PL EN
← DIGITAL 4.0 home page

Privacy Policy

Last updated: 22 October 2026

1. Controller and contact

The controller of personal data processed in connection with the use of digital40.pl is DIGITAL 4.0 sp. z o.o., ul. Smęgorzyńska 26, 80-298 Gdańsk, Poland, entered in the National Court Register (KRS) under number 0000279346, tax ID (NIP) 5832978931, REGON 220408015.

For privacy matters and to exercise your rights, write to [email protected].

2. Scope

This policy covers the digital40.pl website in its Polish and English versions (digital40.pl/en/). It does not cover data processing in systems deployed for our clients, including solutions based on the Medical 4.0 and Process 4.0 platforms – these are governed by separate agreements with clients.

3. E-mail contact

If you write to the address shown on the website, we process your e-mail address, your name (if provided), the content of your message and any other data you send us.

Purposes and legal bases:

We keep the data for as long as needed to handle the correspondence and then until the limitation period for any claims expires. Providing data is voluntary, but we cannot reply without it.

4. Website operation and security

The website is delivered and protected by Cloudflare, Inc. (Cloudflare Pages and CDN services). Each page view involves processing technical data: IP address, browser and device information, the requested page address and the date and time of the request.

The purpose is to deliver the website, keep it secure (including protection against attacks) and diagnose errors. The legal basis is our legitimate interest (Art. 6(1)(f) GDPR). Technical data is stored for the period resulting from the Cloudflare service settings.

Fonts and images are served from our own server – we do not use third-party font services.

5. Analytics and cookies

We use Google Analytics 4, loaded through Google Tag Manager, to measure how the website is used. Analytics cookies are stored only after you give your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time in the website footer (“Cookie settings”); withdrawal does not affect the lawfulness of processing before it.

Before you decide, or after you refuse consent, cookieless measurement signals may be sent to Google (Google Consent Mode). The legal basis is our legitimate interest in basic traffic measurement (Art. 6(1)(f) GDPR).

Details, including cookie names and retention periods, are described in the Cookie Policy.

6. Recipients and data transfers

Data may be received by service providers that process it on our behalf: Cloudflare, Inc. (hosting and website security), Google Ireland Limited (analytics) and our e-mail service provider. We do not sell personal data.

Cloudflare and Google may also process data outside the European Economic Area, in particular in the USA. Such transfers are based on the European Commission adequacy decision (EU-U.S. Data Privacy Framework) or on standard contractual clauses approved by the European Commission.

7. Your rights

You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time.

To exercise your rights, write to [email protected]. You also have the right to lodge a complaint with the supervisory authority – in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw.

8. Automated decisions and updates

We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

We may update this policy, for example when the tools we use change. The current version, with the date of the last update, is always available on this page.