I will gain access to certain data collected within the social network account (name, email address, profile picture).

In addition, my system used for user accounts records your IP number, which you used when registering a user account.

You can modify the information about you provided in connection with your user account registration at any time. However, in a situation where you have set up an account using an integration with a social network account, the data retrieved from the social network cannot be modified.

The data provided by you in connection with the creation of an account is processed for the purpose of providing you with the electronic service of providing you with a user account. This service is provided on the basis of a contract concluded under the terms and conditions described in the regulations, which means that in this regard the legal basis for the processing of your personal data is Art. 6 paragraph. 1(b) RODO.

The data will be kept for the duration of the operation of the user account, and then until the expiration of the statute of limitations for claims related to the user account service.

Orders – details

When placing an order, you must provide the data necessary for its processing: e-mail address, name, invoice details.

In addition, the system used to handle the order process records your IP number, which you used when placing the order.

Each order is saved in the database, which means that your personal information assigned to the order is also accompanied by order information such as the date and time of the order, the order ID number, the transaction ID, the subject of the order, the price, the method and date of payment, the date and time of downloading the purchased digital content.

Data collected in connection with the order, are processed for the purpose:

Performance of a contract concluded by placing an order (Article 6(1)(b) of the DPA),
to issue an invoice (Article 6(1)(c) of the RODO in connection with the relevant regulations governing the issuance of invoices),
inclusion of the invoice in the accounting records and fulfillment of other tax and accounting obligations (Article 6(1)(c) of the DPA in connection with the relevant regulations governing tax and accounting obligations),
inclusion in the archive for the possible need to defend, establish or assert claims (Article 6(1)(f) RODO).

Order data is processed for the time necessary for the execution of the order, and then until the expiration of the statute of limitations for claims under the contract.

Remember also that I am required to keep accounting records, which may contain your personal information, for the period required by law.

You can access your order data at any time. However, rectification of this data is not possible, except for a note or corrective invoice if it was issued in error. I am informing you that until the expiration of the statute of limitations for claims under the contract, I see my overriding interest in storing order data.

Recovering an abandoned shopping cart – details

If you start the ordering process but do not complete it, my system will note this fact, activating the abandoned cart recovery mechanism. The mechanism is that over a period of time I will send you messages reminding you to finalize your order. I am relying in this regard on my legitimate interest referred to in Art. 6 paragraph. 1(f) RODO. This business involves marketing its own products and services. You can object to receiving messages as part of the abandoned cart recovery mechanism by clicking on the relevant link contained in the message you received.

Complaints and withdrawals – details

If you make a complaint or withdraw from the contract, you will provide personal information contained in the body of the complaint or withdrawal statement, which includes your name, home address, telephone number, e-mail address, bank account number. Provision of data is voluntary, but necessary to make a complaint or withdraw from the contract.

Data provided in connection with the filing of a complaint or withdrawal from the contract is used for the purpose of the complaint procedure or withdrawal procedure, and then for archival purposes, which is a legitimate interest (Article 6(1)(f) RODO).

The data will be processed for the time necessary to carry out the complaint procedure or the withdrawal procedure. Claim documents will be kept until the expiration of warranty rights. Statements of withdrawal will be kept with accounting records for the period required by law.

Newsletter – details

When you sign up for the newsletter, you provide your name and email address. Providing data is voluntary, but necessary to subscribe to the newsletter.

In addition, the system used for the newsletter records your IP number, which you used when signing up for the newsletter, determines your approximate location, the email client you use for email, and tracks your actions taken in connection with messages sent to you. Therefore, I also have information about which messages you opened, within which messages you clicked on links, etc.

The data provided by you in connection with signing up for the newsletter, is used for the purpose of sending you the newsletter, and the legal basis for its processing is your consent (Article 6(1)(a) RODO) given when signing up for the newsletter.

As for the processing of information that does not come from you, but is collected automatically by the mailing system, I rely in this regard on my legitimate interest (Article 6(1)(f) RODO) to analyze the behavior of newsletter subscribers in order to optimize mailing activities.

You can unsubscribe from the newsletter at any time by clicking on the dedicated link included in each message sent as part of the newsletter or by simply contacting me.

