Polityka Prywatności
1. General Information
This privacy policy applies to the website operating at: www.amanti.com.pl (hereinafter: the “Website”).
The Website Operator and Personal Data Controller is:
STIXX Sp. z o.o., ul. Żurawia 6/12, 00-503 Warsaw, Poland,
VAT No.: 7811907625
Contact email: info@amanti.pl
The Controller processes users’ personal data in accordance with:
-
Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
-
national data protection legislation,
-
the requirements of the European Data Protection Board applicable as of 17.03.2026.
Personal data is processed for the following purposes and on the following legal bases:
-
operation of a classified ads system – Article 6(1)(b) GDPR,
-
handling enquiries submitted via forms – Article 6(1)(b) and (f) GDPR,
-
presenting offers or information – Article 6(1)(f) GDPR,
-
marketing activities – Article 6(1)(a) and (f) GDPR,
-
ensuring the security of the Website and detecting misuse – Article 6(1)(f) GDPR.
The Website collects user data through:
-
data voluntarily entered into forms,
-
cookies stored on the user’s device.
2. Data Protection Measures
The Controller applies, among others, the following safeguards:
-
data transmission encryption (SSL),
-
encryption of data stored in databases,
-
password protection measures compliant with current NIST and ENISA recommendations,
-
regular system and software updates,
-
periodic backups,
-
access restrictions for authorised personnel only.
3. Hosting
The Website is hosted on servers provided by wixstudio.com.
The hosting provider maintains server logs, which may include:
-
URLs accessed,
-
timestamps,
-
IP addresses,
-
error information,
-
device and browser details,
-
referrer data.
4. Your Rights and the Controller’s Obligations
The Controller may transfer personal data to recipients when necessary for the performance of a contract or to fulfil legal obligations. Recipients may include:
-
the hosting provider,
-
authorised employees and contractors,
-
entities providing marketing, IT, accounting, or legal services.
Retention periods:
-
data relating to contract performance – up to 6 years (accounting and tax requirements),
-
marketing data – until consent is withdrawn, but no longer than 3 years from the last activity,
-
contact form data – up to 12 months after the matter is resolved,
-
technical logs – according to the hosting provider’s policy, typically 30–90 days.
User rights include the right to:
-
access their data,
-
rectification,
-
erasure (“right to be forgotten”),
-
restriction of processing,
-
data portability,
-
object to processing (including profiling),
-
withdraw consent at any time.
A complaint may be lodged with the President of the Personal Data Protection Office (Poland).
Providing personal data is voluntary but necessary to use the Website.
Transfer to third countries
Some tools (e.g., analytics or advertising tools) may transfer data outside the EEA, particularly to the USA. The Controller uses only entities applying GDPR-compliant mechanisms such as the EU–US Data Privacy Framework or Standard Contractual Clauses.
5. Information Provided in Forms
The Website processes data voluntarily provided by the user.
It may record:
-
the time the form was submitted,
-
the IP address,
-
device parameters.
Data is processed according to the function of the given form (e.g., commercial enquiries, service requests).
6. Administrator Logs
Information regarding activity within the Website may be logged and used for administrative purposes.
7. Marketing Techniques
Google Analytics
The Controller uses Google Analytics in an EU-compliant version (GA4 with IP anonymisation). No personally identifiable information is transferred to the operator.
Advertising preference settings are available at:
https://www.google.com/ads/preferences/
Meta Pixel
The Controller uses the Meta Pixel. The Pixel informs Meta services about user activity on the Website. No identifying data is transferred to the operator.
Remarketing
The Website may display personalised advertisements based on cookies. No personal data is transferred to external entities.
Heatmaps
The Website may use analytical tools (e.g., heatmaps). Data is anonymised and sensitive fields (passwords, personal information) are not recorded.
Automation
The Website may send automated messages to users who have consented to marketing communication.
Profiling
Profiling may occur only to the extent necessary to tailor marketing content or ensure the proper functioning of the Website.
8. Cookies
The Website uses cookies for:
-
maintaining user sessions,
-
statistical analysis,
-
marketing activities.
Cookies may be session-based or persistent. Users may manage cookie settings through their browser. Limiting cookie use may impact Website functionality.
Cookies may also be stored by third-party partners working with the Operator, such as:
Google,
Facebook,
Twitter.
9. Cookie Management
Users can modify cookie settings through their browser menu (Edge, Chrome, Safari, Firefox, Opera, and mobile browsers on Android/iOS).