Privacy policy

Controller and contact

The data controller is the owner of the website operating under the Domin Software brand. DSO-IT and Domin Service are earlier names of the same brand. Privacy enquiries can be sent to biuro@dso.biz.pl.

Contact form

An email address and message are required. A name, telephone number, subject and existing-system URL are optional. The form also includes the address of the page from which it was submitted. The message goes directly to the controller's mailbox; the application does not create a separate form record containing its text. The server and mail service may still record technical data such as the IP address, request time, requested resource and browser information where needed to deliver the message, diagnose a fault or protect the services.

Where an enquiry concerns an offer or possible cooperation, its data is used to reply and take steps requested before entering into a contract under Article 6(1)(b) GDPR. Ordinary correspondence, website security, abuse prevention and the possible defence of claims rely on the controller's legitimate interests under Article 6(1)(f) GDPR. The form does not ask for separate consent to process the information needed for a reply.

Privacy choices and necessary technical data

The website uses session cookies and protection against forged form requests. The chosen interface theme and optional accessibility presentation settings are stored locally in the browser, without an identifier or analytics data. When privacy preferences are saved, the system creates a random browser_device_key and records the category choices together with the consent version, acceptance or withdrawal time, language, IP address and user agent. This makes it possible to process a changed decision and demonstrate which choice was recorded. The identifier is not derived from device characteristics and is not used to follow a visitor across other websites. Its cookie is configured for up to five years, although the browser or visitor may remove it earlier.

These necessary mechanisms rely on Article 6(1)(f) GDPR and the exception for information required to provide a service requested by the user under Article 399(3) of the Polish Electronic Communications Law. Consent history is kept for as long as necessary to honour the choice, demonstrate compliance and defend claims, and is then removed when those purposes and applicable limitation periods have ended.

Google Analytics 4 and Google Ads

Google Analytics 4 is configured on the website under measurement ID G-JYR70137CC using advanced Google Consent Mode. The GA4 library loads when a page is opened, but access to browser storage for analytics and advertising remains disabled until the visitor makes a choice. In that state, GA4 neither writes nor reads analytics cookies, although it may send Google a limited cookieless signal containing the consent state and technical request data. Accepting the Analytics category enables analytics storage and allows GA4 to create cookies such as _ga. Refusal keeps storage disabled, while withdrawing consent removes the GA4 cookies managed by the website. Google explains this behaviour in its Consent Mode documentation.

The website also uses the Google Ads tag ID AW-1028923082 to record a successfully submitted contact form as a campaign conversion. The event is sent only after the server has accepted the message and receives a random transaction ID to prevent duplicate counting. That ID contains no name, email address or message content. If the visitor refuses the Marketing category, the tag neither writes nor reads advertising cookies, although advanced Consent Mode may send a limited cookieless conversion signal. After consent, it may use advertising storage, including _gcl_* cookies. The website does not send form content to Google or use it for remarketing.

Consent under Article 6(1)(a) GDPR and Article 399(1) of the Polish Electronic Communications Law is the basis for enabling analytics or advertising storage and full measurement. The choice can be changed at any time through the privacy-settings button in the footer; withdrawal does not affect processing that was lawful before it. The service provider is Google Ireland Limited. Data may also be processed outside the EEA under the mechanisms described in Google's international-transfer information. User- and event-level data in standard GA4 is subject to a retention setting of up to 14 months; aggregated reports may remain available longer.

OpenAI Ads

After the visitor accepts the Marketing category, the website loads the OpenAI Ads measurement pixel ID 3wRwzq7Ep6x2EhRfAcmFZ1. A successfully submitted contact form is then recorded as a lead_created event with a random identifier that limits duplicate counting. The website does not include a name, email address, telephone number or message content in that event. Before consent, the OpenAI library is not downloaded and no event is sent. After consent, the pixel may use __oppref (up to 30 days) and __obref (up to 365 days) cookies to attribute a conversion to an advertisement. Withdrawal blocks further measurement and removes these cookies. Processing is based on consent under Article 6(1)(a) GDPR and Article 399(1) of the Polish Electronic Communications Law. OpenAI and entities involved in providing the service receive the measurement data; technical details are available in the OpenAI Ads documentation.

Recipients

Website hosting, email and backups are provided by JC HOST.PL (Marcin Ćwiertnia JC HOST.PL) as a technical supplier. Google Ireland Limited and the entities involved in providing Google Analytics and Google Ads receive limited cookieless signals and, after consent, full measurement data. After marketing consent, OpenAI and the entities supporting OpenAI Ads also receive measurement data. Data may be disclosed to authorised authorities where the law requires it. The controller does not sell contact-form data.

Retention of correspondence

If cooperation does not begin, the message is deleted after the conversation has ended and it is clear that it is no longer needed. If cooperation begins, correspondence is retained for as long as necessary to carry out the arrangements, meet legal duties and defend claims. Deletion follows when those purposes and applicable limitation periods have ended.

Your rights

You may request access, rectification, erasure or restriction of processing. Portability applies to data processed automatically on the basis of a contract or consent. You may object to processing under Article 6(1)(f) GDPR and withdraw analytics or marketing consent. You may also lodge a complaint with the President of the Polish Personal Data Protection Office. The information required when data is collected is set out in Article 13 GDPR.

Providing data is voluntary, but no reply is possible without an email address and message. The data is not used for automated decisions or profiling that produces legal effects.

Last updated: 14 October 2026.