English
0
0.00 zł
0 items
Englishfrostbox.pl
Version: 14 January 2026
This Privacy Policy is informational in nature and constitutes the fulfilment of obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR). This document does not constitute an offer or contract within the meaning of the Polish Civil Code and does not create any additional obligations on the part of the Controller beyond those arising from mandatory legal provisions.
The controller of your personal data is:
FIFO Prosta Spolka Akcyjna
ul. Kanonia 9, 50-328 Wroclaw, Poland
Tax ID (NIP): 8982295483
Statistical Number (REGON): 525881729
National Court Register (KRS): 0001047768
Registration Court: District Court for Wroclaw-Fabryczna in Wroclaw, VI Commercial Division of the National Court Register
Contact for data protection matters: [email protected]
We process your personal data for the following purposes:
Legal basis: GDPR Art. 6(1)(b) — performance of a contract to which you are a party, or taking steps prior to entering into a contract.
Scope of data: name, surname, delivery address, email address, phone number, invoice details (Tax ID, company name, address).
Legal basis: GDPR Art. 6(1)(b) — contract performance.
Payment operators: Stripe, Przelewy24, credit card operators, leasing companies. Payment data (card numbers) is not stored on our servers — we transmit it directly to payment operators in accordance with PCI DSS standards.
Legal basis: GDPR Art. 6(1)(b) — provision of account management service.
Scope of data: email address, password (encrypted), order history, saved addresses.
Legal basis: GDPR Art. 6(1)(f) — legitimate interest of the controller in servicing customers and potential customers.
Scope of data: name, email address, phone number (optional), message content.
Legal basis: GDPR Art. 6(1)(a) — your voluntary consent.
Scope of data: email address. You may withdraw consent at any time via the unsubscribe link in any message or by contacting us.
Legal basis: GDPR Art. 6(1)(a) — consent given by accepting analytical cookies.
Tools: Google Analytics. Data is anonymized (truncated IP addresses).
Legal basis: GDPR Art. 6(1)(a) — consent given by accepting marketing cookies.
Tools: Meta Pixel (Facebook/Instagram), Google Ads.
Legal basis: GDPR Art. 6(1)(c) — compliance with legal obligations (maintaining accounting records, issuing invoices).
Legal basis: GDPR Art. 6(1)(f) — legitimate interest of the controller.
Our website offers a chat with an AI assistant. The assistant is a computer program, not a person. It answers questions about our offer and takes enquiries, including service requests.
Legal basis: GDPR Art. 6(1)(b) – steps taken at your request before entering into a contract – and Art. 6(1)(f) – our legitimate interest in handling enquiries. Scope of data: the content of the conversation and any data you provide in it (name, phone number, e-mail address). The conversations are handled on our behalf by ElevenLabs Inc. (USA). Enquiries from the chat are forwarded to our team by e-mail and via the Telegram messenger.
Data may be transferred to the USA on the basis of the safeguards provided in Chapter V GDPR (the European Commission's adequacy decision for the EU-US Data Privacy Framework or standard contractual clauses). Chat transcripts are stored for 90 days and then deleted. Please do not share sensitive data or payment card details in the chat.
Providing personal data is voluntary, but in some cases necessary to use certain website features or enter into a contract:
| Purpose | Requirement | Consequence of Not Providing |
| Placing an order | Contractual requirement | Unable to process order and delivery |
| Account registration | Voluntary | No access to account features (order history, quick checkout) |
| Contact form | Voluntary | Unable to respond to inquiry |
| Newsletter | Voluntary | No marketing communications received |
Your personal data may be transferred to the following categories of recipients:
— Payment operators: Stripe, Przelewy24, credit card operators, leasing companies
— Courier and transport companies handling delivery
— IT service providers: hosting, servers, e-commerce systems
— Accounting firm handling bookkeeping
— Providers of analytical and marketing tools: Google, Meta
— AI solution providers supporting customer service
— Public authorities, where required by law
The Controller is not responsible for the privacy policies and data processing practices of third parties. We recommend reviewing their privacy policies.
Some of our service providers are located outside the European Economic Area, including in the United States. This includes in particular:
— Google LLC (Google Analytics, Google Ads)
— Meta Platforms, Inc. (Facebook Pixel, WhatsApp)
— Stripe, Inc. (payment processing)
— AI solution providers
Data transfers to the USA are made on the basis of:
— European Commission implementing decision on the EU-US Data Privacy Framework (for certified entities)
— Standard contractual clauses adopted by the European Commission
We retain your data for the period necessary to achieve the purposes for which it was collected:
| Data Category | Retention Period | Legal Basis |
| Transaction data (invoices, orders) | 5 years from the end of fiscal year | Polish Tax Code, Accounting Act |
| Warranty and complaint data | 6 years from purchase date | Limitation period (Polish Civil Code) |
| Contact form data | Until matter resolved + 3 years | Limitation of claims |
| User account data | Until account deletion + 5 years for transaction data | GDPR + tax regulations |
| Newsletter and marketing | Until consent withdrawal | GDPR Art. 6(1)(a) |
| Analytical cookies | According to cookie settings | User consent |
We do not make decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you within the meaning of GDPR Art. 22.
Analytical and marketing tools may create behavioral profiles for ad personalization purposes, but these do not affect your rights or obligations towards us.
You have the following rights in relation to the processing of your personal data:
Right of access
You can obtain information about whether we process your data and, if so, obtain a copy.
Right to rectification
You can request correction of inaccurate data or completion of incomplete data.
Right to erasure ("right to be forgotten")
In certain circumstances, you can request deletion of your data. This right does not apply where processing is necessary for the establishment, exercise or defence of legal claims or compliance with a legal obligation.
Right to restriction of processing
You can request restriction of processing in certain cases.
Right to data portability
You can receive your data in a machine-readable format.
Right to object
You can object to processing based on legitimate interest, including direct marketing.
Right to withdraw consent
If processing is based on consent, you can withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.
Right to lodge a complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland, www.uodo.gov.pl).
Requests are fulfilled within one month of receipt. In case of complex requests, the deadline may be extended by another two months, of which you will be informed.
The frostbox.pl website uses cookies — small text files stored on your device by your web browser.
| Cookie Type | Purpose | Legal Basis |
| Strictly Necessary | Website functionality, shopping cart, user session, security | Legitimate interest (GDPR Art. 6(1)(f)) |
| Functional | Remembering preferences, language, region | User consent (GDPR Art. 6(1)(a)) |
| Analytical | Google Analytics — statistics, website optimization | User consent (GDPR Art. 6(1)(a)) |
| Marketing | Meta Pixel, Google Ads — remarketing, ad personalization | User consent (GDPR Art. 6(1)(a)) |
On your first visit to the website, we display a banner allowing you to consent or decline to individual categories of cookies. You can change your preferences at any time via the "Cookie settings" link in the footer.
You can also manage cookies in your browser settings. Disabling all cookies may limit website functionality.
Some cookies are set by third parties (Google, Meta). These parties may use them for their own purposes in accordance with their privacy policies:
— Google: https://policies.google.com/privacy
— Meta: https://www.facebook.com/privacy/policy/
The Controller is not responsible for the content and practices of third parties. Use of their services is subject to their own terms and policies.
We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss or destruction. In particular:
— Connection to the website is encrypted (SSL/TLS)
— Passwords are stored in encrypted form
— Payment data is processed by certified operators (PCI DSS)
— We regularly update software and security systems
— Access to data is limited to authorized personnel only
Despite implementing appropriate safeguards, no system of data transmission over the Internet or data storage system is completely secure. The Controller cannot guarantee absolute security of data transmitted over the Internet.
The frostbox.pl website may contain links to third-party websites. The Controller is not responsible for the privacy policies, data processing practices or content of external websites. We recommend reviewing the privacy policies of websites you visit.
This Privacy Policy is governed by Polish law.
Any disputes relating to the processing of personal data shall be resolved by the competent Polish courts, subject to mandatory consumer protection provisions that may grant the right to bring proceedings before courts of the consumer's place of residence.
The Controller reserves the right to amend this Privacy Policy. Changes may result from technological developments, changes in legislation or development of the service offering.
We will inform you of significant changes via a notice on the website or an email (if we have your address). Continued use of the website after publication of changes constitutes acceptance thereof.
We encourage you to periodically review this page. The date of the last update is always visible at the beginning of the document.
For matters related to the protection of personal data, you can contact us:
Email: [email protected]
Phone: +48 71 707 90 25
Address: FIFO Prosta Spolka Akcyjna, ul. Kanonia 9, 50-328 Wroclaw, Poland