Despite the cancellation of the newsletter, your data will continue to be stored in the database for the purpose of identifying the returning subscriber and for the possible defense of claims related to the sending of the newsletter to you, in particular for the purpose of proving the fact that you gave your consent to receive the newsletter and the moment of its withdrawal, which constitutes the legitimate interest referred to in Art. 6 paragraph. 1(f) RODO.

You can modify your information provided for receiving the newsletter at any time by clicking on the appropriate link visible in each message sent as part of the newsletter or by simply contacting me.

Comments / feedback – details

When adding a comment, you must provide at least a username that will be assigned to the comment (the name may include personal information, such as your first or last name) and an email address. Providing this data is voluntary, but necessary to add a comment.

The comment system is operated by a third-party provider, Disqus, Inc. The use of the comment system is subject to the terms and conditions and privacy policy of Disqus. Disqus is a stand-alone, independent entity that provides electronic services to you and processes your personal data in connection with the use of these services. You can use the Disqus system either without creating a user account or as a registered user after registering – the decision in this regard is up to you.

The comment you add, along with your data made public within the Disqus settings, will be visible on the site. You can modify and delete the comment at any time.

The legal basis for processing your personal data in the case of the comment system is the legitimate interest referred to in Art. 6 paragraph. 1(f) of the RODO, which in this case consists in the operation of a comment system.

Mail handling – details

When contacting via e-mail, you naturally provide your personal information contained in the body of the correspondence, in particular your e-mail address and name. Provision of data is voluntary, but necessary to make contact.

Your data in this case is processed for the purpose of contacting you, and the basis for processing is Art. 6 paragraph. 1(f) RODO, i.e. legitimate interest. The legal basis for post-contact processing is also the legitimate interest of archiving correspondence for the purpose of ensuring that we can prove certain facts in the future (Article 6(1)(f) RODO).

The content of the correspondence may be subject to archiving, and I am unable to determine clearly when it will be deleted. You have the right to request the history of correspondence you have had with me (if it was subject to archiving), as well as to request its deletion, unless its archiving is justified by overriding interests, such as defense against potential claims on your part.

Tax and accounting obligations – details

If I issue an invoice to you, it becomes part of your accounting records, which will be kept for the period of time required by law. Your personal data is then processed for the purpose of fulfilling my tax and accounting obligations (Article 6(1)(c) of the RODO in connection with the relevant regulations governing tax and accounting obligations).

Archive – details

As part of the description of the various purposes of personal data processing, the time limits for storing personal data are indicated. These deadlines are often related to the archiving of certain data for the purpose of ensuring that we can prove certain facts in the future, reconstruct the course of cooperation with the customer, exchanged correspondence, defense, establishment or assertion of claims. I am relying in this regard on the legitimate interest referred to in Art. 6 paragraph. 1(f) RODO.

Recipient groups – details

Your email address stored in the newsletter database or in the store’s database can be sent to Facebook to create a group of ad recipients using that email address.

When using this feature, the email address is hashed before being sent to Facebook to create a group of recipients.

The email address will be used in the matching process conducted by Facebook.

Facebook does not share the email address with third parties or other advertisers and deletes the email address immediately after the matching process.

Facebook has implemented processes and procedures to ensure the confidentiality and security of the email address sent to it and the set of Facebook user IDs that make up the group of recipients created using the email address, among other things, through the use of technical and physical safeguards.

The creation of a Facebook advertising audience using your email address constitutes a legitimate interest as referred to in Art. 6 paragraph. 1(f) RODO. You can object to the use of your e-mail address for this purpose at any time, just write to me about it at: office@littledragon.com.pl .

Social media – details

If you follow my social media profiles or interact with content I post on social media, I naturally see your data, which is publicly available in your social profile. I process this data only within the social network in question and only for the purpose of operating the social network in question, which is a legitimate interest referred to in Art. 6 paragraph. 1(f) RODO.

Your use of social networking sites is subject to the rules and privacy policies of the administrators of these sites, and these administrators provide electronic services to you, fully independently and autonomously.

