Skip to content This Privacy Policy is for information purposes and constitutes fulfillment of the information obligations imposed on the controller of personal data by the GDPR, i.e. Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Every person who uses H2Home or contacts the Service Provider should read this Privacy Policy. The Privacy Policy sets out the rules for the processing of personal data of the above persons as well as the rules governing the use of Cookies.
1.1. The controller of personal data is H2Home Sp. z o.o.(Limited) with its registered office in Warsaw (00-867), Al. Jana Pawła II 27, entered in the register of entrepreneurs of the National Court Register (KRS) under number 0001029444, NIP (tax ID): 5273050703, with share capital of PLN 5,000.00.
1.2. Any data subject may contact the controller by sending an email to: rodo@h2home.pl or by sending a letter to the address indicated in sec. 1.1 above.
2.1. The purpose and scope of processed personal data are determined by the scope of the consents and the data provided by the data subject in an email message, contact form, or otherwise. The personal data processed by the Service Provider may concern, in particular: first and last name, email address, telephone number, IP address of the computer, image (likeness), social media identifiers and usernames. The detailed scope of personal data processed for individual purposes can be found in the table below.
2.2. The scope, purposes, and legal bases for processing personal data are presented in the table below.
| Purpose of processing | Scope of data | Legal basis for processing | Data retention period |
| Ensuring access to H2Home | IP address | Article 6(1)(b) GDPR – processing is necessary for the performance of the Agreement or to take steps at the request of the data subject prior to entering into the Agreement. | For a period appropriate to demonstrate proper performance of the Services (corresponding to the statute of limitations for claims). |
| Conclusion and performance of the Agreement | First name, last name, email address, address, NIP (tax ID), bank account number, other data concerning the conducted business activity. | Article 6(1)(b) GDPR – processing is necessary for the performance of the Agreement or to take steps at the request of the data subject prior to entering into the Agreement. | For a period appropriate to demonstrate proper performance of the Services (corresponding to the statute of limitations for claims). |
| Cooperation with ambassadors | First name, last name, email address, address, NIP (tax ID), company, data regarding the conducted business activity, bank account number, other data voluntarily provided by the data subject. | Article 6(1)(b) GDPR – processing is necessary for the performance of the Agreement or to take steps at the request of the data subject prior to entering into the Agreement. | For a period appropriate to demonstrate proper performance of the Services (corresponding to the statute of limitations for claims). |
| Sending the Newsletter | First name, last name, email address. | Article 6(1)(a) GDPR – consent of the data subject to receive the Newsletter. | Until withdrawal of consent by the data subject or until the data lose usefulness. |
| Contact via the contact form | Email address, other data voluntarily provided in the form content or in an email message. | Article 6(1)(f) GDPR – the Service Provider’s legitimate interest as controller consisting in conducting correspondence and conversations with persons who contacted the Service Provider. | 1 year from the date the correspondence ends; until the data subject lodges an objection. |
| Defense against claims and pursuing claims | Email address, first and last name, other data voluntarily provided by the data subject. | Article 6(1)(f) GDPR – the controller’s legitimate interest consisting in defending against claims and pursuing claims. | Until the data lose usefulness due to the lapse of limitation periods (the limitation period is usually 2 years). |
| Running social media channels on Facebook, Instagram, LinkedIn | Social media platform identifier, username, other personal data provided as part of the user’s profile, e.g., first and last name. | Article 6(1)(f) GDPR – the Service Provider’s legitimate interest as controller consisting in contacting and displaying content to persons who interacted with the Service Provider’s accounts on particular social media platforms. | Until the data lose usefulness (deletion of the Service Provider’s account on a given platform); the data subject objects; or all interactions between the data subject and the Service Provider cease on a given platform. |
| Statistical purposes or H2Home’s internal needs | Demographic data such as town/city, age, gender, etc. | Article 6(1)(f) GDPR – the Service Provider’s legitimate interest as controller consisting in keeping H2Home statistics and optimizing the platform. | Until the data subject objects or until the data lose usefulness. |
