Privacy and Cookie Policy

This Privacy and Cookie Policy sets out the rules for processing personal data and using technologies on the website available at: https://kid-aid.com ("Website"). The Controller takes special care to protect users' privacy and to ensure the security of the data transferred, in accordance with applicable law, in particular: • Regulation (EU) 2016/679 of the European Parliament and of the Council ("GDPR"), • the Personal Data Protection Act, • regulations concerning electronic communication and user privacy.

The controller of the website and of personal data is: Animativ sp. z o.o., ul. Warszawska 146 lok. 5, 05-300 Mińsk Mazowiecki, Poland, e-mail: hello@animativ.pl The Website is operated in cooperation with the Wroclaw Medical University (Uniwersytet Medyczny im. Piastów Śląskich we Wrocławiu), Department of Paediatrics and Infectious Diseases, ul. Chałubińskiego 2a, 50-368 Wrocław. For matters related to personal data protection, you may contact us at: hello@animativ.pl

The Controller may process data voluntarily provided by the user, in particular: • first name and last name, • e-mail address, • phone number, • data contained in messages sent via the contact form or by e-mail. In addition, the server may automatically record basic technical data related to the use of the Website, such as: • shortened or anonymised IP address used solely for technical and security purposes, • browser type, • operating system, • date and time of visit, • address of the visited subpage. This data is used solely for technical, security and statistical purposes related to the Website's operation.

Personal data may be processed for the following purposes: a) Contact with the user To respond to messages sent via the contact form or e-mail. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller, consisting in conducting communication. b) Provision of services or pre-contractual activities To present an offer or provide services delivered by the Controller. Legal basis: Art. 6(1)(b) GDPR. c) Ensuring website security To protect the website from misuse and ensure proper operation of the service. Legal basis: Art. 6(1)(f) GDPR. d) Technical logs and website statistics To ensure infrastructure security, error diagnostics and monitoring of the proper functioning of the service. Legal basis: Art. 6(1)(f) GDPR — legitimate interest of the controller.

Use of the contact form requires providing the data necessary to handle the enquiry. Providing the data is voluntary; however, failure to provide it may prevent us from replying.

Data may be transferred only to entities supporting the operation of the Website, in particular: • hosting providers, • IT service providers, • e-mail service operators, • entities responsible for infrastructure security. The Controller does not sell or transfer users' personal data to third parties for marketing purposes.

The Website uses Umami Analytics for anonymous traffic and visit-statistics analysis. Umami operates on a privacy-first basis and: • does not use cookies, • does not use localStorage or sessionStorage, • does not store full IP addresses of users, • does not identify users, • does not build user profiles, • does not track users across websites. The data collected is purely statistical and anonymous, in particular: • number of page visits, • subpages visited, • browser type, • operating system, • user country, • traffic source. This data is used solely for the purpose of: • analysing the Website's operation, • improving the quality of the service, • monitoring the performance and security of the Website. Because Umami Analytics does not identify users and does not use analytical cookies, its use does not require the user's prior consent.

The Website does not use marketing or analytical cookies for tracking users. For anonymous traffic analysis, the Umami Analytics tool is used, which operates without cookies. Some technical elements of the Website or server infrastructure may use solutions necessary for the proper operation of the service.

Users can manage cookie settings via their web browser settings. Restricting technical cookies may affect the proper functioning of some elements of the Website.

Personal data is stored for the period: • necessary to fulfil the processing purpose, • of conducting correspondence, • required by law, • until an effective objection is raised or a data erasure request is made, where the law permits deletion.

Every data subject has the right to: • access their data, • rectify their data, • erase their data, • restrict processing, • object to processing, • data portability, • lodge a complaint with the President of the Personal Data Protection Office. The Controller does not make automated decisions about users or apply profiling within the meaning of GDPR.

The Controller applies appropriate technical and organisational measures to protect data against: • loss, • destruction, • unauthorised access, • disclosure to unauthorised persons. The Controller regularly updates the security measures applied to ensure an appropriate level of data protection.

The Website may contain links to third-party websites. The Controller is not responsible for the privacy practices applicable to those websites.

The Controller reserves the right to update this Privacy and Cookie Policy in the event of: • changes in law, • technological changes, • development of the Website's functionality. The current version of the document is always published on the Website.

For matters related to privacy and personal data protection, please contact us at: hello@animativ.pl The document is effective from the date of publication on the Website.