Privacy Policy of the www.coldex.pl website
Version: 20.05.2026
1. Data Controller
The controller of personal data processed in connection with the use of the www.coldex.pl website is COLDEX Spółka z ograniczoną odpowiedzialnością with its registered office in Gdynia, at Al. Zwycięstwa 96/98, 81-451 Gdynia, entered in the Register of Entrepreneurs of the National Court Register under KRS number 0000974032, NIP 567-189-07-79, REGON 142759315, e-mail address: biuro@coldex.pl.
2. Contact regarding personal data
In matters concerning the processing of personal data, you may contact the Controller:
by e-mail at: biuro@coldex.pl
or in writing to the registered office address indicated above.
3. Scope and sources of data
Depending on how the website is used, we may process the following data:
- data provided in the contact form, in particular first and last name or name, business e-mail address, telephone number and the content of the message;
- data provided in correspondence sent to the e-mail address indicated on the website;
- technical data and information about activity on the website, including data related to the use of cookies and analytical tools. The contact form and contact address are visible on the website, and the existing privacy policy of the website confirms that the website also collects data related to user activity.
As a rule, we receive data directly from the user.
4. Purposes and legal bases of processing
| Purpose of processing | Scope of data | Legal basis | Retention period |
| Handling an inquiry sent via the contact form or to the e-mail address | first and last name / name, e-mail address, telephone number, content of the message, other data provided in correspondence | Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in handling correspondence, providing a response and maintaining contact related to the inquiry; if the contact is aimed at concluding a contract by a natural person – also Article 6(1)(b) GDPR | for the time necessary to handle the inquiry and conduct correspondence, and thereafter for the period necessary to establish, pursue or defend claims, as a rule no longer than 3 years from the end of the contact, unless a longer period results from the circumstances of the case |
| Conducting further telephone or e-mail communication related to the inquiry | contact details, identification data, content of arrangements and correspondence | Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in continuing contact and handling the request; if the contact is aimed at concluding a contract – also Article 6(1)(b) GDPR | for the duration of the contact and the performance of the purpose for which the contact was initiated, and thereafter for the period necessary to establish, pursue or defend claims, as a rule no longer than 3 years from the end of the contact |
| Ensuring the proper functioning of the website, security, detection of abuse and keeping necessary technical statistics | technical data, server logs, information on the use of the website, IP address, online identifiers | Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in ensuring security and the proper functioning of the website | for the period necessary to achieve these purposes, no longer than until the data loses its usefulness, unless further storage is necessary to establish, pursue or defend claims |
| Conducting web analytics using Google Analytics | data concerning the user’s activity on the website, online identifiers, data generated by analytical cookies | Article 6(1)(a) GDPR – the user’s consent expressed through the cookie consent management tool | until consent is withdrawn or analytical data loses its usefulness, but no longer than for the period resulting from the tool settings and the lifetime of cookies |
5. Is providing data mandatory
Providing data in the contact form or in an e-mail message is voluntary, but in practice necessary to handle the inquiry and provide a response.
Providing data collected by analytical cookies is voluntary and depends on the user’s decision expressed in the consent settings.
6. Data recipients
Personal data may be disclosed to entities supporting us in running the website and handling communication, in particular:
- hosting and IT infrastructure providers,
- e-mail service providers,
- entities handling the website or its technical maintenance,
- the provider of the Google Analytics analytical tool,
- entities providing legal or organisational support, if necessary,
- entities authorised under applicable law.
If we use processors, we entrust them with data on the basis of appropriate agreements.
7. Cookies and analytics
The website uses cookies and similar technologies.
Cookies may be used for the following purposes:
- ensuring the proper functioning of the website,
- remembering user choices,
- keeping statistics and analysing traffic on the website.
Cookies that are necessary for the operation of the website may be used without the need to obtain separate consent.
Analytical cookies, including those related to Google Analytics, should be used only after obtaining the user’s consent expressed through the consent management tool.
The user may at any time:
- change cookie settings in their consent banner,
- change browser settings,
- delete saved cookies.
8. Links to social media
The website contains links to profiles on LinkedIn, Facebook and YouTube. These links are visible in the website footer.
The mere display of a page containing such links does not yet mean that the user’s data is automatically transferred to the operators of these social media services to the same extent as in the case of embedded social plug-ins.
After clicking the link, the user is redirected to an external service and from that moment the processing of data takes place in accordance with the rules of that provider. The operators of these services act as separate data controllers with respect to data processed within their own services.
9. Transfer of data outside the European Economic Area
As a rule, we strive to ensure that data is processed within the European Economic Area.
The website uses the Google Analytics tool; data may be transferred outside the European Economic Area, in particular to the United States. In such a case, the transfer takes place using appropriate compliance mechanisms required by the GDPR. Google indicates in its information on data transfers that, where required, it bases transfers on standard contractual clauses or an adequate transfer basis. (Google Privacy Policy)
10. Rights of data subjects
The data subject has the rights set out in the GDPR, in particular:
- the right of access to data,
- the right to rectification of data,
- the right to erasure of data,
- the right to restriction of processing,
- the right to data portability, where applicable,
- the right to object to processing based on Article 6(1)(f) GDPR,
- the right to withdraw consent at any time, if processing is based on consent.
The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office if they consider that the processing of personal data violates the law.
To exercise your rights, you may contact the Controller using the details indicated in this policy.
11. Profiling and automated decision-making
Personal data of website users is not used to make automated decisions concerning them that produce legal effects or similarly significantly affect them.
12. Changes to the Privacy Policy
The Privacy Policy may be updated if the manner in which the website operates, the scope of tools used or the provisions of law change. The current version of the policy is published on the website.