| Issuing accounting documents and keeping accounting books | First and last name, service address, bank account number, data concerning the conducted business activity. | Article 6(1)(c) GDPR – compliance with legal obligations. | For the period during which accounting documents must be stored under applicable law. |
| Handling reports of illegal content | First name, last name, email address, other data voluntarily provided by the person reporting illegal content. | Article 6(1)(f) GDPR – the Service Provider’s legitimate interest as controller consisting in handling reports of illegal content. | Until the report is fully verified. |
| Increasing website performance | Cookies indicated in the banner. | Article 6(1)(a) GDPR – consent of the data subject to the use of Cookies for performance purposes. | Until withdrawal of consent by the data subject or until the data lose usefulness. |
| Remembering user choices, ensuring better, personalized use of the website | Cookies indicated in the banner. | Article 6(1)(a) GDPR – consent of the data subject to the use of Cookies for the purpose of tailoring the platform to the user’s needs. | Until withdrawal of consent by the data subject or until the data lose usefulness. |
| Analysis of website traffic and analysis of user behavior | Cookies indicated in the banner. | Article 6(1)(a) GDPR – consent of the data subject to the use of Cookies for analytical purposes (activities that do not result in identification of the user). | Until withdrawal of consent by the data subject or until the data lose usefulness. |
| Displaying personalized advertising content by the Service Provider and its partners | Cookies indicated in the banner. | Article 6(1)(a) GDPR – consent of the data subject to the use of Cookies for advertising purposes in the scope of personalized ads (activities that do not result in identification of the user). | Until withdrawal of consent by the data subject or until the data lose usefulness. |
2.3. The Service Provider does not process personal data for the purpose of automated decision-making. Visitors to H2Home may be profiled in order to display personalized marketing messages better tailored to their preferences (if, within the website’s functionality, they have consented to the use of appropriate Cookies). Any data subject may object to such activities by contacting the controller using the details indicated in sections 1.1 and 1.2.
2.4. Your personal data will not be transferred to third countries (outside the European Economic Area).
2.5. To the extent that a Client (as defined in the Terms and Conditions) uses H2Home in connection with their cooperation with a Designer, the controller of their data is not only the Service Provider but, to a certain extent, also the Designer, while the Service Provider acts as a processor within the meaning of the GDPR. In such a case, it is the Designer’s responsibility to fulfill the information obligation towards the Client (Article 13 GDPR) with respect to the processing operations that he or she performs as a controller of personal data.
3.1. The Service Provider may entrust the processing of personal data to third parties in order to maintain H2Home’s functionality and provide the Services. In such a case, the recipients of your data may be: the hosting provider for H2Home and the email inbox, the company providing technical support for the Services (software company), and payment operators.
3.2. Personal data collected by the Service Provider may also be disclosed to: competent public authorities at their request on the basis of relevant legal provisions, or to other persons and entities in cases provided for by law.
3.3. Each entity to which the Service Provider entrusts the processing of your personal data under a data processing agreement (the “Processing Agreement”) guarantees an appropriate level of security and confidentiality of personal data processing. A processor processing your personal data under a Processing Agreement may process your personal data through another entity only with the prior consent of the Service Provider.
3.4. The disclosure of personal data to entities not authorized under this Privacy Policy may take place only with your prior consent.
4.1. You have the right to:
a) have your personal data collected about you deleted from the system belonging to the Service Provider and from the databases of entities with which the Service Provider cooperates or has cooperated,
b) restrict the processing of your personal data,
c) data portability of personal data collected by the Service Provider about you, including the right to receive them in a structured form,
d) request from the Service Provider access to your personal data and to rectify them,
e) object to the processing of your personal data,
f) withdraw your consent given to the Service Provider at any time without affecting the lawfulness of processing based on consent before its withdrawal,
g) lodge a complaint against the Service Provider with the supervisory authority (the President of the Personal Data Protection Office).