I encourage you to use social networks consciously and take care of your privacy within them, especially by choosing the content you make public and managing your privacy settings prudently.

Analysis and statistics – details

I conduct analytical and statistical activities using the tools described in detail later in this privacy policy. Within the analytical tools, I only have access to Anonymous Information.

As mentioned earlier, Anonymous Information by itself does not, in my opinion, have the character of personal information, because it does not allow me to identify you and I do not collate it with the typical personal information I collect about you. Nevertheless, given the strict jurisprudence of the Court of Justice of the European Union and divided opinions among legal scholars, as a precaution, in case Anonymous Information is assigned the nature of personal data, detailed explanations are also included in this privacy policy regarding the processing of such information.

I base the processing of Anonymous Information on the legitimate interests referred to in Art. 6 paragraph. 1(f) RODO. Legitimate interest is to create, review and analyze statistics related to user activity on the site in order to draw conclusions that allow for subsequent optimization of the website.

I am unable to provide you with access to Anonymous Information about you because we are unable to attribute any of the Anonymous Information to any specific user. From external tools, we can only see a set of statistics and information not assigned to specific individuals.

You can, however, object to the processing of Anonymous Information about you by disabling third-party tool cookies in the cookie settings invoked by clicking on a relevant link in the footer of the page.

Self-marketing – details

I conduct marketing activities using third-party tools described in detail later in this privacy policy. As part of the marketing tools, I only have access to Anonymous Information.

I base the processing of Anonymous Information on the legitimate interests referred to in Art. 6 paragraph. 1(f) RODO. Legitimate interest consists in creating Custom Audience Groups based on Anonymous Information and targeting advertisements based on Anonymous Information, both of which fall within the marketing of our own products and services.

Additional tools – details

We embed videos from YouTube, audio recordings from SoundCloud, use social plugins and Disqus comments. All of these tools process Anonymous Information.

As mentioned earlier, Anonymous Information by itself does not, in my opinion, have the character of personal information, because it does not allow me to identify you and I do not collate it with the typical personal information I collect about you. Nevertheless, given the strict jurisprudence of the Court of Justice of the European Union and the divided opinions among lawyers, as a precaution, in case Anonymous Information is attributed the nature of personal data, detailed explanations are also included in this privacy policy regarding the processing of such information.

I base the processing of Anonymous Information on the legitimate interests referred to in Art. 6 paragraph. 1(f) RODO. The legitimate interest in this case is to ensure that additional features on the site can be used.

# 7: How long will I keep your personal information?

Data retention periods are indicated separately for each processing purpose. You will find this information under the details dedicated to each separate processing purpose. Most of the data is deleted after the expiration of the statute of limitations for claims.

# 8: Who are the recipients of your personal data?

I would venture to say that modern business cannot do without third-party services. I also use such services. Some of these services involve the processing of your personal data. Third-party service providers that are involved in the processing of your personal data are:

The hosting provider that stores the data on the server,
cloud service provider, which stores files that may contain your personal information,
the provider of the mailing system where your data is stored if you are a newsletter subscriber,
provider of a CRM system in which I store your data to improve the customer service process and for archival purposes,
provider of an invoicing system that stores your data for invoicing purposes,
The accounting office that processes your data shown on invoices,
a maintenance service provider who accesses the data if the technical work carried out concerns areas where personal data is located,
other subcontractors who gain access to the data if the scope of their activities requires such access.

All the entities listed above process your data on the basis of personal data processing entrustment agreements and guarantee an adequate level of personal data protection.

If necessary, your data may be shared with a legal advisor or attorney bound by professional secrecy. The need may arise from a legal necessity requiring access to your personal information.

Your personal data may also be transferred to the tax authorities to the extent necessary to carry out tax and accounting obligations. This includes, in particular, all declarations, reports, statements and other accounting documents that contain your personal data.

In addition, if necessary, your personal data may be shared with entities, authorities or institutions entitled to access the data under the law, such as police, security services, courts, prosecutors.

Your data is shared with courier companies to the extent necessary to deliver your order. These companies become independent controllers of your personal data.

