Privacy & Cookie Policy

Last updated: September 4, 2026

1. Data Controller

The controller of your personal data is:

PROGAL sp. z o.o.
ul. Stanisława Konarskiego 84
01-355 Warsaw, Poland
Email: [enable JavaScript]
Phone: +48 504 944 659

2. What Data We Collect

We may collect the following personal data:

• Contact data — name, email address, phone number, company name, store location (when you contact us via email)
• Correspondence data — message content, email headers and operational metadata such as sender, recipient, subject, date, category, language, priority and a short summary
• Technical data — IP address, browser type, operating system, pages visited, time spent on site (collected automatically via cookies)
• Business data — order details, shipping addresses, payment information (when you place an order)

3. Purpose & Legal Basis

Purpose	Legal Basis (GDPR)
Responding to your inquiry	Art. 6(1)(b) — pre-contractual measures
Organising business correspondence, including automated message classification and preparing a draft response for human review	Art. 6(1)(b) — pre-contractual measures or contract performance; Art. 6(1)(f) — legitimate interest in efficient, secure and timely handling of correspondence
Processing orders	Art. 6(1)(b) — contract performance
Website analytics (Google Analytics)	Art. 6(1)(a) — your consent
Legal obligations (invoicing, tax)	Art. 6(1)(c) — legal obligation
Legitimate business interests	Art. 6(1)(f) — legitimate interest

The system assists with organising email and preparing draft responses. It does not automatically send messages to customers and does not make decisions producing legal or similarly significant effects based solely on automated processing.

4. Data Recipients

Your data may be shared with:

• Google LLC — website analytics (Google Analytics 4)
• Google Workspace — email delivery and storage
• Amazon Web Services EMEA SARL and supporting AWS entities — cloud infrastructure and Amazon Bedrock used for message classification and draft-response assistance
• Hosting provider — SEOhost.pl (server hosting)
• Shipping companies — for order delivery

We do not sell your personal data to third parties.

5. International Data Transfers

Google Analytics may transfer data to the United States. Google participates in the EU-U.S. Data Privacy Framework, ensuring adequate data protection.

AWS services used by the email system are configured within the European geographic area. Where providing or maintaining a service requires a transfer outside the European Economic Area, AWS applies safeguards under its Data Processing Addendum, including Standard Contractual Clauses. According to AWS, content submitted to Amazon Bedrock is not used to train models and is not shared with model providers.

6. Data Retention

• Email correspondence — for the duration of the business relationship and afterwards for as long as necessary to establish, exercise or defend legal claims and comply with legal obligations
• Operational message metadata and classification results in AWS — 30 days
• Technical draft-response data in AWS — 7 days
• Email-system technical logs — 30 days; no message content
• Order data — 5 years (tax/accounting obligations)
• Analytics data — 14 months (Google Analytics default)

7. Your Rights

Under GDPR, you have the right to:

• Access your personal data (Art. 15)
• Rectify inaccurate data (Art. 16)
• Erase your data — "right to be forgotten" (Art. 17)
• Restrict processing (Art. 18)
• Data portability (Art. 20)
• Object to processing (Art. 21)
• Withdraw consent at any time (Art. 7(3))

To exercise your rights, contact us at the email address above.

You also have the right to lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Cookies

What are cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how you use the site and improve your experience.

Cookie categories

Category	Purpose	Can you decline?
Essential	Cookie consent preferences	No (required)
Analytics	Google Analytics 4 — anonymous usage statistics	Yes

Cookies we use

Cookie	Provider	Purpose	Duration
progal_cc	pro-gal.pl	Stores your cookie consent choice	1 year
_ga	Google	Distinguishes unique users	2 years
_ga_*	Google	Maintains session state	2 years

Managing cookies

You can change your cookie preferences at any time by clicking the "Cookie Settings" link in the footer of our website. You can also manage cookies through your browser settings.

9. Changes to This Policy

We may update this policy from time to time. The latest version is always available on this page with the "Last updated" date.