Skip to content
Koltex BM
— Legal information

Privacy & cookie policy

This document explains how we process the personal data of people using our website and how we use cookies. We value transparency — below you will find the information required by the GDPR and applicable telecommunications law.

Last updated: 7 June 2026

1. Data controller

The controller of your personal data is the company whose registration details are shown below and in the site footer.

For any matter regarding the processing of personal data or the exercise of your rights, you can contact us at the e-mail address below or by post to our registered address.

Data controller
Koltex BM Sp. z o.o.
Rozrywka 45
31-419 Kraków
NIP 678-29-55-844 KRS 0000238157 REGON 120080865 koltex@koltex.pl

2. What data we process and why

The scope of data processed depends on how you use the website. When you use the contact form, we process the data you provide yourself, along with technical data related to the security of the submission.

Through the contact form we process:

  • full name — to identify the sender of the enquiry (basis: Art. 6(1)(b) and (f) GDPR);
  • e-mail address — to respond to your enquiry (Art. 6(1)(b) and (f) GDPR);
  • phone number and company name — provided optionally, for smoother contact (Art. 6(1)(a) and (f) GDPR);
  • message content and selected topic — to handle the enquiry (Art. 6(1)(b) and (f) GDPR);
  • IP address and submission date — processed to ensure security and prevent abuse (Art. 6(1)(f) GDPR).

Ticking the consent checkbox on the form is voluntary but necessary to send an enquiry — without it we are unable to respond.

3. Data retention period

Data submitted via the contact form is kept for as long as needed to handle the enquiry and any further correspondence, and afterwards — for the period of limitation of claims, or until consent is withdrawn where processing was based on it.

Messages sent through the form are additionally stored in our system (correspondence log) for handling and accountability purposes. These records are deleted automatically after 24 months from submission, unless removed earlier at your request.

Data processed on the basis of our legitimate interest (e.g. ensuring security) is deleted once that interest ceases, or when you raise an effective objection.

4. Recipients and processors

Your data may be entrusted to trusted entities that support us in running the website and handling correspondence — only to the extent necessary and under appropriate agreements. These include in particular our hosting and e-mail providers.

On the website we also use services of Google Ireland Limited / Google LLC (reCAPTCHA, Google Maps, and — where you consent — analytics tools and Google Ads marketing tools, including conversion measurement and remarketing). Some of these services may involve transferring data to countries outside the European Economic Area (including the USA). Google declares that it applies standard safeguards for such transfers (standard contractual clauses, the Data Privacy Framework).

5. Your rights

In connection with the processing of your data, you have the following rights:

  • the right to access your data and obtain a copy of it;
  • the right to rectification (correction) of your data;
  • the right to erasure (the “right to be forgotten”);
  • the right to restrict processing;
  • the right to object to processing based on legitimate interest;
  • the right to data portability;
  • the right to withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal;
  • the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you consider that the processing infringes the law.

To exercise the above rights, contact us at the e-mail address given in the “Data controller” section.

6. Cookies

Cookies are small text files stored on your device while you use the website. We use them so the site works correctly and securely and — with your consent — so we can improve it and offer additional features.

We group cookies into the following categories:

Category Purpose Basis
Necessary Provide the basic operation and security of the site: maintaining the session, protection against attacks (CSRF token) and the reCAPTCHA mechanism protecting forms against spam. Legitimate interest — always active
Analytics Help us understand how visitors use the site (e.g. Google Analytics) so we can improve it. The data is statistical in nature. Consent — off by default
Functional Enable additional features, e.g. displaying the embedded Google Map on the contact page. Consent — off by default
Marketing Used by Google Ads to measure ad performance (conversions) and for remarketing, i.e. showing relevant ads across the Google network. Consent — off by default

Detailed list of cookies

Below we list the specific cookies used on the website. Third-party (Google) cookies appear only after the relevant consent is given; retention times are approximate and may change on the provider’s side.

Name Provider Purpose Retention Category
koltex-bm-session Koltex BM (first-party) Maintains the user session and keeps the site working consistently. Session (up to 2 hrs) Necessary
XSRF-TOKEN Koltex BM (first-party) Token protecting forms against CSRF attacks. Session (up to 2 hrs) Necessary
_GRECAPTCHA Google reCAPTCHA mechanism — risk assessment and form spam protection. About 6 months Necessary
_ga Google Google Analytics — distinguishes unique users. 2 years Analytics
_ga_* Google Google Analytics 4 — maintains measurement session state. 2 years Analytics
_gid Google Google Analytics — distinguishes users within a 24-hour window. 24 hours Analytics
NID / other Google cookies Google Google Maps — remembers preferences and secures the embedded map. About 6 months Functional
_gcl_au Google Google Ads (Conversion Linker) — attributes conversions to ad clicks. About 3 months Marketing
IDE / test_cookie Google (doubleclick.net) Google Ads remarketing — ad selection and performance measurement. Up to about 1 year Marketing

Your consent choices are stored in your browser’s local storage (localStorage), under the keys consent_decided, consent_analytics, consent_functional and consent_marketing — these are not cookies and are not sent to the server.

On your first visit we show a banner where you can accept all categories, choose only the necessary ones, or customise your settings. You can change your choice at any time by clicking “Cookie settings” in the site footer.

You can also delete and block cookies in your browser settings. Restricting necessary cookies may, however, affect the correct operation of the site.

7. Changes to this policy

We may update this policy, e.g. due to changes in the law or the scope of our services. The current version is always available on this page, and the date of the last change is shown at the top of the document.