What’s more, when it comes to Anonymous Information, providers of tools or plug-ins that collect Anonymous Information have access to it. The providers of these tools are independent controllers of the data collected in them, and may share this data under the terms of their own regulations and privacy policies, which are beyond my control.

# 9: Do I transfer your data to third countries or international organizations?

Yes, part of the processing operations of your personal data may involve their transfer to third countries.

I transfer your personal data to third countries in connection with the use of tools that store personal data on servers located in third countries, particularly in the USA. The providers of these tools guarantee an adequate level of personal data protection through the relevant compliance mechanisms provided by the RODO, in particular through the use of standard contractual clauses.

The storage of personal data on servers located in third countries occurs within the following tools:

MailChimp mailing system, whose provider is Rocket Science Group LLC, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA – in terms of your name, email address, IP address and statistical information related to your responses to the messages sent.

Rocket Science Group LLC ensures an adequate level of protection of personal data by applying the compliance mechanisms provided for by the RODO, in particular through the use of standard contractual clauses.

I would also like to remind you at this point that I use third-party tools that may collect Anonymous Information. I have mentioned this several times within this policy, including in response to a previous question. Providers of these tools often use servers located around the world, particularly in the United States of America (US), to store the information they collect.

# 10: Do I use profiling? Do I make automated decisions based on your personal information?

I do not make decisions with respect to you based solely on automated processing, including profiling, which would produce legal effects with respect to you or similarly materially affect you.

Yes, I do use tools that I can take certain actions depending on the information collected by the tracking mechanisms, but I believe that these actions do not have a significant impact on you, as they do not differentiate your situation as a customer, do not affect the terms of the contract you may enter into, etc.

Using certain tools, I may, for example, target you with personalized ads based on previous actions you have taken on the site or suggest products that may interest you. We are talking here about the so-called. behavioral advertising. I encourage you to deepen your knowledge of behavioral advertising, particularly with regard to privacy issues. Detailed information, including the ability to manage your behavioral advertising settings, can be found here .

I emphasize that within the tools I use I only have access to Anonymous Information. This information is stored on the servers of the providers of the individual tools, and these servers can most often be located around the world.

# 11: What rights do you have in relation to the processing of your personal data?

The RODO grants you the following potential rights related to the processing of your personal data:

The right to access your data and receive a copy of it,
The right to rectify (amend) your data,

– The right to erasure (if, in your opinion, there are no grounds for your data to be processed, you can demand erasure),

– The right to restrict data processing (you can request that I restrict data processing only to storing the data or carrying out activities agreed with you, if, in your opinion, I have incorrect data or am processing it unfoundedly),

– The right to object to processing (you have the right to object to processing on the basis of a legitimate interest; you should indicate the particular situation that you believe justifies the cessation of processing covered by the objection; I will stop processing your data for these purposes unless I demonstrate that the grounds for processing override your rights or that your data are necessary for me to establish, assert or defend claims),

– The right to data portability (you have the right to receive in a structured, commonly used, machine-readable format the personal data you have provided under the contract or your consent; you can have this data sent directly to another entity),

– The right to withdraw consent to the processing of personal data, if you have previously given such consent,

– The right to lodge a complaint with a supervisory authority (if you find that I am processing your data unlawfully, you can file a complaint about it with the President of the Office for Personal Data Protection or any other competent supervisory authority).

The rules related to the exercise of the rights indicated above are described in detail in Art. 16 – 21 RODO. I encourage you to take a look at these recipes. For my part, I consider it necessary to explain to you that the rights indicated above are not absolute and you will not be entitled to all processing activities of your personal data.

I would like to emphasize that one of the rights indicated above is always available to you – if you consider that there has been a violation of data protection regulations in the processing of your personal data, you have the opportunity to file a complaint with the supervisory authority (President of the Office for Personal Data Protection).

You can also always request access to information about what data I have about you and for what purposes I process it. Just send an email to office@littledragon.com.pl . However, I have made every effort to ensure that the information of interest to you is comprehensively presented in this privacy policy. You can also use the e-mail address provided above if you have any questions about the processing of your personal data.

# 12: Do I use cookies and what are they actually?

My website, like almost all other websites, uses cookies.

