Privacy Policy
Privacy Policy
This document explains how we process the personal data of visitors to the website available at cyfrowe-miasto.pl and how we use cookies and similar technologies. It applies only to this website, which presents our products and services and enables people interested in our offering to contact us.
The cyfrowe-miasto.pl website is a corporate information website. It is not used to provide services to residents of local authorities. If you use an app or platform implemented for your municipality (such as the Resident Card), the relevant local authority remains the controller of your data, and the processing rules are set out in the documents provided by that authority.
Please note
You have the right to control your data — you may access, correct or erase it, restrict its processing, object to processing or request data portability. You also have the right to lodge a complaint with the President of the Personal Data Protection Office. Further details are provided below.
If you have any questions or concerns about data protection, please contact us at iod@bprog.pl.
1. Who is the controller of your personal data?
The controller of your personal data is BPROG Sp. z o.o., with its registered office at ul. Wojska Polskiego 18/1, 05-091 Ząbki, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000554257, tax identification number (NIP) 1251632525, which operates the website under the Cyfrowe Miasto brand.
Throughout this Policy, first-person plural references such as “we” and “our” refer to BPROG Sp. z o.o. as the data controller.
2. Who can you contact about personal data processing?
You can contact us about matters relating to personal data processing at iod@bprog.pl.
If you have questions about the processing of your personal data, wish to exercise your rights under the GDPR or need further information, please contact us at the email address above.
3. Why do we process personal data?
We process personal data only in connection with the operation of the cyfrowe-miasto.pl website. The purposes of processing and their legal bases are set out below.
| Purpose of processing | Explanation | Legal basis |
|---|---|---|
| Handling contact form submissions and sales enquiries | If you contact us through the website’s contact form or by email, we process data to respond, correspond with you and provide information about our products and services. | Article 6(1)(b) of the GDPR (taking steps at a person’s request before entering into a contract) and Article 6(1)(f) of the GDPR (legitimate interest — corresponding with you and handling enquiries), depending on the nature of the contact. |
| Analytics and statistics | We use analytics tools, including Google Analytics, to compile visit statistics, analyse user behaviour and improve the website’s performance. | Article 6(1)(a) of the GDPR (consent given through the cookie management tool). |
| Marketing and remarketing | We use tools from external providers, including Meta Pixel and LinkedIn Insight Tag, to measure the effectiveness of our communications and marketing activities and to target content at people interested in our offering. | Article 6(1)(a) of the GDPR (consent given through the cookie management tool). |
| Ensuring the website’s operation and security | This includes supporting the website’s basic functions, maintaining sessions and operating security mechanisms. | Article 6(1)(f) of the GDPR (legitimate interest — ensuring the website operates properly and securely). |
| Establishing, exercising or defending legal claims | To the extent necessary to safeguard potential claims arising from correspondence or a business relationship. | Article 6(1)(f) of the GDPR (the controller’s legitimate interest). |
4. What information do we hold about you?
The scope of personal data we process depends on why you interact with us through cyfrowe-miasto.pl. We may process the following data:
- your first and last name,
- your email address,
- your telephone number,
- the name of the institution or company you represent and your job title, if you provide them,
- the content of messages sent through the contact form or by email,
- your IP address and technical data about your device and browser,
- data about your activity on the website collected by analytics tools,
- other data you voluntarily provide in correspondence.
5. Where do we obtain information about you?
The data we process comes from two main sources:
Information you provide voluntarily — when you use the website’s contact form or contact us by email. In these cases, you knowingly provide your data to obtain information, ask a question or establish business contact.
Information collected automatically — technical and statistical data is collected while you use the website through analytics tools, cookies and similar technologies. These tools are described in detail later in this Policy.
6. Is your data secure?
Yes. We make every effort to ensure the security of your personal data processed in connection with the operation of cyfrowe-miasto.pl. In particular, we:
- apply appropriate technical and organisational measures to ensure the confidentiality, integrity and availability of data, including encryption of data in transit, access controls and server security measures,
- monitor the condition of our technical infrastructure and update software,
- restrict access to data to authorised persons only,
- periodically review and update our security procedures.
7. How long do we retain personal data?
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or for the period required by law. Retention periods are set out in the table below.
| Purpose of data processing | Data retention period |
|---|---|
| Data from the contact form and correspondence | For as long as necessary to handle the enquiry and conduct correspondence, and then for the limitation period applicable to potential claims. |
| Data relating to a business relationship | For the duration of the relationship and for the period required by law, including tax and accounting regulations, and the limitation period for claims. |
| Data processed for analytics and marketing purposes | Until consent is withdrawn or for the period specified in the relevant tool’s settings. |
8. Who receives your personal data?
Only parties entrusted with processing data under a data processing agreement or otherwise authorised to do so may access your personal data — always in accordance with applicable data protection law. Data recipients may include, in particular:
| Recipient category | Purpose |
|---|---|
| Website hosting provider | Storing data on the server and ensuring the website’s availability. |
| Providers of analytics and marketing tools | Analysing website traffic, generating statistics and measuring the effectiveness of activities. |
| IT service providers and system maintenance providers | Maintaining and providing technical support for IT infrastructure. |
| Authorised employees and associates | Performing tasks related to handling enquiries and running the business. |
| Public administration and judicial authorities | Only where required by law. |
9. Do we transfer data to third countries or international organisations?
In some cases, your data may be transferred to third countries, meaning countries outside the European Economic Area (EEA), particularly the United States. This applies when we use tools supplied by organisations based outside the EEA, including:
- analytics tools, such as Google Analytics,
- marketing and remarketing tools, such as Meta Pixel and LinkedIn Insight Tag.
