Privacy Policy

1. Data controller

The controller of personal data is:

Frigg Systems Sp. z o.o.
ul. Żelazna 2
40-851 Katowice
Poland
KRS: 0000938173
VAT ID: PL6343004578

Frigg Systems Sp. z o.o., with its registered office in Katowice at ul. Żelazna 2, 40-851 Katowice, Poland, is registered by the District Court Katowice-Wschód in Katowice, 8th Commercial Division of the National Court Register, under KRS number 0000938173, with share capital of PLN 5,000.

For matters related to personal data protection, you may contact us at: gdpr@friggsystems.com.

2. What data may be processed when you use the website?

When you use our website, technical information related to your connection to the website may be processed, including in particular:

• the IP address of the device,
• the date and time of the request,
• the address of the requested resource,
• information about the web browser and operating system,
• technical information concerning the server response,
• the address of the website from which the user entered our website.

This information may be stored in server logs and used to ensure website security, diagnose technical issues, prevent abuse and maintain the proper operation of our infrastructure.

The legal basis for such processing is our legitimate interest in ensuring the security and proper operation of the website, pursuant to Article 6(1)(f) of the GDPR.

If a user voluntarily provides us with personal data, for example by contacting us by email or through a form available on the website, such data is processed to the extent necessary to handle the enquiry, conduct correspondence or take action at the user's request.

3. Cookies

The website uses cookies and similar mechanisms for storing information on the user's device.

Necessary cookies

Necessary cookies are used to provide the website's basic functionality and to remember the user's privacy preferences.

This category includes, in particular, the frigg_cookie_consent cookie, which is used to remember the user's decision regarding analytics cookies. This cookie is stored for up to 12 months.

Necessary cookies are not used for marketing analytics or user profiling.

Analytics cookies

With the user's consent, we use Google Analytics 4 to obtain statistical information about how our website is used.

Analytics cookies are not stored and Google Analytics is not activated until the user gives consent through the privacy settings banner.

Once consent has been given, Google Analytics may use cookies such as _ga and _ga_<identifier>. Their default lifetime may be up to 2 years unless shortened by the service configuration, browser settings or user actions.

4. Google Analytics 4

We use Google Analytics 4, a service provided by Google Ireland Limited.

Google Analytics allows us to create aggregated statistics about the use of our website, including, among other things:

• the number of users and visits,
• session duration and flow,
• pages visited,
• traffic source,
• approximate location,
• device type,
• operating system,
• browser type.

We use this information solely to analyse the operation of the website, identify issues and improve its content and usability.

Google Analytics is activated only after the user has given consent. The legal basis for processing in this respect is the user's consent pursuant to Article 6(1)(a) of the GDPR.

Consent to analytics does not include consent to personalised advertising or the use of data for advertising purposes. In our configuration, mechanisms related to advertising storage, advertising-related user data and ad personalisation remain disabled.

Google states that IP addresses are not logged or stored in Google Analytics 4.

Data collected through Google Analytics may be processed using Google infrastructure located outside the European Economic Area. Where this occurs, Google applies data transfer mechanisms provided for under applicable data protection law.

Detailed information about Google's privacy practices is available at: policies.google.com/privacy .

5. Google Analytics data retention

User-level and event-level data available in Google Analytics is retained for the period configured in the Google Analytics service. Our recommended configuration for this website is a retention period of 14 months.

This setting does not affect aggregated statistics presented in standard Google Analytics reports.

6. Consent to analytics cookies

During the first visit to the website, the user can make a choice using the privacy banner.

• "Accept" – gives consent to the use of Google Analytics and analytics cookies.
• "Necessary only" – rejects analytics cookies. In this case, Google Analytics will not be activated.
• "Settings" – allows the user to enable or disable the analytics category independently.

Refusing consent to Google Analytics does not limit access to the website's basic functionality.

7. Withdrawal or change of consent

Consent to analytics cookies may be changed or withdrawn at any time using the "Cookie settings" option available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

After consent is withdrawn, Google Analytics will no longer be used on subsequent page views, and the website will attempt to remove previously created analytics cookies.

Users may also delete or block cookies directly through their web browser settings.

8. Legal basis for the use of cookies

Storing information on a user's device or gaining access to information already stored on it is carried out in accordance with applicable law, including the Polish Act of 12 July 2024 – Electronic Communications Law (Prawo komunikacji elektronicznej).

Analytics cookies are used only after the user has given consent. Consent is not required for cookies or mechanisms that are necessary to provide a service requested by the user or to ensure the website's basic operation.

9. Recipients of data

In connection with operating the website, data may be entrusted or disclosed to entities providing services necessary for its operation, including providers of:

• hosting and server infrastructure,
• IT services,
• infrastructure security and monitoring,
• analytics tools – in the case of Google Analytics, only after the appropriate consent has been given.

Data is disclosed only to the extent necessary for the relevant purpose and in accordance with applicable law.

10. User rights

Where provided for by the GDPR, data subjects have the right to:

• obtain information about the processing of their data,
• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time.

Where processing is based on consent, withdrawal of that consent does not affect the lawfulness of processing carried out before its withdrawal.

Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if they believe that the processing of their personal data infringes applicable data protection law.

11. Security

We use appropriate technical and organisational measures designed to protect data and the website infrastructure against unauthorised access, loss, alteration or unauthorised disclosure.

12. Changes to this Privacy Policy

This Privacy Policy may be updated, in particular, if the way the website operates, the tools we use, the configuration of analytics services or applicable law changes.

The current version of this Privacy Policy is always published on the website together with the date of its most recent update.