Cookies are small text information stored on your terminal device (e.g. computer, tablet, smartphone), which can be read by my ICT system (own cookies) or third-party ICT systems (third-party cookies). Cookies may record and store certain information, which can then be accessed by ICT systems for specific purposes.

Some cookies used are deleted when the browser session ends, i.e. when the browser is closed (so-called session cookies). Other cookies are stored on your terminal device and allow your browser to recognize you the next time you visit the site (persistent cookies).

If you want to learn more about cookies as such, you can read, for example, this material.

# 13: On what basis do I use cookies?

I use cookies on the basis of your consent, except when cookies are necessary for the proper provision of electronic services to you.

Cookies that are not necessary for the proper provision of the electronic service will remain blocked until you consent to the use of cookies. During your first visit to the site, I display a message asking for your consent along with the option to manage cookies, i.e. to decide which cookies you agree to and which you want to block.

Please note that disabling or restricting cookies may prevent you from using some of the features available on the website and cause difficulties in using the website, as well as many other websites that use cookies. For example, if you block the cookies of social networking plug-ins, the buttons, widgets and social features implemented on the site may not be available to you.

# 14: Can you disable cookies?

Yes, you can manage your cookie settings within your web browser. You can block all or selected cookies. You can also block cookies of specific sites. You can also delete previously saved cookies and other site and plug-in data at any time.

Web browsers also offer incognito mode. You can use it if you don’t want information about the pages you visited and the files you downloaded to be stored in your browsing and download history. Cookies created in incognito mode are deleted when all windows of this mode are closed.

There are also browser plug-ins available to control cookies, such as Ghostery . The option to control cookies may also be provided by additional software, in particular antivirus packages, etc.

In addition, there are tools on the Internet that allow you to control certain types of cookies, in particular to collectively manage behavioral advertising settings .

I also give you the ability to control your cookies directly from my website. I have implemented a special mechanism to manage cookies, which allows you to block those cookies that you do not wish.

# 15: For what purposes do I use my own cookies?

Proprietary cookies are used to ensure the proper functioning of the various mechanisms of the site, such as remembering the contents of the shopping cart for a certain period of time after adding selected products to it, proper transmission of forms visible on the site, handling newsletter forms, etc.

Custom cookies also store information about your defined cookie settings made from the cookie management mechanism.

# 16: What third-party cookies are used?

The website operates the following third-party cookies:

Google Analytics,
Google Ads,
Hotjar,
Facebook Custom Audiences,
Facebook Connect and other social plugins,
Disqus,
SoundCloud,
YouTube.

Details of individual third-party cookies are described below.

Google Analytics – details

I use the Google Analytics tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I carry out activities in this regard based on my legitimate interest in creating statistics and analyzing them to optimize the website.

In order to use Google Analytics, a special Google Analytics tracking code is implemented in the code of the site. The tracking code uses cookies from Google LLC regarding the Google Analytics service. You can block the Google Analytics tracking code at any time by installing a browser add-on provided by Google .

Google Analytics automatically collects information about your use of the website. The information gathered in this way is usually transmitted to Google’s servers, which may be located around the world, and stored there.

Due to activated IP address anonymization, your IP address is truncated before being passed on. Only in exceptional cases is the full IP address forwarded to Google’s servers and only shortened there. The anonymized IP address provided by your browser within Google Analytics is generally not combined with other Google data.

I emphasize that within Google Analytics I only have access to Anonymous Information.

Google Analytics and Google Analytics 360 services have been certified to the independent ISO 27001 security standard. ISO 27001 is one of the most widely recognized standards in the world and certifies that the systems that support Google Analytics and Google Analytics 360 meet the relevant requirements.

If you are interested in details related to Google’s use of data from sites and applications that use Google services, I encourage you to read this information .

Hotjar – details

I use the Hotjar tool to better understand your needs and optimize the site for your user experience, which is a legitimate interest. The tool is provided by an external entity, namely. Hotjar Limited, Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julian’s STJ 1000, Malta.

