Privacy Policy


The SW Research Privacy Policy describes the principles governing our processing of information about you, including personal data and cookies.

The basic legally required information regarding the processing of personal data and your associated rights is set out in the Information Clause. To read it, click here. In this policy, we provide additional explanations on these matters as well as information relating to our website's use of cookies.
 

1. General information

This policy applies to the website operating at the URL: swresearch.pl

The operator of the website and the Controller of personal data is: SW Research sp. z o.o., Jarosława Dąbrowskiego 64a, 02-561 Warsaw

Operator's contact email address: sw@swresearch.pl

The Operator is the Controller of your personal data with respect to data you voluntarily provide on the website.

The website uses personal data for the following purposes:

1) Managing the newsletter

2) Handling enquiries submitted via the contact form

3) Delivering ordered services

4) Presenting offers or information

5) The website collects information about users and their behaviour in the following ways:

  • Through data voluntarily entered in forms, which is then stored in the Operator's systems.

  • Through the storage of cookie files on end-user devices.

6) Creating lookalike audiences using marketing tools such as Meta Platforms and Google, subject to the user's consent.

7) Our website uses remarketing technologies that enable us to display ads tailored to your interests on other websites. This is based on cookies and similar technologies that collect information about your activity on our site, such as products viewed or pages visited. This data is then used to personalise ads within the advertising networks of our partners, including Google Ads, Meta (Facebook) and other advertising platforms. Remarketing works by analysing your activity on our site and assigning you a unique identifier via cookies. As a result, after leaving our site you may see our ads on other websites, in mobile apps or on social media. This process does not allow us to identify you personally – the data collected is anonymous and is used solely to improve the relevance of advertising content.

 

 

2. Selected data protection methods used by the Operator

Login pages and personal data entry points are protected at the transmission layer (SSL certificate). As a result, personal data and login credentials entered on the site are encrypted on the user's device and can only be read by the target server.

Personal data stored in the database is encrypted in such a way that only the Operator, who holds the key, can read it. This protects the data in the event of the database being stolen from the server.

User passwords are stored in hashed form. The hashing function is one-way – it cannot be reversed, which represents the current industry standard for storing user passwords.

The Operator periodically changes its administrative passwords.

To protect data, the Operator performs regular backups.

An important element of data protection is the regular updating of all software used by the Operator to process personal data, which in particular means keeping all software components up to date.

 3. Hosting

The website is hosted (technically maintained) on the servers of: Amazon Web Services

 4. Your rights and additional information on how data is used

In certain situations, the Controller is entitled to share your personal data with other recipients where this is necessary to perform a contract concluded with you or to fulfil obligations incumbent on the Controller.

This applies to the following categories of recipients:

  • authorised employees and associates who use the data to fulfil the purposes of the website

  • companies providing marketing services on behalf of the Controller

Data retention period

Your personal data is processed by the Controller only for as long as is necessary to carry out the activities associated with it, as defined by separate regulations (e.g. accounting rules). With regard to marketing data, data will not be processed for longer than 3 years.

You have the right to request from the Controller:

  • access to your personal data,

  • rectification of your personal data,

  • erasure of your personal data,

  • restriction of processing,

  • and data portability.

 You have the right to object, as referred to in point 3.3(c), to the processing of personal data for the purposes of the legitimate interests pursued by the Controller, including profiling. However, this right of objection may not be exercised where there are compelling legitimate grounds for the processing that override your interests, rights and freedoms, in particular the establishment, exercise or defence of legal claims.

You have the right to lodge a complaint about the Controller's activities with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.

Providing personal data is voluntary, but necessary to use the website.

You may be subject to automated decision-making, including profiling, for the purpose of providing services under a concluded contract and for the purpose of direct marketing carried out by the Controller.

Personal data is not transferred to third countries within the meaning of data protection regulations. This means we do not send it outside the European Union.

5. Information in forms

The website collects information voluntarily provided by the user, including personal data where supplied.

The website may record information about connection parameters (timestamp, IP address).

In some cases, the website may save information that facilitates linking form data with the email address of the user completing the form. In such cases, the user's email address appears within the URL of the page containing the form.

Data provided in a form is processed for the purpose arising from the function of that specific form – for example, to handle a service request, for commercial contact purposes, to register for services, etc. The context and description of each form clearly indicate its purpose.

 6. Operator logs

Information about user behaviour on the website may be subject to logging. This data is used for website administration purposes.

