Privacy Policy

1. Scope

This Privacy Policy applies only to the public mamonapp.com website and its pages.

This policy does not describe the processing of data in the MamonApp mobile application. Rules applicable to the mobile application may be set out in a separate document.

2. Controller and contact

The controller of personal data associated with the use of mamonapp.com is:

3. Data we may process

When you use the website, technical information related to your connection to the website may be processed, including in particular:

• the IP address of the device,
• the date and time of the request,
• the address of the requested resource,
• information about the web browser and operating system,
• device information,
• technical information concerning the server response,
• the address of the website from which the user entered the service.

If a user voluntarily provides us with personal data, for example by contacting us by email or through a form available on the website, we process it to the extent necessary to handle the enquiry, conduct correspondence, prepare a response or take action at the user's request.

4. Server logs

When you visit the website, technical information may be automatically stored in server logs or in logs generated by the infrastructure supporting the website.

Logs may include the IP address, date and time of the request, requested resource, browser information, HTTP response code and information necessary to diagnose the operation of the infrastructure.

We use log data to ensure website security, diagnose errors and technical issues, prevent abuse and maintain the proper operation of the infrastructure.

The legal basis for this processing is our legitimate interest in ensuring the security and proper operation of the website pursuant to Article 6(1)(f) of the GDPR.

5. Cookies

The website uses cookies and similar mechanisms for storing information on the user's device.

Necessary cookies

Necessary cookies are used to provide the website's basic functionality and to remember the user's privacy preferences.

This category includes, in particular, the mamon_cookie_consent cookie, which records the user's choice concerning analytics cookies. This cookie is stored for up to 12 months.

Necessary cookies are not used for profiling or personalised advertising.

Analytics cookies

With the user's consent, the website uses Google Analytics 4 to create statistics concerning the use of the website.

Google Analytics is not activated and analytics cookies are not stored until the user has given consent.

Once consent has been given, Google Analytics may use cookies such as _ga and _ga_<identifier>. Their default lifetime may be up to 2 years unless shortened by the service configuration, browser settings or user actions.

Storing information on a user's device or accessing information already stored on that device is carried out in accordance with applicable law, including Article 399 of the Polish Act of 12 July 2024 – Electronic Communications Law (Prawo komunikacji elektronicznej).

6. Google Analytics 4

With the user's consent, we use Google Analytics 4, a service provided by Google Ireland Limited.

Google Analytics enables us to create aggregated statistics about the use of the website, including, among other things:

• the number of users and visits,
• pages visited,
• session duration and flow,
• traffic source,
• approximate location,
• device type,
• operating system and browser type.

We use this data solely to analyse the operation of the website, identify issues and improve its content and usability.

Google Analytics is activated only after the user has given consent. The legal basis for processing in this respect is Article 6(1)(a) of the GDPR.

Consent to analytics does not constitute consent to personalised advertising. In our configuration, advertising storage, advertising-related user data and ad personalisation remain disabled.

Google Analytics 4 uses an IP address at the time of collection, including for deriving approximate location information, but Google states that IP addresses are not logged or stored in Google Analytics.

Data collected through Google Analytics may be processed using Google infrastructure located outside the European Economic Area. Where this occurs, data transfer mechanisms provided for under applicable data protection law are used.

User-level and event-level data available in Google Analytics is retained for 14 months, in accordance with the configuration of our Google Analytics property. This retention setting does not affect aggregated data available in standard Google Analytics reports.

More information about Google's privacy practices: policies.google.com/privacy .

7. Analytics consent and withdrawal

During the first visit to the website, users can decide whether they consent to the use of Google Analytics and analytics cookies.

• "Accept" – gives consent to Google Analytics and analytics cookies;
• "Necessary only" – rejects analytics; Google Analytics will not be activated;
• "Settings" – allows the analytics category to be enabled or disabled independently.

Refusing analytics consent does not limit access to the website's basic functionality.

Consent may be changed or withdrawn at any time. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

8. Data recipients

In connection with operating the website, data may be entrusted or disclosed to entities providing services necessary for its operation, including providers of:

• hosting and server infrastructure,
• IT services,
• infrastructure security and monitoring,
• analytics tools – in the case of Google Analytics, only after appropriate consent has been given.

Data is disclosed only to the extent necessary for the relevant purpose and in accordance with applicable law.

9. Data retention

The mamon_cookie_consent cookie is stored for up to 12 months.

User-level and event-level Google Analytics data is retained for 14 months, in accordance with the service configuration.

Technical server log data is retained only for as long as necessary for security, diagnostics and infrastructure maintenance purposes, taking into account applicable legal requirements and the legitimate need to establish, exercise or defend legal claims.

Data provided when contacting us is retained for the time necessary to handle the matter and, where applicable, for any additional period required by law or reasonably necessary to establish, exercise or defend legal claims.

10. User rights

Where provided for by the GDPR, data subjects have the right to:

• access their personal data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

Data subjects also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) if they believe that the processing of their personal data infringes applicable data protection law.

Privacy-related requests can be sent to gdpr@friggsystems.com.

11. Security

We use appropriate organisational and technical measures intended to reduce the risk of unauthorised access, loss, alteration, destruction or unauthorised disclosure of information under our control.

12. Changes to this Privacy Policy

We may update this Privacy Policy when the way the website operates, the services used, our data-processing practices, analytics configuration or applicable laws change.

The current version of the policy will always be available on mamonapp.com together with the date of its most recent update.