Hotjar records every visitor to the site and enables the playback of a video recording of his or her movement on the site, as well as the generation of a so-called “video”. heat maps. Within the Hotjar tool, I do not have access to information that identifies you because Hotjar does not record the process of filling out forms. The information I have access to within Hotjar is, in particular:

– information about the operating system and web browser you are using,

The subpages you view within the site,
time spent on the site and its subpages,

transitions between different subpages within the site,

The source from which you go to the site,
places you click the mouse.

In order to use Hotjar, a special Hotjar tracking code is implemented in the code of the site. The tracking code uses cookies from Hotjar Limited. The information collected through cookies is stored by Hotjar as part of a pseudonymous user profile. Neither Hotjar nor I use this information to identify you.

You can object to Hotjar’s creation of your user profile, Hotjar’s storage of information about your use of my site, and Hotjar’s use of cookies here: https://www.hotjar.com/legal/compliance/opt-out .

If you are interested in the details related to Hotjar’s data processing, I encourage you to read Hotjar’s privacy policy: https: //www.hotjar.com/legal/policies/privacy .

Google Ads – details

I use remarketing features available within the Google AdWords system operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. I carry out activities in this regard based on my legitimate interest in marketing my own products or services.

When you visit my website, a Google remarketing cookie is automatically left on your device to collect information about your activity on the site. With the information gathered in this way, I am able to display ads to you within the Google network depending on your behavior on the site. For example, if you display a product, the information about it will be noted by a remarketing cookie, making it possible for me to target you with advertising about that product or any other we deem appropriate. This advertisement will be displayed to you within the Google network when you use the Internet, browse other websites, etc.

I emphasize that when using Google Ads, I only use Anonymous Information.

Using Google AdWords, I am only able to define the audiences I want our ads to reach. Based on this, Google decides when and how it will present you with an ad.

Further processing of information only takes place if you have given your consent to Google to link your browsing history to your account and to use information from your Google account to personalize the ads that are displayed on the websites. In this situation, Google will use your data to create and define lists of target groups for remarketing on different devices. To do this, Google temporarily combines the information it collects with other data it has to create target groups.

If you do not want to receive personalized ads, you can manage your ad settings directly on Google’s website: https: //adssettings.google.com/ .

If you are interested in details related to Google’s use of data from sites and applications that use Google services, I encourage you to read this information: https: //policies.google.com/technologies/partner-sites .

Facebook Custom Audiences – details

As part of the Facebook Ads system provided by Facebook Inc., 1601 S. California Ave., Palo Alto, CA 94304, USA, I use the Custom Audience Groups feature to target specific groups of users with targeted advertising messages. I perform activities in this regard based on my legitimate interest in marketing my own products or services.

In order to target you with ads personalized to your behavior on the site, a Facebook Pixel has been implemented within the site, which automatically collects information about your use of the site. The information collected in this way is usually transmitted to Facebook’s servers, which may be located around the world, particularly in the United States of America (USA).

The information collected within the Facebook Pixel is anonymous, i.e. do not allow me to identify you. Depending on your activity on the site, you may reach a certain audience, but I do not in any way identify individual members of these groups.

Facebook’s Pixel can track and note, among other things. The following are your behaviors:

display the contents of a specific page,
The transition to checkout within the store,
Finalize the purchase within the store,
Filling out a specific form, such as signing up for a newsletter.

However, I am informing you that Facebook may combine the information it collects with other information about you collected through your use of Facebook and use for its own purposes, including marketing. Such actions by Facebook are no longer up to me, and you can look for information about them directly in Facebook’s privacy policy . From your Facebook account you can also manage your privacy settings. Here you will find useful information in this regard.

Facebook Connect and other social plugins – details

My website uses plug-ins, buttons and other social media tools, collectively referred to as “plug-ins”, provided by social networks such as Facebook, Instagram, LinkedIN, Twitter.

When displaying a web page containing a plug-in of a particular social network, your browser sends information to the administrator of that social network about your visit. Since the plug-in is a fragment of a social network embedded in a page, the browser sends a request to download the content of a particular social network to the page.

The plug-ins collect certain information about you, such as your user ID, the site you visited, the date and time, and other browser information.

