Privacy policy

Who is the controller

The data controller is FREI Tomasz Frej, ul. Hutnicza 3, 81-212 Gdynia, Tax ID (NIP) 7393097476. For matters concerning personal data, write to 3d@frei-light.com.

What data we collect

Only what you enter in the form: company, first and last name, e-mail, phone, Tax ID (NIP), description of the inquiry, and files with drawings or models. We also store a hash of your IP address (for spam protection), not the address itself.

The “Quote online” calculator reads the STEP file in your browser. The file reaches us only when you send it using the form.

The calculator prices the first three files without asking for any details. Before it shows the price of the next one, it asks for your full name, e-mail and phone and sends a confirmation link to that address; it shows the price once you click it. We store these details together with the quote results from that tab: file name, material, quantity, lead time, part dimensions and price, also if you do not send an inquiry, plus the date you confirmed the address and a hash of your IP address. The IP hash lets us skip a new link when the same e-mail address was confirmed from the same place in the last 30 days. We also store a thumbnail of the part, a small image from the 3D preview, so that our e-mail notification shows which part it is; we delete it once the notification is sent, at the latest after 2 days. We do not store the file itself. During your visit the browser keeps these details in the tab’s storage (sessionStorage), so it does not ask again for every file, as well as the names and sizes of the files priced without details, to count them. They are deleted when you close the tab.

When you accept an offer or want to negotiate it on the order status page, we store the data from that form: company, Tax ID (NIP), company and delivery address, first and last name, e-mail, phone, comments or your price proposal, and a hash of your IP address.

Why

To prepare a quote, reply to your inquiry and, if you place an order, fulfil it (Art. 6(1)(b) and (f) GDPR). Another basis for contact is the consent you tick in the form (Art. 6(1)(a) GDPR), which you can withdraw at any time.

The contact details and quote result from the calculator are used to respond to your interest in a quote and to ask whether we should prepare a binding offer (Art. 6(1)(b) GDPR, steps taken at your request before entering into a contract, and Art. 6(1)(f) GDPR, our legitimate interest in responding to that interest). We do not send newsletters or advertising to this address unless you sign up separately for news by email (below).

Data from accepting an offer is used to conclude and fulfil the order and to issue a pro forma invoice or an invoice (Art. 6(1)(b) and (c) GDPR).

Do you have to provide data

Providing data is voluntary. However, without an e-mail address and a description of the part, we cannot prepare a quote or reply to your inquiry. Without your name, e-mail and phone the calculator does not show a price; you can still send an inquiry using the form without the calculator.

Who sees the data and files

Only the FREI team that prepares the quote and production. We do not share files with other companies. On request, we sign an NDA before quoting.

Data is also processed, solely on our behalf, by two companies whose services we use: the hosting company Hostinger, which hosts the website on a server in the Netherlands (European Union), and our e-mail provider, because inquiry notifications and our replies are sent by e-mail. Drawing files are not attached to these e-mails. If you consent to Google Analytics, data about visits also goes to Google (details below).

How long

We transfer the inquiry and its files to our quoting system and delete them from the website server 30 days later. In the quoting system we keep them for as long as needed to handle the inquiry and the order, and order documents for as long as the law requires. The same applies to accepting or negotiating an offer: it is removed from the website server 30 days after being transferred to the quoting system. Contact details from the calculator are also transferred to the quoting system and deleted from the website server 30 days after the transfer and the last quote.

News by email

You sign up for FREI Light news (new luminaires, projects, trade fairs) with the separate “News by email” form at the bottom of the page. The quote and inquiry forms do not sign you up for news. We store your e-mail address, your first name (if you give it), the language and the page on which you sign up, the consent text shown next to the box, and your IP address and the time of the click as proof of consent.

Sign-up uses double opt-in: after you send the form, you receive an e-mail with a confirmation link. We send news only after you click that link, and when you confirm, we also store the IP address and the time. Without confirmation you do not receive any news.

The legal basis is your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time with the unsubscribe link in every news e-mail or on the Unsubscribe from news page. Withdrawing consent does not affect the lawfulness of e-mails sent before.

The controller of this data is FREI Tomasz Frej. We transfer sign-ups, confirmations and unsubscriptions to our own system, which sends the news from our e-mail account, without external mailing tools. We delete them from the website server 30 days after the transfer. We keep your address for sending news until you unsubscribe.

Your rights

You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Automated decisions

We do not make decisions based solely on automated processing and we do not carry out profiling. The “Quote online” calculator shows a price that is not an offer; a production engineer prepares the binding quote after checking the documentation.

Server logs

Like every server on the internet, the website server records technical connection logs (IP address, time, page address, browser). They are kept by the hosting company solely for the security and maintenance of the website (Art. 6(1)(f) GDPR). We do not combine them with form data.

Visit statistics

We count visits on our own server, without cookies and without scripts. We count which pages are viewed, where you come from (the address of the referring page or a campaign tag in the link), whether you use a phone or a computer, and the browser language.

To count one person only once a day, the server creates a hash of the IP address and browser with a random key that changes every day. We delete the hashes and the key the next day. Only totals remain, from which no one can be identified. The legal basis is our legitimate interest, namely developing the website (Art. 6(1)(f) GDPR). You can object by writing to 3d@frei-light.com.

Cookies, Google Analytics and Google Ads

Without your consent, the website does not store any tracking cookies on your device. It only remembers your choice from the banner (in browser storage, localStorage), so that it does not ask on every page.

The website is in Polish, English and German. On your first visit we choose the language from your browser settings. When you change the language yourself with the PL · EN · DE switch, we store the strictly necessary cookie lang with the language code (pl, en or de) for one year, so that the next pages open in that language. It contains no data about you and needs no consent, because the language switch cannot work without it (Art. 399 of the Polish Electronic Communications Law). You can delete it in your browser settings or change it by choosing another language.

If you click “Accept”, we enable Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics stores the cookies _ga and _ga_… for 13 months and sends Google information about the pages visited, your device, browser and approximate location. Google Analytics 4 does not store IP addresses. Google signals and ad personalisation are disabled. The legal basis is your consent (Art. 6(1)(a) GDPR and Art. 399 of the Polish Electronic Communications Law).

Data may be transferred to Google LLC in the USA. Google LLC participates in the EU-U.S. Data Privacy Framework, for which the European Commission found an adequate level of data protection on 10 July 2023.

If we run Google Ads campaigns, the banner asks separately about ad measurement. This consent only works together with consent to Google Analytics. When you give it, Google stores the cookies _gcl_… for 90 days and tells us whether a visit from an ad ended with a price being calculated or an inquiry being sent. We do not pass on to Google the content of the inquiry, form data, files or prices. We do not use remarketing or ad personalisation. The provider, the transfer of data to the USA and the legal basis are the same as for Google Analytics.

You can change or withdraw your consent at any time using the “Cookie settings” button in the website footer. When you withdraw consent, we delete the Google cookies from your browser. Order status pages and file download pages never load Google Analytics. We load fonts and libraries from our own server, without external services.

Changes

We announce changes to this policy on this page. Website terms of use