Effective date: March 30, 2026

§1. Data Controller

The controller of personal data collected through the website www.frostoutbox.pl is:

Frost Out Box Uryga Łukasz
Laskowa 57, 34-602 Laskowa
Tax ID (NIP): 7372159574
E-mail: kontakt@frostoutbox.pl
Website: www.frostoutbox.pl

Hereinafter referred to as the Controller.

§2. Legal Basis for Data Processing

Personal data is processed in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR) and the Polish Personal Data Protection Act of May 10, 2018.

The legal bases for processing personal data are:

• Article 6(1)(a) GDPR – consent of the data subject (e.g., newsletter, cookies);
• Article 6(1)(b) GDPR – necessity for the performance of a contract or to take steps prior to entering into a contract;
• Article 6(1)(c) GDPR – compliance with a legal obligation of the Controller;
• Article 6(1)(f) GDPR – legitimate interests pursued by the Controller (e.g., analytics, website security).

§3. Scope and Purpose of Collected Data

The Controller collects personal data only to the extent necessary for specific purposes. The following categories of data are processed through the website:

3.1. Contact Form

To contact us through the contact form, the following data is collected:

• first and last name / first name,
• e-mail address,
• message content.

This data is processed for the purpose of responding to inquiries and is retained for the period necessary to handle the inquiry and subsequently for the period required by law or until consent is withdrawn.

3.2. Technical Data – Server Logs

When using the website, technical data is automatically collected, such as: IP address, browser type, operating system, date and time of visit. This data is used to ensure the proper functioning of the website and is not combined with personal data.

§4. Cookies

The website www.frostoutbox.pl uses cookies, which are small text files stored on the user’s device.

4.1. Types of Cookies

• Necessary cookies – ensure the proper functioning of the website.
• Analytical cookies (Google Analytics / GA4) – used to analyze website traffic statistics (number of visits, traffic sources, user behavior).
• Session cookies – stored temporarily in the browser’s memory for the duration of the session.
• Persistent cookies – stored on the device for a specified period or until deleted.

4.2. Managing Cookies

Users may change their cookie settings in their web browser at any time, including limiting or completely disabling cookies. Detailed information is available in the settings of the respective browser. Disabling cookies may affect some website functionalities.

§5. Google Analytics

The website uses Google Analytics 4 (GA4), provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This service enables analysis of website traffic statistics.

Google may transfer collected data to third parties if required by law or if such third parties process data on Google’s behalf. Google will not associate the user’s IP address with other data held by Google.

More information about Google’s privacy policy is available at:
https://policies.google.com/privacy

Users can opt out of Google Analytics tracking by installing the browser add-on available at:
https://tools.google.com/dlpage/gaoptout

§6. Data Recipients

Users’ personal data may be disclosed to the following categories of recipients:

• IT and hosting service providers (technical maintenance of the website);
• Google LLC – in connection with Google Analytics services;
• public authorities – where disclosure is required by law.

The Controller does not sell or disclose personal data to third parties for marketing purposes without the user’s explicit consent.

§7. Users’ Rights

In accordance with the GDPR, every individual whose data is processed has the right to:

• access their personal data (Article 15 GDPR);
• rectify inaccurate data (Article 16 GDPR);
• erase data (“right to be forgotten”) (Article 17 GDPR);
• restrict processing (Article 18 GDPR);
• data portability (Article 20 GDPR);
• object to processing (Article 21 GDPR);
• withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal).

Requests concerning the exercise of these rights may be submitted:

• in writing to: Laskowa 57, 34-602 Laskowa,
• electronically to: kontakt@frostoutbox.pl.

If a user believes that the processing of their personal data violates GDPR provisions, they have the right to lodge a complaint with the President of the Personal Data Protection Office (Urząd Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl.

§8. Data Retention Period

Personal data is retained for the period necessary to fulfill the purposes for which it was collected and thereafter for the period required by applicable law (e.g., tax and accounting regulations) or until consent is withdrawn.

Data submitted through the contact form is retained for the time necessary to respond to the inquiry and is then archived for up to 3 years in the event of claims or legal disputes.

§9. Transfer of Data Outside the EEA

Due to the use of Google Analytics, personal data may be transferred to the United States. Google LLC participates in mechanisms ensuring an adequate level of data protection (including Standard Contractual Clauses). More information is available at:
https://policies.google.com/privacy

§10. Data Security

The Controller implements appropriate technical and organizational measures to ensure the security of personal data, including protection against unauthorized access, loss, or destruction. The website uses SSL/TLS encryption to secure data transmission.

§11. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. Any changes will be published on this page together with an updated effective date.

Users are encouraged to review the Privacy Policy regularly.

§12. Contact

If you have any questions regarding this Privacy Policy or the processing of personal data, please contact:

E-mail: kontakt@frostoutbox.pl
Address: Frost Out Box Uryga Łukasz, Laskowa 57, 34-602 Laskowa