Social network administrators use some of this information to personalize the viewing conditions of my site. For example, when you visit a page with a “Like” button, the social network administrator needs information about who you are to show you which of your friends also like my page.

Information collected by plug-ins may also be used by social network administrators for their own purposes, such as improving their own products, creating user profiles, analyzing and optimizing their own activities, and targeting advertisements. I have no real influence on how the information collected by the plug-ins is then used by the social network administrators. You can look for details in this regard in the regulations and privacy policies of the individual social networks.

Social network plug-ins collect and transmit information to the administrators of these social networks even when you browse my site without being logged into your social network account. But then the browser sends a more limited set of information.

If you have logged in to one of the social networks, then the administrator of the site will be able to directly attribute your visit to my site to your profile on a particular social network.

If you do not want social networks to attribute the data collected during your visit to my website directly to your profile on a particular service, then you must log out of that service before visiting the website. You can also completely prevent plug-ins from loading on the site by using the appropriate extensions for your browser, such as script blocking.

In addition, the use of certain plug-ins may involve the publication of certain information within your social profiles. For example, information about clicks on the “Like” button can be available on your Facebook timeline. Of course, if you share some content on your social media using plugins embedded on my site, that sharing will naturally show up on your profile.

As for the details related to the processing by social network administrators of information collected by plug-ins, in particular the purpose and scope of data collection and its further processing and use by the administrators, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy, you will find everything in the privacy policies of the individual service providers:

Disqus – details

The site uses the Disqus comment system operated by a third-party entity, i.e. Disqus, Inc., 717 Market St San Francisco, CA 94103, USA.

When you view a page containing comments hosted by the Disqus system, Disqus sends one or more cookies to your device that identify your web browser. Disqus cookies are responsible for the proper functioning of the comment system, in particular, they improve the login process. Disqus cookies also collect information on how you use my site (e.g., sub-pages you visit, links you click on) in order to analyze your activity and personalize the content displayed to you within the Disqus system, including advertisements.

If Disqus displays ads, it uses technologies to support this process, such as Google, Polymorph, ServeBid, which can set cookies for personalized marketing, linking ads to subsequent activity, limiting how often you see particular ads.

Remember that you are using the Disqus comment system as its own user, based on the Disqus terms and conditions and privacy policy. Disqus is a stand-alone, independent entity that provides electronic services to you. You can look for details on the Disqus terms of use, including privacy protection, in documents provided directly by Disqus:

regulations: https: //help.disqus.com/en/articles/1717102-terms-of-service#publisher-terms-of-service-agreement,
privacy policy: https: //help.disqus.com/en/articles/1717103-disqus-privacy-policy.

SoundCloud – details

SoundCloud widgets are embedded on my pages allowing you to play recordings available on SoundCloud directly from my pages. SoundCloud is operated by SoundCloud Limited, Rheinsberger Str. 76/77, 10115 Berlin, Germany.

When you visit a site with an embedded SoundCloud widget, SoundCloud receives certain information, including information about the site you visited and your interactions with the widget. SoundCloud and the widget may recognize you, in particular using cookie technology. SoundCloud uses the information collected in this way to ensure that the widget functions properly and securely, to analyze and optimize for SoundCloud’s services, as well as for personalization and advertising purposes.

Remember that by playing recordings available on SoundCloud, you are using the services provided electronically by SoundCloud. SoundCloud is a stand-alone, independent entity that provides electronic services to you. You can look for details on SoundCloud’s policies, including privacy protection, in documents provided directly by SoundCloud:

regulations: https: //soundcloud.com/terms-of-use,
privacy policy: https: //soundcloud.com/pages/privacy,
cookie policy: https: //soundcloud.com/pages/cookies.

YouTube – details

YouTube widgets are embedded on my pages allowing you to play recordings available on YouTube directly from my pages. YouTube is operated by Google LLC.

Videos are embedded on the page in privacy mode. Based on information provided by YouTube, this means that no cookies are stored on your device, nor does Google collect any information about you until you play the video.

