XO.PL Privacy Policy
We respect the privacy of XO.PL visitors. This page explains what information may be processed when you use the website, why it matters and how to manage your analytics choice.
1. Who is responsible for the data?
The controller of personal data associated with operating XO.PL is MarcoPOLO2000 Marcin Brodziński, ul. Tadeusza Rejtana 20, 41-300 Dąbrowa Górnicza, Poland. Privacy contact: info@xo.pl, phone +48 691 326 318.
2. Website operation and technical logs
When you visit XO.PL, your browser connects to the servers delivering the site. Technical information may be processed to handle requests, including IP address, connection time, requested URL, browser type, response code and diagnostic details. This information may be needed to operate and secure the service, investigate errors and prevent abuse.
The actual scope and retention period of server logs should be verified against the infrastructure configuration and added to this policy. A possible legal basis for processing necessary to operate and secure the service is the controller's legitimate interest (GDPR Article 6(1)(f)), subject to assessment of the circumstances.
3. Google Analytics 4 and cookies
The website uses Google Analytics 4 (measurement ID G-WF664FWB5L) to understand visits and improve content. The website does not display advertising.
We use Google Advanced Consent Mode v2. Consent for analytics cookies is denied by default. However, even without consent, the Google tag may send limited measurement signals to Google without analytics cookies (so-called cookieless pings), including consent status and technical request information. No analytics cookies does not mean no data is transmitted to Google.
Choosing “Accept analytics” allows Google Analytics to use analytics cookies and provide fuller measurements. Choosing “Essential only” refuses analytics cookies, but does not disable the limited signals described above under advanced consent mode.
Your choice is stored locally in the browser using localStorage, under xo-consent-analytics, solely to remember the decision. You can change it using the “Cookie settings” button on the website.
Optional analytics cookies rely on user consent. The legal basis for sending limited signals before consent must be assessed separately under applicable privacy and terminal-equipment rules; implementing Consent Mode does not itself replace any legally required permission.
4. Recipients and international transfers
Analytics-related information may be received by Google and its service providers. Processing by Google may involve transfers outside the European Economic Area. Details, safeguards and retention periods depend on current service terms and the GA4 property configuration.
For more information, see Google's Privacy Policy and Google Consent Mode documentation.
5. How long is information retained?
The consent choice stays in browser storage until changed, website data is cleared or local storage is blocked. Retention in Google Analytics depends on the service settings; server-log retention depends on the infrastructure policy. Before publication, the actual server-log retention periods and GA4 configuration must be added.
6. Your rights
Where personal data is processed, GDPR rights may apply, including — depending on the circumstances — access, rectification, erasure, restriction, objection and data portability. Consent can be withdrawn without affecting processing that was lawfully carried out beforehand. You also have the right to lodge a complaint with the competent supervisory authority, including Poland's Personal Data Protection Office (UODO).
7. Updates
This policy may be revised when services, processing practices or applicable laws change. Draft prepared on 3 November 2026.