Version: 27/10/2025
TRYGO (hereinafter – “we”, “us”, “our”), registered at Poland, Gdańsk, Hallera 225, acts as the data controller within the meaning of Art. 4(7) GDPR. We respect your privacy and process personal data in accordance with the General Data Protection Regulation (GDPR), local data protection laws, and other applicable legislation.
Contact: reg@trygo.io.
1. What data we collect
We only request your email address (e.g., for subscription, registration, or contact forms).
Additionally, minimal technical data may be processed automatically when you use our site, strictly necessary for security and operation (e.g., IP address, log events). See also the “Cookie Policy” section.
2. Purposes and legal bases of processing
We process data on the following grounds:
- Performance of a contract / pre‑contractual steps (Art. 6(1)(b) GDPR) – providing services, maintaining accounts, communication.
- Legitimate interests (Art. 6(1)(f) GDPR) – ensuring security, preventing abuse, improving and analyzing the service.
- Consent (Art. 6(1)(a) GDPR) – sending newsletters or optional cookies, only when you provide explicit consent.
- Legal obligations (Art. 6(1)(c) GDPR) – compliance with accounting, tax, or regulatory duties.
3. Data retention
We keep data only as long as necessary for the purposes described:
- Email/contact data – until you withdraw your consent or object, plus [12 months].
- Security logs – [90–365 days].
After that, data is deleted or anonymized.
4. Data sharing and recipients
We may share data with:
- Hosting and infrastructure providers.
- Email service providers.
- Legal or regulatory authorities when required by law.
All processors act under a Data Processing Agreement (DPA).
5. International transfers
If data is transferred outside the EEA, we apply safeguards such as Standard Contractual Clauses (SCCs), transfer impact assessments, and additional technical measures.
6. Your rights (GDPR)
You have the right to:
- Access your data;
- Rectify inaccurate data;
- Erase data (“right to be forgotten”);
- Restrict processing;
- Data portability;
- Object to processing (including direct marketing);
- Withdraw consent at any time (without affecting the lawfulness of prior processing);
- File a complaint with a supervisory authority (e.g., UODO in Poland or your local regulator).
Send requests to: reg@trygo.io. We usually reply within 30 days.
7. Security
We implement organizational and technical measures (HTTPS/TLS, encryption, access controls, backups, logging). However, no system is 100% secure.
8. Children
Our services are not directed to individuals under [13/16] years of age. If you believe a child provided us with data, please contact us for deletion.
9. Third‑party links
Our website may link to external websites. We are not responsible for their privacy practices.
10. Policy changes
We may update this Policy occasionally. The new version will be posted with the update date. For major changes, we may notify you directly.
11. Contact
Controller: TRYGO, Poland, Gdańsk, Hallera 225.
Privacy email / DPO: reg@trygo.io