Fractal Soft
Contact Us

Privacy Policy

Last updated: 17 September 2026

1. Data controller

The controller of personal data is:

FRACTAL SOFT sp. z o.o.
ul. Józefa Poniatowskiego 29/4
44-100 Gliwice
Poland

  • KRS: 0000696422
  • NIP: 5482686629
  • REGON: 368341368

Contact for privacy matters: contact@fractalsoft.com.

2. Scope of this policy

This privacy policy explains how we process personal data when you use fractalsoft.org (the “Website”), including contact forms, cookies, and analytics.

3. What data we process

Depending on how you use the Website, we may process:

  • Contact form data — name, email address, message content, and technical metadata (IP address, browser user agent).
  • Business contact form data — name, company name, email, phone number, industry, message, and optional file attachments.
  • Browser technical information submitted with contact forms (for example screen size, language, timezone, and similar diagnostics) to help us handle inquiries and diagnose delivery issues.
  • Server logs — standard request data processed by our hosting infrastructure for security and reliability.
  • Cookie and similar technology data — described in section 6.

We do not intentionally collect special categories of personal data through the Website.

4. Purposes and legal bases (GDPR)

  • Responding to inquiries sent via contact forms — Art. 6(1)(b) GDPR (steps prior to a contract) and/or Art. 6(1)(f) (legitimate interest in answering business inquiries).
  • Operating and securing the Website (including session cookies needed for CSRF protection and flash messages) — Art. 6(1)(f) GDPR (legitimate interest in a secure, working website) and, where applicable, necessity for the service requested.
  • Measuring Website traffic with Google Analytics — Art. 6(1)(a) GDPR (consent), collected only after you accept analytics cookies.
  • Storing your cookie preference — Art. 6(1)(c) / Art. 6(1)(f) (to demonstrate and respect your choice).

You may withdraw or change consent at any time via Cookie settings in the Website footer, without affecting the lawfulness of processing before withdrawal.

5. Recipients and transfers

We may share data with:

  • Hosting and infrastructure providers operating the Website (currently including Fly.io).
  • Google Ireland Limited / Google LLC — Google Analytics, only when analytics consent is granted. Google may process data outside the EEA. Where required, transfers rely on appropriate safeguards (for example Standard Contractual Clauses).

We do not sell personal data.

6. Cookies and similar technologies

Essential cookies

The Website sets a session cookie (_fractal_soft_session). It is required for security (CSRF protection) and basic site features (for example success/error messages after form submission). This cookie is httpOnly, Secure, and SameSite=Lax.

Analytics cookies (optional)

If you accept analytics cookies, we load Google Analytics (measurement ID G-NKMWEXWYK9). Google may set cookies such as _ga and _ga_*.

We use Google Consent Mode v2 (advanced). Until you accept analytics:

  • consent signals default to denied (analytics_storage, ad_storage, ad_user_data, ad_personalization);
  • Google tags may send cookieless pings for modeling, without storing analytics cookies.

After you accept, we update Consent Mode to granted for those signals so analytics cookies can be written. If you choose essential cookies only, signals remain denied and analytics cookies are cleared when possible.

Local storage

We may store in your browser (not as HTTP cookies):

  • theme preference (theme);
  • cookie consent choice (cookie_consent).

7. Retention

  • Contact and business inquiries are retained as long as needed to handle the request and for related legitimate interests (for example evidence of communication), then deleted or anonymised.
  • Session cookies expire when the browser session ends (or earlier according to server configuration).
  • Analytics data is retained according to our Google Analytics configuration and Google’s product settings.
  • Cookie consent preference remains until you clear site data or change your choice in Cookie settings.

8. Your rights

Subject to GDPR conditions, you may request:

  • access to your data;
  • rectification;
  • erasure;
  • restriction of processing;
  • data portability;
  • objection to processing based on legitimate interests;
  • withdrawal of consent (where processing is based on consent).

To exercise these rights, email contact@fractalsoft.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland: uodo.gov.pl.

9. Children

The Website is not directed to children under 16. We do not knowingly collect their personal data.

10. Changes

We may update this policy when our processing practices or legal requirements change. The “Last updated” date at the top of the page will be revised accordingly.