Privacy and analytics

Privacy policy

This policy explains how the Royal Coin promotional website handles information when you visit it and use any optional analytics or advertising-measurement service you choose to enable.

Last updated: 28 August 2026

1. Who is responsible

The data controller for this website is AISA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office in Warsaw and postal address at ul. Prosta 70, 00-838 Warszawa, Poland (“we”, “us”, or “Royal Coin”).

The company is entered in the register of entrepreneurs of the National Court Register under KRS 0000968149, with tax identification number NIP 5272999351 and share capital of PLN 5,000. The registry court is Sąd Rejonowy dla m.st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego.

Privacy contact: [email protected].

Google Analytics 4 and Meta Pixel are not downloaded or activated before you select Allow all. The two providers are enabled together for the combined measurement purpose described below. Selecting Deny all does not limit access to the website.

We store your choice and the date of your decision in your browser’s local storage for up to 180 days. This is necessary to remember and respect your choice. The preference record is not sent to Google or Meta.

The web server or hosting provider may process standard request and security-log information, such as IP address, browser type, requested URL, timestamp, and error information, to deliver and protect the website. Server logs are normally deleted after 30 days, unless a particular record must be kept longer to investigate a security incident or comply with law.

3. Optional analytics and advertising measurement

If you select Allow all, we activate both services together to measure audience interest, website use, and campaign performance:

Google Analytics 4

Google Analytics 4 measures visits and interactions, including page URL and title, referral information, approximate location, device/browser and connection information, timestamps, session information, and use of the Notify me button. Google receives technical connection data such as an IP address to provide the service. Google advertising signals and ad-personalization signals are disabled in this implementation.

Meta Pixel

Meta Pixel measures campaign attribution, page views, and use of the Notify me button. Event data may include the page URL, referrer, timestamp, device/browser and connection information, IP address, and identifiers such as _fbp or _fbc. Meta may associate this activity with Meta services and use it as described in its policies and your Meta settings. We do not configure advanced matching or send contact details to the Pixel.

The Notify me button is visual only. It does not request, collect, or submit your name, email address, or phone number.

4. Purposes and legal bases

  • Website delivery and security: our legitimate interests in operating and protecting the website, where applicable under Article 6(1)(f) GDPR.
  • Remembering privacy choices: complying with our legal duties and our legitimate interest in recording and respecting your selections, under Articles 6(1)(c) and 6(1)(f) GDPR as applicable.
  • Audience, website, and campaign measurement: Google Analytics 4 and Meta Pixel are used together for this purpose based on your consent under Article 6(1)(a) GDPR and applicable rules governing cookies and similar technologies.

Providing analytics or advertising-measurement data is not a legal or contractual requirement. You may refuse or withdraw consent without losing access to the website.

5. Cookies, storage, and retention

  • Consent preference: local storage for up to 180 days from your decision.
  • Server logs: normally 30 days, subject to the limited security-incident or legal exception described above.
  • Google Analytics: this site configures Google’s first-party _ga and _ga_* cookies to expire no later than 180 days after they are first set; browsers may impose a shorter limit. GA4 user-level and event-level data is retained for 14 months, with “reset user data on new activity” disabled. Google states that this control does not affect standard aggregated reports; we keep access to those reports only while needed to evaluate the campaign and administer the analytics property.
  • Meta Pixel: Meta may use cookies such as _fbp and _fbc. Their duration and Meta’s retention of Pixel Event Data are controlled by Meta under its current terms and policies; Meta does not provide us with one general Events Manager control that sets a fixed retention period for all Pixel Event Data. This website keeps no separate copy of raw Pixel events. We keep campaign-level reports available to us only while needed to evaluate this pre-launch campaign and administer the advertising account.

6. Recipients and international transfers

Website request data may be received by our hosting and infrastructure providers. If you enable optional measurement, data is received by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, and its affiliates and subprocessors. Google processes Analytics customer data on our behalf under its data-processing terms and processes certain service information under its own privacy terms.

Under the same choice, data is also received by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland, and its affiliates and service providers. For the collection and transmission of Pixel Event Data, we and Meta Platforms Ireland Limited are joint controllers under Meta’s Controller Addendum. Meta is responsible for its subsequent processing under the Meta Privacy Policy.

Google or Meta may process data outside the European Economic Area. Depending on the recipient and transfer, safeguards may include an adequacy decision such as the EU–U.S. Data Privacy Framework where applicable, or European Commission standard contractual clauses. Provider information about these safeguards is available below.

7. Your choice and withdrawal

Use the Privacy settings button in the footer of any page to change your choice. Deny all turns off both services, prevents them from loading on later page views, stops further events on the current page, and removes their accessible first-party cookies. If provider scripts were already loaded, the page reloads to unload them. Withdrawal does not affect processing that was lawful before withdrawal.

8. Your data-protection rights

Depending on your location and the circumstances, you may have the right to access, correct, erase, restrict, or object to processing; receive portable data; and withdraw consent at any time. Withdrawal does not affect processing that was lawful before withdrawal.

Contact us at [email protected]. You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), Poland’s supervisory authority. Where the GDPR permits, you may instead contact the supervisory authority where you habitually live, work, or believe an infringement occurred.

We do not use information collected through this website to make decisions based solely on automated processing that produce legal or similarly significant effects for you.

9. Policy changes

We may update this policy when the website, campaign, providers, or legal requirements change. The date at the top identifies the latest version. A material change to measurement use will trigger a new consent request.