Privacy Policy
In effect from the date of publication. Version 1.0.
§1. Data controller
The controller of personal data processed in connection with the use of the gmpplus.pl website is Quality Assurance Poland, ul. Ołowiana 2/4/65, 53-434 Wrocław, Poland, NIP (VAT ID) 832-178-51-73, REGON 100012709 (the "Controller"). For matters concerning the processing of personal data, contact us at [email protected] or +48 665 606 846.
§2. What data we process and why
Contact form (kontakt.php). When you send an enquiry we process the data you provide: your name, e-mail address, optionally your company name and phone number, the subject and the content of your message. The legal basis is your consent (Article 6(1)(a) GDPR), given by ticking the checkbox on the form, and — to the extent we are replying to your enquiry — taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR). Providing this data is voluntary but necessary for us to respond to your enquiry.
Shop orders (order.php, download.php). When you purchase digital content we process the e-mail address provided at checkout and the order data itself (product selected, amount, transaction identifier supplied by the payment operator). The legal basis is performance of a contract (Article 6(1)(b) GDPR) and, for sales documentation, a legal obligation on the Controller (Article 6(1)(c) GDPR, tax and accounting law).
Cookies and similar technologies. The site uses cookies — see the detailed breakdown in §4 below. Your choice regarding non-essential cookies (analytics, advertising, chat) is entirely voluntary and depends on the consent you give in the cookie banner.
Server logs and security mechanisms. For security reasons (protecting forms against abuse — rate limiting and a CSRF mechanism) the site records technical information about requests (including IP address and timestamp) in files on the server, independently of consent to analytics cookies. The legal basis is the Controller's legitimate interest (Article 6(1)(f) GDPR) in ensuring the security and integrity of the website.
§3. Recipients of data
Depending on the purpose of processing, data may be shared with the following categories of recipients:
- our hosting provider — for the technical operation of the site,
- Przelewy24 (PayPro S.A., based in Poznań, Poland) — the payment operator handling shop transactions; the Controller does not store payment card details or online banking login credentials,
- Google Ireland Limited — for Google Analytics 4 (traffic statistics) and Google AdSense (ad display), only after consent is given in the cookie banner,
- JivoChat — provider of the site's chat widget, only after consent to chat cookies,
- Cloudflare, Inc. — provider of the form anti-bot protection (Turnstile).
Some of the above entities may process data on servers located outside the European Economic Area (including Google and Cloudflare) — in such cases the transfer takes place on the basis of mechanisms ensuring an adequate level of data protection under GDPR (e.g. standard contractual clauses).
§4. Cookies
The site uses a consent banner where you can choose which categories of cookies you agree
to (other than necessary ones, which are always active). Your choice is stored in a cookie
named qap_consent for 180 days, after which the banner is shown again.
| Category | Purpose | Legal basis |
|---|---|---|
| Necessary | Maintaining the session (PHP session identifier), remembering your consent choice, form security (CSRF token). Always active — the site does not work correctly without them. | Legitimate interest / necessity to provide the service |
| Analytics | Google Analytics 4 — statistics on visits and site usage. | Consent |
| Advertising | Google AdSense — display and personalization of advertisements. | Consent |
| Chat | JivoChat — chat widget, loaded after you scroll the page and only after consent is given. | Consent |
You can withdraw or change your consent at any time by clicking "Privacy settings" in the site footer, and also by changing your browser settings (deleting/blocking cookies) — though this may limit the site's functionality.
§5. Data retention period
We keep contact form data for as long as necessary to handle your enquiry and any further correspondence, and no longer than necessary for the purpose for which it was collected or until you object. Data related to shop orders (including sales documentation) is kept for the period required by tax and accounting law. The download link for a purchased product is valid for 7 days and can be used a maximum of 5 times — after that, the download data expires. Cookie consent is stored for 180 days.
§6. Your rights
In connection with the processing of your personal data you have the right to: access your data, rectify it, erase it, restrict its processing, data portability, object to processing based on the Controller's legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal). To exercise these rights, contact the Controller at [email protected]. You also have the right to lodge a complaint with the Polish supervisory authority (Prezes Urzędu Ochrony Danych Osobowych, PUODO), or with the supervisory authority of your own country of residence, if you believe the processing of your data infringes GDPR.
§7. Automated decision-making
The Controller does not make decisions about you based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you. Where you have consented to advertising cookies, Google AdSense may display ads tailored to your interests in accordance with Google's own privacy policy — this does not, however, involve decisions that produce legal effects.
§8. Changes to this Privacy Policy
The Controller reserves the right to make changes to this Privacy Policy, in particular in connection with changes in the law or in the scope of services provided. The current version of this Privacy Policy is always available at gmpplus.pl/en/privacy-policy.html.
Questions about this Privacy Policy can be sent to [email protected] or via our contact form. See also our Terms of Service and License.