 7. Key marketing techniques

The Operator uses statistical traffic analysis via Google Analytics (Google Inc., headquartered in the USA). The Operator does not share personal data with the provider of this service – only anonymised information is transmitted. The service relies on the use of cookies on the user's end device. Users can view and edit information derived from cookies collected by the Google advertising network using the following tool: https://www.google.com/ads/preferences/ 

The Operator uses remarketing techniques to tailor advertising messages to user behaviour on the site. While this may give the impression that the user's personal data is being used to track them, in practice no personal data is transferred from the Operator to advertising operators. The technical prerequisite for such activities is that cookie support is enabled.

The Operator uses a solution that analyses user behaviour by creating heat maps and recording activity on the site. This information is anonymised before being sent to the service provider, so the provider does not know which individual it relates to. In particular, passwords entered and other personal data are not recorded.

The Operator uses a solution that automates certain website interactions with users – for example, it may send an email to a user after they visit a specific page, provided the user has consented to receiving commercial correspondence from the Operator.

 8. Cookie information

This website uses cookies.

Cookies are pieces of data, in particular text files, that are stored on the end device of a website user and are intended for use with website pages. Cookies typically contain the name of the website they originate from, the duration of their storage on the end device, and a unique identifier.

The entity placing cookies on the end device of a website user and accessing them is the website Operator.

Cookies are used for the following purposes:

1) maintaining the user's session on the website (after logging in), so that the user does not need to re-enter their login and password on every page of the website;

2) fulfilling the purposes described above in the section "Key marketing techniques";

The website uses two main types of cookies: "session" cookies and "persistent" cookies. Session cookies are temporary files stored on the user's end device until they log out, leave the website or close the browser. Persistent cookies are stored on the user's end device for the period specified in the cookie parameters or until they are deleted by the user.

Web browsing software (internet browsers) typically allows cookies to be stored on the user's end device by default. Website users can change their settings in this regard. Internet browsers also allow cookies to be deleted, and automatic blocking of cookies is possible. Detailed information on this topic can be found in the browser's help section or documentation.

Restricting the use of cookies may affect some of the functionality available on the website.

Cookies placed on the end device of a website user may also be used by entities cooperating with the website Operator, in particular the following companies: Google LLC, Meta Platforms Inc. (Facebook), X Corp. (formerly Twitter)

9. Personalised ads

If the user gives their consent, we may use the phone number or email address they have provided ("Contact Data") to display personalised ads on the Facebook platform, operated by Meta Platforms, Inc., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("FCB").

Facebook offers the ability to create audience groups using the "Custom Audiences" feature. As part of this process, the Contact Data provided will be encrypted and transmitted to Facebook. The processing of information takes place in accordance with FCB's data policy. Further information about Facebook's advertising policies can be found at: https://www.facebook.com/policy.php.

The purpose of this process is to precisely define the audiences for our ads, so that they reach users who are genuinely interested in our services and content. Based on these audiences, "lookalike audiences" may also be created – groups of users with similar characteristics that enable us to target people resembling our existing audience.

10. How to manage your Facebook ad settings

Users can adjust their Facebook ad preferences by visiting the ad settings page at: https://www.facebook.com/settings?tab=ads

There you can change the settings for ads based on your activity and, if desired, disable them by selecting the "Not Allowed" option. These changes apply across all devices, including desktop computers and mobile devices.

If the user gives their consent, we may use the email address or phone number they have provided ("Contact Data") to display personalised ads within Google Ads, operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google enables the creation of custom audience groups (Customer Match), which allow ads to be targeted at people who have previously interacted with our website or services. For this purpose, the Contact Data provided will be encrypted and transmitted to Google. This process is carried out in accordance with Google's privacy policy and its advertising data use policies. More information about Google's advertising policies can be found here:
https://policies.google.com/technologies/ads

This data enables us to better match ads to users who may be interested in our products or services. Based on these audience groups, Google may also create "Similar Audiences", which allow us to reach new users with characteristics similar to those of our existing customers.

11. How to manage your Google ad settings

You can adjust your Google ad preferences and limit ad personalisation via the Google Ads Settings page: https://adssettings.google.com

On this page you can enable or disable personalised ads and manage the data used to tailor advertising content across different devices, including computers, smartphones and tablets.

12. Managing cookies – how to give and withdraw consent in practice

If you do not wish to receive cookies, you can change your browser settings. Please note that disabling cookies that are essential for authentication, security and the maintenance of user preferences may make it difficult, or in extreme cases impossible, to use websites.

To manage your cookie settings, select your internet browser from the list below and follow the instructions:

Edge

Chrome

Safari

Firefox

Opera

 

Mobile devices:

Android

Safari (iOS)