Fratos
Back to homepage

Privacy Policy & GDPR

Last updated: 15 May 2026

This Policy describes how Fratos processes personal data of users of the fratos.pl website in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR).

1. Data controller

The controller of your personal data is Fratos — a digital studio based in Poland. For data-related matters please contact:

  • Email: kontakt@fratos.pl

2. What data we collect

We only process data you provide to us, in particular through the contact form:

  • name and/or name of the club/organisation,
  • email address,
  • subject and content of the message,
  • IP address and browser information (server logs, for security purposes).

3. Purpose and legal basis

We process your data for the following purposes:

  • to respond to your enquiry and prepare an offer — Art. 6(1)(b) GDPR (pre-contractual measures),
  • to ensure the security of the service and protect against abuse — Art. 6(1)(f) GDPR (legitimate interest),
  • to comply with legal obligations such as accounting — Art. 6(1)(c) GDPR.

4. Retention period

Contact form correspondence is retained for as long as necessary to handle the enquiry and for up to 24 months afterwards, unless a longer period is required by law (e.g. accounting) or our agreement with you.

5. Data recipients

Your data may be accessed by:

  • providers of hosting and email infrastructure (e.g. Google Workspace) — to the extent necessary to deliver the service,
  • providers of accounting and legal services,
  • authorised public authorities, where required by law.

We do not sell or share your data with third parties for marketing purposes.

6. Transfers outside the EEA

Some providers (e.g. Google) may process data on servers outside the European Economic Area. In such cases the transfer is based on Standard Contractual Clauses approved by the European Commission.

7. Your rights

In connection with the processing of your data, you have the right to:

  • access your data and obtain a copy,
  • have your data corrected, erased or restricted,
  • data portability,
  • object to processing based on legitimate interest,
  • lodge a complaint with the Polish Data Protection Authority (PUODO, ul. Stawki 2, 00-193 Warsaw, Poland) or your local supervisory authority.

To exercise your rights please write to kontakt@fratos.pl.

8. Cookies

The website uses only cookies that are strictly necessary for its operation (e.g. the CSRF token). Details are provided in a separate Cookie Policy.

9. Changes to this policy

We reserve the right to update this Policy. The current version is always available at this URL, with the date of the most recent change shown at the top of the document.