Privacy & Cookie Policy

Last updated: September 24, 2026

1. Data Controller

The controller of your personal data is:

PROGAL sp. z o.o.
ul. Stanisława Konarskiego 84
01-355 Warsaw, Poland
Email: [enable JavaScript]
Phone: +48 504 944 659

2. What Data We Collect

We may collect the following personal data:

3. Purpose & Legal Basis

PurposeLegal Basis (GDPR)
Responding to your inquiryArt. 6(1)(b) — pre-contractual measures
Organising business correspondence, including automated message classification and preparing a draft response for human reviewArt. 6(1)(b) — pre-contractual measures or contract performance; Art. 6(1)(f) — legitimate interest in efficient, secure and timely handling of correspondence
Processing ordersArt. 6(1)(b) — contract performance
Website analytics (Google Analytics)Art. 6(1)(a) — your consent
Advertising measurement with Meta PixelArt. 6(1)(a) — your marketing consent
Linking an inquiry and a later order to the source of the visitArt. 6(1)(b) — pre-contractual measures; Art. 6(1)(f) — legitimate interest in measuring the effectiveness of business acquisition
Legal obligations (invoicing, tax)Art. 6(1)(c) — legal obligation
Legitimate business interestsArt. 6(1)(f) — legitimate interest

The system assists with organising email and preparing draft responses. It does not automatically send messages to customers and does not make decisions producing legal or similarly significant effects based solely on automated processing.

4. Data Recipients

Your data may be shared with:

We do not sell your personal data to third parties.

5. International Data Transfers

Google Analytics may transfer data to the United States. Google participates in the EU-U.S. Data Privacy Framework, ensuring adequate data protection.

Meta Pixel may involve processing outside the European Economic Area. Details of Meta's roles, safeguards and current transfer mechanisms are available in the Meta Privacy Policy.

AWS services used by the email system are configured within the European geographic area. Where providing or maintaining a service requires a transfer outside the European Economic Area, AWS applies safeguards under its Data Processing Addendum, including Standard Contractual Clauses. According to AWS, content submitted to Amazon Bedrock is not used to train models and is not shared with model providers.

6. Data Retention

7. Your Rights

Under GDPR, you have the right to:

To exercise your rights, contact us at the email address above.

You also have the right to lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Cookies

What are cookies?

Cookies are small text files stored on your device when you visit our website. They help us understand how you use the site and improve your experience.

Cookie categories

CategoryPurposeCan you decline?
EssentialCookie consent preferencesNo (required)
AnalyticsGoogle Analytics 4 — site usage statisticsYes
MarketingMeta Pixel — page visits and contact intent for advertising measurementYes

Cookies we use

CookieProviderPurposeDuration
progal_consent_v2 (local storage)pro-gal.plStores separate analytics and marketing choicesUntil changed or browser storage is cleared
progal_attr_v1 (local storage)pro-gal.plStores campaign attribution after analytics consent90 days
_gaGoogleDistinguishes unique users2 years
_ga_*GoogleMaintains session state2 years
_fbp / _fbcMetaAdvertising measurement after marketing consentAccording to current Meta policy and settings

Managing cookies

You can change or withdraw your optional consent at any time by clicking the "Cookie Settings" link in the footer of our website. Rejecting analytics or marketing removes the related known first-party browser storage and prevents those tools from loading after the page reloads. You can also manage cookies through your browser settings.

9. Changes to This Policy

We may update this policy from time to time. The latest version is always available on this page with the "Last updated" date.