HomePrivacy policy

Privacy policy

Privacy policy and cookies for the xtrack.com website  

ver. 2.0. of 28.02.2023  

Including full details on the protection of personal data processed for marketing/contact purposes. 


Respecting the rights and freedoms of persons whose data we process and meeting the obligation resulting from the Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), hereinafter referred to as GDPR, we would like to inform you:


Who is the controller of my personal data? 


The controller of your personal data is XTrack Sp. z o.o. with its registered office in Gdańsk (80-363) at ul. Piastowska 63a, NIP 5840358083, hereinafter referred to as the “Controller”. 


How can I contact the Controller in matters of personal data processing? 


The Controller established a contact point that is supported by the Data Protection Officer. In matters of personal data protection, the Controller can be contacted: 

by traditional mail – send a letter to the Controller’s address (XTrack sp. z o.o., 80-363 Gdańsk, Poland, ul. Piastowska 63a) 

by email to the following address: gdpr@xtrack.com 



For what purpose, what time and whose personal data does the Controller process?



Whose data we process FOR THIS PURPOSE

Legal basis

Processing time

Answering the inquiry sent from the contact form on the website or sent directly to the Controller’s email address 

Details of persons who submitted the inquiry from the contact form

Article 6 section 1 letter f, GDPR 

To reply to the sent inquiry.

Answering an instruction in the XSS request system 

Data of persons who sent instructions via the XSS. 


Article 6 section 1 letter b, GDPR 

For the term of the agreement to perform its subject matter 

Article 6 section 1 letter f, GDPR 

For the duration of the agreement, to perform its subject matter and for the period resulting from the expiration of possible claims. 

Traffic analysis on the website 

Data of the website users who have consented to the use of cookies. The processed information is anonymous – the Controller does not identify persons, but processes indirect information about their activity within the xtrack.com website 

Article 6 section 1 letter a, GDPR 

Up to the time of removing the cookies from the User’s equipment, but not longer than 14 months. 


Who can access my personal data? 


Personal data may be disclosed to public authorities in the scope and for the purposes resulting from the provisions of the generally applicable law, as well as to entities that, on the basis of relevant agreements signed with the Controller, process personal data: 

Does the Controller transfer personal data to third countries? 


With respect to transfer to third countries, the Controller transfers only the information collected by the cookies that are provided by Google LLC (list below) and which are installed on the User’s equipment with their consent. To another extent, personal data are not transferred outside the European Economic Area (EEA). 

What rights can I exercise when my personal data is processed by the Controller? 

You may request the exercise of your rights at any time: 

  1. access to data within the scope specified by the provisions of the GDPR (Article 15 of the GDPR), 
  2. rectification of data (Article 16 of the GDPR), 
  3. request erasure of data if one of the conditions indicated by the provisions of the GDPR is met (Article 17 of the GDPR), 
  4. restriction of data processing in cases specified by the provisions of the GDPR (Article 18 of the GDPR), 
  5. data transfer (Article 20 of the GDPR), 
  6. lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office in Poland (Article 77 of the GDPR), 
  7. object if the data is processed for legitimate purposes pursued by the Controller (Article 21 of the GDPR). 

In addition, if we process your personal data with your consent, you have the right to revoke your consent at any time. A revoked consent does not affect the legality of processing the personal data prior to the date the consent has been revoked. 


Requests should be directed to our contact point. However, the consent may be revoked in any channel of contact with the Controller. 


Is it mandatory to provide personal data? 

Providing personal data is completely voluntary. In some cases, providing personal data is necessary for the performance of the agreement (see: Answering an instruction in the XSS request system above). 

Do you use profiling in the processing of personal data and make decisions in an automated manner?

We do not apply profiling. We do not make decisions in an automated manner. 




The Controller of cookies installed on the User’s equipment during visits on the domain https://xtrack.com 

is XTrack Sp. z o.o. with its registered office in Poland, Gdańsk (80-363), ul. Piastowska 63a. 

Cookies are text files sent by the web server and saved by the web browser in the memory of the equipment on which the service was displayed. Thanks to the cookies, the web pages know that the User is logged in, remember settings, as well as in the case of third party cookies they collect information about the User’s activity in the browser, which allows them to match the advertising message and other content (e.g. news) displayed to the User on various websites. 

Our website uses cookies to facilitate browsing the website, prepare traffic statistics on the website, remember the User’s settings (language of the website) and enable integration with social networks (direct transition from the website to our websites in social networks). 







Google (USA)

Distinguishes users, thanks to which it is possible to use analytical tools to study visits on the Controller’s website 

14 months 


Google (USA)

 Stores session status 

14 months 



Provides functionalities available on the Administrator's website 




1.The Controller (XTrack Sp. z o.o.) does not collect data that would allow unambiguous identification of a person. All collected information is aimed only at correct display of the page (necessary cookies) and analysis of traffic on the home page and individual subpages and not cause consequences, including legal consequences.

2. You can delete or change cookie settings at any time using your web browser settings: 


Do you have any questions?
Contact us!
Go to contact


+48 58 558 46 55

Write to us