1. General Information This policy applies to the website operating at the URL: truetrade.pl The website operator and the data controller is: True Trade Sp. z o.o., Długa 29, 00-238 Warsaw, Poland Operator's contact email address: mc@truetrade.pl The Operator is the Data Controller of your personal data in relation to the data voluntarily provided on the Website. The Website uses personal data for the following purposes:

• Handling inquiries via the contact form

• Presentation of offers or information The Website gathers information about users and their behavior in the following ways:

• Through voluntarily entered data in forms, which are stored in the Operator's systems.

• Through cookie files (so-called "cookies") stored on users' end devices.
   

2. Selected Data Protection Methods Used by the Operator Login and personal data entry areas are protected at the transmission layer (SSL certificate). This ensures that personal data and login credentials entered on the site are encrypted on the user’s device and can only be read on the target server. A crucial element of data protection is the regular updating of all software used by the Operator for processing personal data, which particularly includes the regular updates of software components.
 

3. Hosting The Website is hosted (technically maintained) on the servers of another company. The hosting company, to ensure technical reliability, keeps logs at the server level. The logs may include:

• Resources specified by a URL identifier (addresses of requested resources – pages, files),

• Time of request arrival,

• Time of response sent,

• Client station name – identification carried out by the HTTP protocol,

• Information about errors that occurred during HTTP transactions,

• URL address of the previously visited page (referer link) – if access to the Website occurred through a link,

• Information about the user’s browser,

• Information about the IP address,

• Diagnostic information related to self-ordering services through registration forms on the site,

• Information related to email correspondence directed to and sent by the Operator.
   

4. Your Rights and Additional Information on Data Usage In certain situations, the Administrator has the right to transfer your personal data to other recipients if it is necessary for the execution of a contract concluded with you or to fulfill the Administrator’s obligations. This applies to the following groups of recipients:

• Hosting company on an entrusted data processing basis,

• Authorized employees and collaborators who use the data to fulfill the purpose of the website’s operation. Your personal data processed by the Administrator will not be stored longer than necessary for the activities associated with them as specified by separate legal provisions (e.g., accounting regulations). Concerning marketing data, they will not be processed for more than 3 years. You have the right to request from the Administrator:

• Access to your personal data,

• Correction,

• Deletion,

• Restriction of processing,

• Data portability. You have the right to object to the processing specified in section 3.2 regarding the processing of personal data for legally justified interests pursued by the Administrator, including profiling. However, your objection cannot be executed if there are compelling legally justified grounds for processing that override your interests, rights, and freedoms, particularly in establishing, pursuing, or defending claims. You have the right to lodge a complaint regarding the Administrator’s actions with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw. Providing personal data is voluntary but necessary for the Website’s operation. Automated decision-making, including profiling, may be performed concerning you to provide services under a concluded agreement and for the Administrator’s direct marketing purposes. Personal data are not transferred to third countries within the meaning of data protection regulations. This means we do not send them outside the European Union.
   

5. Information in Forms The Website collects information voluntarily provided by users, including personal data if provided. The Website may store connection parameters (time stamps, IP address). In some cases, the Website may store information facilitating the association of form data with the user’s email address completing the form. In such cases, the user’s email address appears in the URL of the page containing the form. Data provided in the form are processed for purposes resulting from the function of a particular form, e.g., to handle a service request or business contact, register services, etc. Each time, the context and description of the form clearly inform what it is used for.
 

6. Administrator Logs Information about user behavior on the Website may be subject to logging. These data are used for website administration purposes.
 

7. Essential Marketing Techniques The Operator applies statistical traffic analysis on the site via Google Analytics (Google Inc., based in the USA). The Operator does not provide personal data to the operator of this service, only anonymized information. The service is based on cookies stored on the user’s end device. Users can view and edit information derived from cookies using this tool: https://www.google.com/ads/preferences/ The Operator uses a solution that tracks user behavior by creating heat maps and recording website activity. These details are anonymized before being sent to the service operator, ensuring that they do not pertain to any specific individual. Passwords and other personal data are not recorded.
 

8. Cookie Information The Website uses cookies. Cookies are IT data, particularly text files, stored on the user’s end device and intended for use on the Website. Cookies typically contain the name of the website from which they originate, the time they are stored on the end device, and a unique number. The entity placing cookies on the user’s end device and accessing them is the Website operator. Cookies are used for the following purposes:

• Maintaining the Website user’s session (after logging in), so the user does not have to re-enter login credentials on each subpage.

• Achieving the objectives specified above in the section "Essential Marketing Techniques." The Website uses two primary types of cookies: "session" (session cookies) and "persistent" (persistent cookies). "Session" cookies are temporary files stored on the user’s device until logging out, leaving the site, or turning off the web browser. "Persistent" cookies remain stored on the user’s device for the time specified in the cookie parameters or until the user deletes them. Web browsers typically allow cookies to be stored on the user’s device by default. Users can change these settings. The browser allows the deletion of cookies. It is also possible to block cookies automatically. Detailed information on this is available in the browser’s help section or documentation. Restrictions on the use of cookies may affect some functionalities available on the Website. Cookies placed on the user’s end device may also be used by entities cooperating with the Website operator, including companies: Google (Google Inc., based in the USA), Facebook (Facebook Inc., based in the USA), Twitter (Twitter Inc., based in the USA).
   

9. Managing Cookies – How to Express and Withdraw Consent in Practice? If a user does not want to receive cookies, they can change their browser settings. Disabling cookies essential for authentication, security, and user preference maintenance may hinder or, in extreme cases, prevent the use of the Website. To manage cookie settings, select your web browser from the list below and follow the instructions:

• Edge

• Internet Explorer

• Chrome

• Safari

• Firefox

• Opera Mobile devices:

• Android

• Safari (iOS)

• Windows Phone