Privacy Policy

1. Data controller

Currently, the PromoPoland.pl service is operated as a private, non-commercial hobby project. The data controller for any personal data processed in connection with the site is its private operator. For any privacy or data protection inquiries, you can contact us via email at: [email protected].

2. Data we may process

• technical data: IP address, browser type, device, operating system, approximate location, request date and time, visited URL;
• session and security data: CSRF/session identifiers, language settings, cookie consent status;
• interaction data: search queries, deal clicks, outbound store visits, page views;
• data you voluntarily send to us, for example by contacting us by e-mail.

3. Purposes and legal bases

We process data under the GDPR/RODO, in particular on the basis of our legitimate interest in operating, securing, and improving the website; your consent for optional cookies; and steps taken at your request before entering into a contract if you contact us directly by e-mail.

4. Cookies and similar technologies

PromoPoland.pl uses cookies and similar technologies. Necessary cookies are required for site operation, session protection, language preferences, and remembering your cookie banner choice. They do not require separate consent because they are technically necessary to provide the service.

Analytics, marketing, and affiliate cookies are used only after your consent. You can accept all cookies, reject optional cookies, or save individual choices. You can change your settings at any time through the Cookie settings link in the website footer.

5. Affiliate links and third-party websites

Some links may lead to external stores or affiliate partners. After you leave PromoPoland.pl, data processing is governed by the privacy policy of that store or partner. PromoPoland.pl does not control cookies, payments, accounts, or data processing on external websites.

6. Recipients of data

Data may be shared with hosting, security, analytics, maintenance, e-mail, CDN, and affiliate service providers to the extent necessary to operate the website and measure outbound visits. We do not sell users' personal data.

7. Transfers outside the EEA

If a service provider is located outside the European Economic Area, we use safeguards required by the GDPR, such as standard contractual clauses, adequacy decisions, or other permitted mechanisms.

8. Retention

Technical server logs (including IP addresses) are stored for security, diagnostics, and abuse prevention purposes for a period of up to 90 days. Cookie consent information is stored for up to 12 months or until you change your preferences. E-mail messages are retained for the period necessary to respond and protect against potential claims.

9. Your rights

You have the right to access, rectify, erase, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent without affecting the lawfulness of processing before withdrawal.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO) in Poland.

10. Security

We apply organizational and technical safeguards reasonably appropriate to the nature of the service, including access limitation, software updates, HTTPS, error monitoring, and backups where applicable.

11. Changes to this Policy

We may update this Policy when law, website functionality, or service providers change. The current version is published on this page with the last updated date.