**Privacy and Cookies Policy**
The administrator of www.vanonsite.com is 1WAYEUROPE OÜ, located at Lõõtsa 5, 11415 Tallinn, Estonia. You can contact us via email at l.piotrowski@1wayeurope.com or by phone at +48733589539.
**I. The purpose of collecting your data and how we process it.**
- **Contact Form.** You have the option to contact us by sending a query through the contact form available on our site. In doing so, you provide us with your name, email address, and other information in the message content, which may contain personal data. Providing this data is voluntary but necessary to contact us via the form. The data you provide is processed for the purposes of:
– responding to your inquiry, i.e., taking action at the request of the person the data concerns (Article 6(1)(b) GDPR).
– archiving, which is our legitimate interest as the Administrator (Article 6(1)(f) GDPR).
– potential claim pursuit or defense, which is our legitimate interest as the Administrator (Article 6(1)(f) GDPR), aimed at protecting our rights.
You have the right to access the correspondence history (if it was archived) and demand its deletion unless the archiving is justified due to overriding interests of the Administrator, e.g., defense against potential claims from your side. Personal data will be processed until the purpose for which they were collected ceases or, in the case of data whose processing requires your consent, until the consent is withdrawn.
- **Chat Function Communication.** When you use the chat function to communicate with us, we collect message contents and information that you provide us through this functionality, including your name, email address, and phone number. The data you provide is processed for the purposes of:
– responding to your inquiry. The legal basis for processing these data is to take action at the request of the person the data concerns (Article 6(1)(b) GDPR).
– potential claim pursuit or defense, which is our legitimate interest as the Administrator (Article 6(1)(f) GDPR), aimed at protecting our rights.
– archiving correspondence for internal needs after contact has ended, which occurs on the basis of the legitimate interest of the administrator (Article 6(1)(f) GDPR).
Personal data are processed for the purpose of contacting you and will be stored for the duration of the correspondence archiving. You have the right to access the correspondence history (if it was archived) and demand its deletion unless the archiving is justified due to overriding interests of the Administrator, e.g., defense against potential claims from your side.
**II. Cookies Policy**
Our website uses cookies to ensure the best experience with its use. Cookies are small text information stored on your terminal device (e.g., computer, tablet, smartphone) that can be read by our IT system. Cookies allow us to:
– ensure the proper functioning of the site as you expect,
– improve the speed and security of using the site,
– improve the features available to you on the site,
– use analytical tools,
– use marketing tools,
– use the commenting system,
– display videos from services such as YouTube and Vimeo on the pages,
– provide social media features.
Upon your first visit to our site, information about the use of cookies is displayed. Accepting and closing this information means that you consent to the use of cookies according to the provisions of this privacy policy. You can always withdraw consent by deleting cookies or changing the cookies settings in your browser. However, disabling cookies may cause difficulties in using the site, as well as many other websites that use cookies.
**Types of Cookies and Tracking Technologies on Our Site**
- **Log Files.** Each time you visit our site, the system automatically collects information and data from your computer. Your data in log files are stored to ensure the functionality of services, optimize the service, and ensure the security of IT systems. The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR). Your data are stored on the server until they are no longer needed to achieve the purpose for which they were collected. If data are collected to provide the service, this happens at the end of the session. Data collected in logs are essential for the functioning of the service, hence the user cannot object to their processing.
- **Google Analytics.** To analyze how our service is used by users, we have installed a tool that allows us to create activity reports on the site, measure the effectiveness of content, and provide other services related to the use of the service and the internet. Our site uses the „Google Analytics” service provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). The service uses cookies: text files stored on the user’s
device. The information collected by cookies is usually sent to a Google server and stored there. We use anonymization, which involves shortening IP addresses, making it impossible to associate the IP address with the user. The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
Data will be retained by Google for a period of 26 months; due to the IP address shortening, no personal data will be stored. You have the option to block the storage of cookies on your device by selecting the appropriate settings in the browser. You can also use a browser plugin to block the transmission of information to Google. Link to the plugin: https://tools.google.com/dlpage/gaoptout.
- **Facebook Pixel.** For analysis, optimization, and improvement of our services, we use the tracking option called „Facebook Pixel”, provided by the social media service Facebook operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Facebook Pixel is a piece of code placed in our service. Thanks to this functionality, we can understand the effectiveness of advertising on Facebook by information about users who were redirected to our services after clicking on an advertisement on Facebook. During a user’s visit to our service, the Facebook Pixel function establishes a direct connection with the Facebook servers.