4.2. To exercise your rights, please contact us using the details indicated in sec. 1.2 of this Privacy Policy.
5.1. H2Home may store HTTP requests; therefore, some information may be saved in the server log files, including the IP address of the computer from which the request came, the name of your station—identification carried out by the HTTP protocol (where possible), the system date and time of registration in H2Home and of the arrival of the request, the number of bytes sent by the server, the URL address of the page you previously visited if you entered via a link, information about your browser, information about errors that occurred while processing the HTTP transaction. Logs may be collected to ensure proper administration of H2Home. Only persons authorized to administer the IT system have access to this information. Log files may be analyzed in order to compile statistics of traffic on the H2Home website and errors occurring therein. Summaries of such information do not identify you.
6.1. The Service Provider applies technical and organizational measures ensuring the protection of processed personal data appropriate to the risks and the category of data protected, and in particular secures data technically and organizationally against disclosure to unauthorized persons, being taken by an unauthorized person, processing in violation of the law, and change, loss, damage or destruction; among others, SSL certificates are used. The set of your collected personal data is stored on a secured server, and the data are also protected by the Service Provider’s internal procedures on personal data processing and information security policy.
6.2. The Service Provider has also implemented appropriate technical and organizational measures, such as pseudonymization, designed to effectively implement the principles of data protection, such as data minimization, and to provide the processing with necessary safeguards so as to meet the requirements of the GDPR and protect the rights of data subjects.
6.3. At the same time, the Service Provider indicates that the use of the Internet and services provided electronically may pose a risk of malware entering your ICT system and device, as well as unauthorized access by third parties to your data, including personal data. To minimize these risks, you should use appropriate technical safeguards, e.g., up-to-date antivirus programs or programs protecting your identity on the Internet. To obtain detailed and professional information on how to stay safe on the Internet, the Service Provider recommends that you seek it from entities specializing in such IT services.
7.1. For the proper operation of H2Home, the Service Provider uses Cookie technology. Cookies are packets of information saved on your device via H2Home, usually containing information consistent with the purpose of the given file through which you use H2Home—these are typically: the H2Home address, date of placement, expiry date, unique number, and additional information consistent with the purpose of the given file.
7.2. The website uses two types of Cookies: (a) session Cookies, which are permanently deleted when your browser session ends; (b) persistent Cookies, which remain on your device after the browser session ends until they are deleted.
7.3. On the basis of both session and persistent Cookies, it is not possible to determine your identity. The Cookie mechanism does not allow any personal data to be retrieved.
7.4. H2Home Cookies are safe for your device; in particular, they do not enable viruses or other software to enter the device.
7.5. Files generated directly by the Service Provider cannot be read by other services. External Cookies (i.e., Cookies placed by entities cooperating with the Service Provider) may be read by an external server.
7.6. You can change your Cookie settings yourself at any time by specifying the conditions under which they are stored, through your web browser settings or by configuring the service.
7.7. In particular, you can disable the saving of Cookies on your device in accordance with the browser manufacturer’s instructions; however, this may cause some or all functions of H2Home to be unavailable.
7.8. You can also delete Cookies saved on your device yourself at any time, in accordance with the browser manufacturer’s instructions.
7.9. The Service Provider uses its own Cookies for the following purposes: authenticating you in H2Home and maintaining your session; configuring H2Home and adjusting the content of the pages to preferences or your behavior; analyzing and researching viewership, the number of clicks and the path of movement on the site in order to improve the look and organization of content on the site, time spent on the site, and the number and frequency of visitors to H2Home.
7.10. The Service Provider uses External Cookies for the following purposes: creating (anonymous) statistics to optimize the usability of H2Home and displaying personalized marketing messages via tools such as Google Analytics, Meta Pixel, Clarity, Sentry.
7.11. Detailed information on handling Cookies is available in the settings of the web browser you use.
7.12. Within the banner provided on H2Home, the User may consent to particular types of Cookies. Within this banner the User may also learn about the types of Cookies used on H2Home, as well as verify which specific Cookies are used and who their provider is.
8.1. This Privacy Policy has been in effect since 01/07/2024.
Optimized by Seraphinite Accelerator