This Privacy Policy outlines the rules for the storage and access to data on the Devices of Users using the Service for the purpose of providing electronic services by the Administrator, as well as the principles of collecting and processing personal data that Users voluntarily provide through tools available on the Service.

This Privacy Policy is an integral part of the Terms and Conditions of the Service, which defines the rules, rights, and obligations of Users using the Service.

§1 Definitions

• Service: The online service “chinesefrontiers.com” operating at the address https://chinesefrontiers.com
• External Service: The websites of partners, service providers, or customers collaborating with the Administrator
• Service/Data Administrator: The Administrator of the Service and Data is the company “ZP20 Piotr Markowski,” operating at Al. KEN 36 / 112B, WARSAW, with tax identification number (NIP): 9482256434, providing electronic services through the Service
• User: A natural person for whom the Administrator provides electronic services through the Service
• Device: An electronic device with software through which the User accesses the Service
• Cookies: Text data stored in the form of files placed on the User’s Device
• GDPR (RODO): Regulation (EU) 2016/679 of the European Parliament and the Council of April 27, 2016, regarding the protection of natural persons in relation to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)
• Personal Data: Information about an identified or identifiable natural person (“data subject”); an identifiable person is one who can be directly or indirectly identified, particularly based on an identifier such as name, identification number, location data, online identifier, or one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that person.
• Processing: Any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organizing, structuring, storing, adapting, modifying, retrieving, consulting, using, disclosing by transmission, dissemination, or otherwise making available, aligning or combining, restricting, erasing, or destroying.
• Profiling: Any form of automated processing of personal data, consisting of the use of personal data to evaluate certain personal aspects of an individual, in particular to analyze or predict aspects concerning the performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
• Consent: Consent of the data subject means the voluntary, specific, informed, and unambiguous indication of the data subject’s wishes by which they, by a statement or a clear affirmative action, signify agreement to the processing of personal data related to them.
• Data Breach: A security breach leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to personal data transmitted, stored, or otherwise processed.
• Pseudonymization: The processing of personal data in such a way that it cannot be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures to prevent its attribution to an identified or identifiable person.
• Anonymization: Anonymization of data is an irreversible process of data operations that destroys/overwrites “personal data,” making identification or linking a record to a specific user or individual impossible.

§2 Data Protection Officer In accordance with Article 37 of the GDPR, the Administrator has not appointed a Data Protection Officer.

For matters concerning data processing, including personal data, please contact the Administrator directly.

§3 Types of Cookies

• Internal Cookies: Files placed and read from the User’s Device by the Service’s teleinformatics system
• External Cookies: Files placed and read from the User’s Device by the teleinformatics systems of external services. Scripts from external services that may place cookies on the User’s Device have been consciously included in the Service through scripts and services provided and installed in the Service
• Session Cookies: Files placed and read from the User’s Device by the Service during a single session of the Device. After the session ends, the files are deleted from the User’s Device.
• Persistent Cookies: Files placed and read from the User’s Device by the Service until manually deleted. These files are not automatically deleted after the Device session ends unless the Device’s settings are set to delete cookies after the session ends.

§4 Data Storage Security The mechanisms for storing and reading cookies: The mechanisms for storing, reading, and exchanging data between cookies saved on the User’s Device and the Service are implemented through built-in browser mechanisms and do not allow the collection of other data from the User’s Device or other websites visited by the User, including personal data or confidential information. The transfer of viruses, Trojans, or other worms to the User’s Device is also practically impossible.

Internal Cookies: Cookies used by the Administrator are safe for the User’s Devices and do not contain scripts, content, or information that could threaten the security of personal data or the Device.

External Cookies: The Administrator takes all possible actions to verify and select trusted partners in terms of security. However, the Administrator does not have full control over the content of external partner cookies.

Cookie Control: Users can change the settings regarding the saving, deleting, and accessing of cookie data at any time for each website.

§5 Purpose of Cookies Usage

• Improving and facilitating access to the Service
• Personalizing the Service for Users
• Enabling login to the service
• Marketing, Remarketing on external services
• Serving advertisements
• Affiliate services
• Conducting statistics (user visits, device types, connection data, etc.)
• Serving multimedia services
• Providing social services

§6 Purpose of Personal Data Processing Personal data voluntarily provided by Users is processed for the following purposes:

• Providing electronic services
• User account registration and management
• Newsletter service (including sending advertising content with consent)
• Commenting/liking posts without registration
• Sharing content on social networks or other sites
• Communication between the Administrator and Users regarding the Service and data protection
• Ensuring the legitimate interest of the Administrator

Anonymous data collected automatically is processed for the following purposes:

• Conducting statistics
• Remarketing
• Serving personalized ads
• Managing affiliate programs
• Ensuring the legitimate interest of the Administrator

§7 External Service Cookies The Administrator uses JavaScript scripts and web components from partners who may place their own cookies on the User’s Device. Users can control cookie settings in their browser.

§8 Data Collection The Service collects data on Users. Some data is collected automatically and anonymously, and some data is personal information provided voluntarily by Users during registration for the Service’s various features.

§9 Access to Personal Data by Third Parties In principle, the only recipient of personal data provided by Users is the Administrator. Data collected as part of the services provided is not shared or sold to third parties. However, access to data may be granted to entities responsible for maintaining the necessary infrastructure and services for the Service.

§10 Processing of Personal Data Personal data provided voluntarily by Users will not be transferred outside the European Union, unless the User voluntarily publishes them (e.g., by posting a comment).

§11 Legal Basis for Data Processing The Service processes data based on the GDPR and other relevant legal provisions, including legitimate interests and consent provided by Users.

§12 Retention Period of Personal Data Personal data provided by Users will be retained only for the duration of the service provision by the Administrator, and will be deleted or anonymized within 30 days after the end of service provision, unless required for legal purposes.