Privacy & Cookie Policy
Last updated: September 2026
1. Data Controller
The controller of your personal data is Centralny Ośrodek Chłodnictwa „COCH” w Krakowie Sp. z o.o., ul. Juliusza Lea 116, 30-133 Kraków, Poland, registered in the National Court Register under KRS 0000307701, NIP: PL 675-000-15-38, REGON: 120714590.
2. Purposes and Legal Bases
We process personal data for the following purposes:
- •performance of contracted testing, training, and certification services (Art. 6(1)(b) GDPR)
- •compliance with legal obligations (Art. 6(1)(c) GDPR)
- •responding to enquiries - legitimate interest (Art. 6(1)(f) GDPR)
- •website analytics and marketing - consent (Art. 6(1)(a) GDPR), given by accepting analytics/marketing cookies
3. Cookies
Our website uses cookies. The full list of cookies used on this site:
| Nazwa | Kategoria | Cel | Czas życia | Dostawca |
|---|---|---|---|---|
| coch_cookie_consent | Niezbędne | Zapis preferencji cookies użytkownika | 1 rok | COCH |
| authjs.session-token | Niezbędne | Sesja zalogowanego użytkownika | 30 dni | COCH |
| _ga, _ga_* | Analityczne | Analiza ruchu na stronie (Google Analytics 4) | 2 lata | Google LLC |
| _gcl_au | Marketingowe | Śledzenie konwersji Google Ads | 3 miesiące | Google LLC |
4. Third-Country Transfers
We use Google LLC services (Analytics, Tag Manager) based in the USA. Data may be transferred to the USA based on Standard Contractual Clauses approved by the European Commission. Analytics and marketing cookies are only active after explicit consent.
5. Your Rights
- •right of access to your personal data
- •right to rectification
- •right to erasure (right to be forgotten)
- •right to restriction of processing
- •right to data portability
- •right to object
- •right to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
- •right to lodge a complaint with the Polish supervisory authority (UODO, uodo.gov.pl)
6. Retention Periods
Data processed under a contract - for the duration of the contract and up to 6 years after its termination (statute of limitations). Consent-based data - until consent is withdrawn. Server log data - up to 12 months.
7. Data Protection Contact
For GDPR-related matters, please contact our Data Protection Officer:
