1. Who we are (Data Controller)
| Company | DR-Online sp. z o.o. |
|---|---|
| Address | Aleje Jerozolimskie 155/U3, 02-326 Warszawa, Polska |
| NIP | 5223068517 |
| REGON | 365072519 |
| kontakt@dr-online.pl |
Throughout this document “we”, “our” or “DR-Online” refers to the company above, which determines the purposes and means of processing your personal data in connection with the informational website for our mobile game Spaceship Builder.
2. How we collect personal data
| Source | Examples of data | Purpose & legal basis |
|---|---|---|
| Contact / support forms | Name, e-mail, message content | Respond to your enquiry (GDPR Art. 6 (1)(b)) |
| Server logs | IP, date/time, URL, browser headers | Security & site operation (Art. 6 (1)(f)) |
| Cookies & analytics (Google Tag Manager, Google Analytics 4) |
Pseudonymous IDs, device info, events | Traffic measurement & optimisation (Art. 6 (1)(a) consent or (f) legitimate interest) |
3. Cookies
| Type | Example cookie / lifetime | Function |
|---|---|---|
| Essential (1st-party) | wordpress_logged_in_, cookieConsent (session – 1 yr) | Site operation, preference storage |
| Analytics (3rd-party) | _ga (2 yr), _ga_* (90 d), _gid (24 h) | Google Analytics 4 statistics |
| Tag-container | gtm_debug (session) | Loads GTM tags |
You may refuse non-essential cookies via the banner or your browser without losing access to any content.
4. Google Tag Manager & Google Analytics 4
GTM itself stores no personal data; it only loads measurement scripts. Google Analytics 4 collects usage data with IP-anonymisation in the EU. Data may be transferred to Google LLC in the USA under the EU–US Data Privacy Framework or Standard Contractual Clauses. Opt-out options:
- Reject analytics cookies in the banner.
- Install the GA opt-out browser add-on.
5. Legal bases
- Contract / enquiry fulfilment – Art. 6 (1)(b)
- Legal obligations – Art. 6 (1)(c)
- Legitimate interests (security, analytics) – Art. 6 (1)(f)
- Marketing / analytics cookies – Art. 6 (1)(a) where consent is required
6. Data retention
| Category | Period |
|---|---|
| Enquiry emails | 24 months after last reply |
| Server logs | 90 days (longer if investigating abuse) |
| Cookies | Up to lifetime shown in §3 or until deletion |
| GA4 reports | Aggregates 26 months; raw events as per GA settings (14 months) |
7. Recipients / international transfers
- Hosting, e-mail and analytics providers process data under Art. 28 GDPR contracts.
- Legal or regulatory bodies where required.
- Transfers outside the EEA rely on adequacy decisions or SCCs with supplementary safeguards.
8. Your rights
You may at any time:
- Request access, rectification or erasure of your data.
- Restrict or object to processing based on legitimate interests.
- Receive a copy of data you provided (portability).
- Withdraw consent without affecting prior lawful processing.
- Lodge a complaint with the Polish DPA (UODO).
Send requests to kontakt@dr-online.pl. We reply within one month.
9. Security measures
We use TLS encryption, access-control policies, regular software updates and network-level protections to guard data against loss, misuse or unauthorised access.
10. Changes to this policy
We may update this notice to reflect legal or technical changes. The “Last updated” date will change accordingly. Significant changes will be announced on this page and, where appropriate, by e-mail.
Questions? Contact us at kontakt@dr-online.pl or the postal address in §1.