For these transfers, appropriate data protection mechanisms compliant with the GDPR are used — primarily standard contractual clauses approved by the European Commission or transfers to entities certified under the Data Privacy Framework, together with additional safeguards. We do not transfer data to international organisations that do not provide appropriate data protection safeguards.
10. Do we use profiling?
We do not make decisions about you based solely on automated data processing that have legal effects concerning you or similarly significantly affect you.
However, we may use analytics and marketing tools, such as Google Analytics, Meta Pixel and LinkedIn Insight Tag, to analyse users’ activity on the website and target content at specific audience groups. These activities rely on data processed with your consent, given through the cookie management tool. You can restrict them at any time by changing your consent preferences or browser settings.
11. What rights do you have?
Under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR), you have the following rights:
- access to your data — you can obtain information about what data we process and for what purposes;
- rectification of your data — if your data is inaccurate or incomplete;
- erasure of your data — if there are no grounds for continuing to process it (the “right to be forgotten”);
- restriction of processing — for example, if you contest the accuracy of your data;
- objection to processing — where processing is based on a legitimate interest;
- data portability — in respect of data processed on the basis of consent or a contract;
- withdrawal of consent — at any time where processing is based on your consent, without affecting the lawfulness of processing carried out before consent was withdrawn;
- lodging a complaint with a supervisory authority — with the President of the Personal Data Protection Office, if you believe we are processing data unlawfully.
You can send any requests to exercise these rights to iod@bprog.pl.
12. Is providing data mandatory?
Providing data is voluntary, but necessary to use certain website functions — particularly to contact us through the contact form. Without your contact details, we will not be able to respond to your enquiry.
13. Do we use cookies or similar technologies, and how do they work?
Yes. The cyfrowe-miasto.pl website uses cookies and similar technologies, such as tracking pixels and local scripts.
What are cookies? Cookies are small text files stored on your device, such as a computer or smartphone, that allow selected information about your visits and activities on the website to be remembered.
We may use cookies and similar technologies to:
- ensure the website and its basic functions work properly,
- remember your privacy settings,
- analyse website traffic and compile visit statistics (Google Analytics),
- carry out marketing activities and measure their effectiveness (Meta Pixel, LinkedIn Insight Tag).
Some cookies (known as third-party cookies) are installed by external service providers whose tools are integrated into our website. The use of these cookies is governed by the terms set out in those providers’ own privacy policies.
14. What is the legal basis for using cookies or similar technologies?
The legal basis for using cookies and similar technologies is:
- your consent — for cookies that are not necessary for the website to function and are used for analytics or marketing purposes (Article 6(1)(a) of the GDPR and the provisions of the Telecommunications Law Act);
- our legitimate interest — for cookies necessary for the website and its basic functions to work properly (Article 6(1)(f) of the GDPR).
On your first visit to the website, a cookie notice explains how cookies are used, allows you to give consent and lets you select specific cookie categories. You can change your settings at any time using the consent management tool available on the website.
15. Can you disable cookies or similar technologies?
Yes — you have full control over the cookies used on cyfrowe-miasto.pl. You can manage them in several ways:
On the website — on your first visit, you can accept all cookies, reject them except for essential cookies, or select specific categories. You can return to these settings at any time using the consent management tool available on the website.
In your browser settings — most browsers allow you to block cookies from being stored, delete existing cookies and enable private browsing. Blocking certain types of cookies, such as essential cookies, may affect the website’s ability to function properly.
Using additional tools — browser extensions and apps, such as uBlock Origin and Ghostery, can help you manage privacy and block cookies.
16. Which external tools do we use?
We use tools supplied by third parties on cyfrowe-miasto.pl. The main tools are listed below:
| Tool | Provider | Purpose |
|---|---|---|
| Google Analytics | Google Ireland Ltd. / Google LLC (USA) | Analysing website traffic, compiling visit statistics and assessing the effectiveness of activities. |
| Google Tag Manager | Google Ireland Ltd. / Google LLC (USA) | Managing scripts and tags loaded on the website. |
| Meta Pixel | Meta Platforms Ireland Ltd. / Meta Platforms Inc. (USA) | Measuring marketing effectiveness and remarketing. |
| LinkedIn Insight Tag | LinkedIn Ireland Unlimited Company / LinkedIn Corporation (USA) | Conversion analysis and targeting marketing content at business audiences. |
The providers of these tools may use cookies and process technical data. Further information about how they operate can be found in their privacy policies:
- Google: https://policies.google.com/privacy
- Meta: https://www.facebook.com/privacy/policy
- LinkedIn: https://www.linkedin.com/legal/privacy-policy
17. How can you manage your privacy?
You have the right and the ability to manage your privacy while using cyfrowe-miasto.pl:
On the website — use the cookie consent management tool to choose which cookies are active and change your preferences at any time.
In your browser — you can block cookies, delete browsing data and use incognito mode.
Using extensions and apps — browser extensions, such as uBlock Origin and Ghostery, allow you to block analytics and marketing scripts.
Contact us about your data — if you would like more information or wish to exercise your rights, contact us at iod@bprog.pl.
18. Can this Privacy Policy change?
Yes — this Privacy Policy may be updated periodically to reflect changes in the law, guidance from supervisory authorities, changes to the operation of cyfrowe-miasto.pl and the introduction of new tools or external services. We will announce any significant changes through an appropriate notice on the website. The effective date of the current version is shown below.
Effective date of the current version of this Policy: 12 August 2026