When you play a video, YouTube saves cookies on your device and receives information that you played the video from a specific website, even if you do not have a Google account or are not logged in at the time. If you have logged into a Google account, this service provider will be able to directly attribute a visit to my site to your account. The purpose and scope of data collection and its further processing and use by Google, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy are described in Google’s privacy policy.

If you do not want Google to attribute the data collected during video playback directly to your profile, you must log out of your account before playing the video. You can also completely prevent plug-ins from loading on the site by using the appropriate extensions for your browser, such as script blocking.

The information collected through cookies related to YouTube videos embedded on my pages is used by Google to ensure the correct and safe functioning of the widget, analysis and optimization for the services provided by YouTube, as well as for personalization and advertising purposes.

Remember that by playing the recordings available on YouTube, you are using services provided electronically by Google LLC. Google LLC is a stand-alone, independent entity that provides electronic services to you. You can look for details on YouTube’s policies, including privacy protection, in documents provided directly by YouTube:

regulations: https://www.youtube.com/t/terms ,
privacy policy: https://policies.google.com/privacy

# 17: Do I track your behavior taken within my website?

Yes, I use Google Analytics, Google AdWords, Hotjar and Facebook Custom Audiences tools that involve collecting information about your activities on my site. These tools were described in detail under the question on third-party cookies, so we will not repeat this information here as well.

# 18: Am I targeting you with targeted ads?

Yes, I use Facebook Ads and Google Ads, where I can target ads to specific groups defined based on various criteria such as age, gender, interests, occupation, job, activities previously undertaken on our site. These tools were described in detail under the question on third-party cookies, so I am not repeating that information here either.

# 19: How can you manage your privacy?

The answer to this question is found in many places in this privacy policy when describing specific tools, behavioral advertising, cookie consent, etc. Nevertheless, I have once again gathered this information in one place for your convenience. Below you will find a list of options for managing your privacy.

cookie settings within your web browser,

– Browser plug-ins that support cookie management, e.g. Ghostery,

Additional software that manages cookies,

incognito mode in the web browser,
behavioral advertising settings, such as youronlinechoices.com,

A mechanism for managing cookies from within my site,

Google Analytics Opt-out: https://tools.google.com/dlpage/gaoptout ,
Google Ads Settings: https://adssettings.google.com/ ,
Facebook Ads Settings: https://www.facebook.com/ads/settings ,
HotJar Opt-out: https://www.hotjar.com/legal/compliance/opt-out

# 20: What are server logs?

Using the site involves sending requests to the server where the site is stored. Each request to the server is recorded in the server logs.

Logs include, among others. Your IP address, the date and time of the server, information about the web browser and the operating system you are using. Logs are saved and stored on the server.

The data stored in the server logs are not associated with specific people using the site and are not used to identify you.

Server logs are only auxiliary material for the administration of the site, and their contents are not disclosed to anyone except those authorized to administer the server.

# 21: Is there anything else you should know about?

As you can see, the topics of processing personal data, using cookies and managing privacy in general are quite complicated. I have made every effort to ensure that this document provides you with the most far-reaching knowledge on the issues that are important to you. If anything is unclear to you, you would like to learn more or just talk about your privacy, please email office@littledragon.com.pl.

# 22: Is this privacy policy subject to change?

Yes, I may modify this privacy policy, in particular due to technological changes and changes in the law. If you are a registered user, you will receive a message about any change in the privacy policy. In addition, all archived versions of the privacy policy are linked below.

Cookie	Duration	Description
cookielawinfo-checkbox-analytics		This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Analytics".
cookielawinfo-checkbox-functional		The cookie is set by GDPR cookie consent to record the user consent for the cookies in the category "Functional".
cookielawinfo-checkbox-necessary		This cookie is set by GDPR Cookie Consent plugin. The cookies is used to store the user consent for the cookies in the category "Necessary".
cookielawinfo-checkbox-others		This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Other.
cookielawinfo-checkbox-performance		This cookie is set by GDPR Cookie Consent plugin. The cookie is used to store the user consent for the cookies in the category "Performance".
viewed_cookie_policy		The cookie is set by the GDPR Cookie Consent plugin and is used to store whether or not a user has consented to the use of cookies. It does not store any personal data.