Further information on the collection and use of data by Facebook, as well as the rights and possibilities of the user in terms of privacy protection, can be found in the Facebook data protection policy at https://www.facebook.com/about/privacy/update. Specific information and details about the Facebook Pixel function and how it works are available in the Facebook help section at https://www.facebook.com/business/help/651294705016616. This function can be disabled as shown on the page https://www.facebook.com/settings?tab=ads. To do this, you need to log in to Facebook.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Inspectlet.** For analysis, optimization, and improvement of our services, we use the tracking option called „Inspectlet”, provided by the tool operated by www.inspectlet.com. Inspectlet is a piece of code placed in our service. Thanks to this functionality, we can understand the effectiveness of our site’s design through analyzing user behaviors. Inspectlet uses cookies to track session information. These cookies are needed to accurately understand how users navigate the site. The exact mode of operation and privacy policy can be found at: https://www.inspectlet.com/legal.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Google DoubleClick.** To display tailored and relevant ads to you, we have installed the DoubleClick service using cookies, provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland („Google”)). Data are collected based on an identification number (ID) assigned to your browser, which allows checking which ads were displayed in your browser and with which ads there was interaction. You can block the service of cookies by selecting the appropriate settings in the browser. However, remember that this may limit you from fully using the service. You can also opt out of collecting and classifying interest-based information by disabling them on the DoubleClick cookie settings page https://support.google.com/ads/answer/7395996
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Google Maps.** Our site uses maps provided by Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). When you visit our site, which contains a map while being logged into a Google account, Google may associate your browsing behavior on our site with other information. In this case, Google’s data protection policy applies: https://policies.google.com/privacy?hl=de&gl=de.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Facebook Button.** Our site uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is downloaded when you access our profile using the appropriate button. When you visit our site while being logged into a Facebook account, Facebook may associate your browsing behavior on our site with other information. In this case, Facebook’s data protection policy applies: https://www.facebook.com/privacy/explanation.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Instagram Button.** Our site uses a button provided by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Content from Facebook servers is downloaded when you access our Instagram profile
using the appropriate button. When you visit our site while being logged into an Instagram account, Facebook may associate your browsing behavior on our site with other information. In this case, Facebook’s data protection policy applies: https://www.facebook.com/privacy/explanation.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **LinkedIn Button.** Our site uses a button provided by LinkedIn Corp., 2029 Stierlin Court, Mountain View, CA 94043, USA. Content from LinkedIn servers is downloaded when you access our profile using the appropriate button. When you visit our site while being logged into a LinkedIn account, LinkedIn may associate your browsing behavior on our site with other information. In this case, LinkedIn’s data protection policy applies: https://www.linkedin.com/legal/privacy-policy.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Pinterest Button.** Our site uses a button provided by Pinterest, Inc., 808 Brannan St, San Francisco, CA 94103, USA. Content from Pinterest servers is downloaded when you access our profile using the appropriate button. When you visit our site while being logged into a Pinterest account, Pinterest may associate your browsing behavior on our site with other information. In this case, LinkedIn’s data protection policy applies: http://pinterest.com/about/privacy/.
The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **Twitter Button.** Our site uses a button provided by Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA. Content from Pinterest servers is downloaded when you access our profile using the appropriate button. When you visit our site while being logged into a Twitter account, Twitter may associate your browsing behavior on our site with other information. In this case, LinkedIn’s data protection policy applies: https://twitter.com/de/privacy. The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
- **YouTube.** Our site utilizes video recordings provided by YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA, a company belonging to Google Ireland Ltd. (Gordon House, 4 Barrow Street, Dublin, Ireland). While using this function, we employ the „advanced data protection mode” provided by Youtube. During the playback of a film on our site via the Youtube channel, content from YouTube will be loaded. If you are logged into a YouTube account at this time, YouTube may associate your browsing behavior on our site with other information. In this case, LinkedIn’s data protection policy applies: https://www.google.de/intl/de/policies/privacy/. The legal basis for processing these data is the legitimate interest of the administrator (Article 6(1)(f) GDPR).
**III. Your rights as the data subject**
In connection with the processing of your personal data by us, you are entitled to the following rights:
- The right to request access to your personal data, their correction, deletion, or restriction of processing,
- The right to object to the processing,
- The right to data portability,
- The right to withdraw consent to the processing of personal data for a specific purpose if you have previously given such consent,
- The right to file a complaint with the supervisory authority in connection with the processing of personal data by us.
**IV. Recipients of your personal data**
In special situations where the applicable law requires us to disclose the collected data to state authorities, we will be obliged to provide such data. Moreover, the Administrator will transfer your personal data to accounting service providers, postal service providers, courier service providers, legal service providers, IT service providers supporting website management, email hosting and website hosting service providers, banks, and other financial institutions for the purpose of payment processing, and owners of social media services (e.g., Facebook). If you want to know the list of entities to whom we disclose or entrust your personal data, please contact us.
**V. Do we transfer your data to countries outside the European Economic Area?**
In connection with the Administrator’s use of tools such as Google Analytics and Facebook Pixel, your personal data may be transferred to the following third countries: the USA, Chile, Singapore, and Taiwan (Republic of China). The basis for transferring data to the aforementioned third countries are contractual clauses ensuring an adequate level of protection, in accordance with the standard contractual clauses defined in the Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries under Regulation of the European Parliament and of the Council (EU) 2016/679.
**VI. Final provisions**
The Administrator reserves the right to change the privacy policy if required by applicable
law, technological conditions of the service operation change, or the change introduces a standard higher than the minimum required by law.
Publication date of the privacy policy: 29-03-2024