Privacy policy
Last updated: 14 September 2026
This policy explains how Danske Gas S.A. processes personal data of users of danskegas.com in accordance with the GDPR, and how we use cookies.
01Data controller
The controller of your personal data is:
For data-protection matters you can contact us via our contact form.
02What data we process
We process only the data needed for a specific purpose:
- Contact-form data – name, company, email address and message content.
- Technical data and server logs – IP address, browser type, date/time of visit, pages viewed (for security and diagnostics).
- Website usage data – see the section “Visit statistics and basic measurement”.
- Cookies and browser storage – see the “Cookies” section.
03Purposes and legal bases
We process data on the following bases (Art. 6(1) GDPR):
- handling enquiries – our legitimate interest (f) and steps prior to entering a contract (b);
- site security – legitimate interest (f);
- basic visit measurement – legitimate interest (f), with the right to object;
- Matomo statistics – solely on the basis of your consent (a), which you may withdraw at any time.
05Visit statistics and basic measurement
We perform basic measurement on the server, without cookies, to prepare aggregate reports on website traffic. It operates independently of your choice regarding Matomo analytics. For each view of a public page the server records the page address, language, referring source (for instance a search engine or LinkedIn), device type, country and – from the autonomous system number (AS) to which the IP address belongs – the type of network (a company or institutional network, a telecommunications operator, a data centre). We record an organisation’s name only where the address range is registered to a legal person; names that point to a natural person are not stored. The IP address is processed only in memory at the moment of the request and is neither stored nor passed on; to limit the number of views from one network we use a daily, irreversible hash of the network range. The data are kept in aggregated (daily) form from which the activity of an individual cannot be reconstructed; network recognition relies on DB-IP data (db-ip.com, CC BY 4.0 licence). The legal basis is our legitimate interest (Article 6(1)(f) GDPR) in measuring the audience of our own website and understanding which organisations take an interest in our offer. You may object at any time (Article 21 GDPR) – see “Contact”. We treat the Global Privacy Control or Do Not Track signal sent by your browser as an objection: basic measurement is then not performed. With the Global Privacy Control signal, the consent banner additionally adopts the “Necessary only” choice until you change it yourself.
With your prior consent to the “Analytics” category, we use Matomo On-Premise, installed within the hosting infrastructure used by the controller (Infomaniak Network SA, Switzerland). The purpose is to understand the popularity of our content and assess website usability. We analyse pages visited, page-view timestamps, downloaded documents and clicks on outbound links. The technical information involved is: the visitor identifier from the cookie, device and browser type, screen resolution, referring source and approximate location (country, region) derived from the truncated IP address. The legal basis for processing personal data is your consent under Article 6(1)(a) GDPR; storage of or access to information on your device is governed by Article 399 of the Polish Electronic Communications Law.
We do not send form contents, email addresses, login details or document numbers to analytics. We remove URL parameters that may contain user information. We do not record sessions, replay what you type or associate statistics with a portal account. We do not use measurement to establish visitors’ identities. The customer, investor and employee portal pages are excluded from both measurements.
Matomo stores the cookies _pk_id (13 months), _pk_ses (30 minutes) and _pk_ref (6 months) in your browser. The server processes your IP address when handling a connection; in Matomo measurement the IP address is truncated by its last two bytes before storage, and location is derived from the truncated address. Operating without cookies or truncating an IP address does not in itself mean that all data are anonymous.
Consent is voluntary; refusing it does not restrict access to the website. It is valid for 12 months, for no longer than 365 days after you give or deliberately change it. The necessary record of your choice is kept in browser storage for no more than 365 days; you or your browser may remove it earlier. You may change your choice or withdraw consent at any time through “Privacy settings” in the footer. Once consent expires, Matomo requires your acceptance again.
Withdrawal stops further Matomo measurement and deletes its cookies, while the basic measurement described above continues. It does not affect the lawfulness of earlier processing or automatically delete historical records. Data that we can attribute to you and process solely on the withdrawn consent are subject to erasure in accordance with the GDPR; this does not apply to information that has been effectively and irreversibly anonymised.
Hosting, recipients and processing location: the website, Matomo and basic measurement run on the servers of Infomaniak Network SA in Switzerland under a data-processing agreement. Switzerland lies outside the European Economic Area and is covered by a European Commission adequacy decision (Article 45 GDPR). We do not sell statistical data, pass them to analytics vendors or combine them with data from other websites; we carry out no marketing measurement. Access to data is restricted to authorised persons responsible for the website and statistics.
- Basic measurement data: daily aggregates for 90 days; thereafter monthly aggregates only, containing no personal data.
- Detailed Matomo visit and event data: 90 days; aggregate reports: 13 months.
- Backups: up to 8 weeks from creation; they are used for disaster recovery, after which applicable deletions and retention periods are reapplied.
Subject to the conditions in the GDPR, you have the rights of access, rectification, erasure, restriction of processing and data portability, and the right to object where processing is based on legitimate interests. You may use the controller’s contact details in this policy and lodge a complaint with the President of the Polish Personal Data Protection Office or another competent supervisory authority. If we cannot attribute statistical data to you, we will explain this when handling your request, without collecting additional data solely to identify visitors. We do not use the analytics described here to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
06Recipients
Data may be entrusted to processors only to the extent necessary to provide services to us, under data-processing agreements. The website and its statistics (Matomo and basic measurement) are hosted on the servers of Infomaniak Network SA in Switzerland; our email provider handles messages sent through the form. Access to statistical data is restricted to authorised persons responsible for the website.
07Protection of the contact form and contact buttons
The contact form and the ‘Show contact’ buttons on the product pages are protected by ALTCHA – a short computational task solved by the browser and checked by our server. It runs within our own infrastructure, with no third-party providers and no transfers of data outside the EEA. To limit the number of attempts we process the IP address in hashed form. Once an employee’s contact details have been displayed, we record for 7 days the date, the card identifier and the hash of the IP address. Legal basis: the legitimate interests of the controller (Article 6(1)(f) GDPR) – the protection of employees’ data and of the website.
08Retention
Correspondence is kept for as long as needed to handle the matter and for the limitation period of any claims. Server logs are kept as long as needed for security; portal sign-in logs (email address, IP address) – 12 months, and records of consents given and withdrawn – 3 years. Basic measurement: daily aggregates for 90 days, thereafter monthly aggregates only, containing no personal data. Matomo: detailed visit data 90 days, aggregate reports 13 months. Backups: up to 8 weeks from creation; they serve disaster recovery, after which the applicable retention periods are reapplied. Data processed on the basis of consent – until consent is withdrawn; the record of your choice in the browser expires after 365 days.
09Your rights
You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object, and withdraw consent at any time (without affecting the lawfulness of processing before withdrawal).
You also have the right to lodge a complaint with the supervisory authority – the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.
10Transfers outside the EEA
The website and its statistics are hosted in Switzerland – a country covered by a European Commission adequacy decision (Article 45 GDPR). If we use other providers processing data outside the European Economic Area, this happens only with the appropriate safeguards required by the GDPR (e.g. Standard Contractual Clauses approved by the European Commission).
11Contact
For any personal-data matters contact us via our contact form or by post to our registered office.
12Changes
This policy may be updated. The current version is always available at this address, together with the last-updated date.