Company Documents
Cookie Policy
We explain how STO DOC Serwis uses cookies and similar technologies and how you can manage them.
1. General Provisions
This Cookie Policy (the "Policy") defines the rules for processing personal data and using cookies for users of the STO DOC Serwis website (the "Website").
Cookies are small text files stored on the user's device while using the Website.
The controller of personal data is STO DOC Serwis, operating in Poland and acting in accordance with:
- Regulation (EU) 2016/679 (GDPR).
- Polish Telecommunications Law (Prawo telekomunikacyjne).
- Other applicable EU and Polish laws.
2. Legal Bases
We use technologies on two legal bases under GDPR and Polish law:
| Category | Legal basis (GDPR) | Purpose | Consent required | Consequences of refusal |
|---|---|---|---|---|
| Strictly necessary | Legitimate interest (Art. 6(1)(f)) | Ensure basic functionality and security (e.g., session status, attack prevention). Without them the Website will not work. | No | The Website cannot work correctly; core functions (e.g., contact forms) will be unavailable. |
| Functional / Preferences | Consent (Art. 6(1)(a)) | Remember your settings (e.g., language, region) to improve experience. | Yes | Some functions may work inconveniently or incorrectly. |
| Analytics / Performance | Consent (Art. 6(1)(a)) | Anonymous usage analytics, popular pages, traffic sources; data is aggregated. | Yes | We will not receive anonymous statistics to improve the Website. |
| Marketing / Targeting | Consent (Art. 6(1)(a)) | Show relevant ads for our services on other websites (retargeting), measure campaign effectiveness, build audiences. | Yes | You will not see personalized DOC Serwis ads based on visits to our Website. |
3. Detailed Description of Technologies Used
Below we describe how cookies work depending on your choice in the consent banner.
3.1. When cookies are accepted (full functionality)
If you click "Accept all" in the consent banner, we activate all cookie categories and similar technologies. We collect and process the data described below.
A. First-party cookies (our own)
These cookies are set by the Website and help it function properly.
| Cookie name | Type | Storage period | Purpose |
|---|---|---|---|
| session_id, PHPSESSID (or equivalent) | Necessary | Session | Unique identifier to maintain the user session; ensures security and correct form operation. |
| cookie_consent_status | Necessary | 12 months | Stores your cookie choice (accepted, rejected, custom) and prevents repeated banner display. |
| user_preferences (or equivalent) | Functional | 6 months | Stores technical viewing preferences. |
B. Third-party cookies (partner services)
These cookies are set by third parties and are governed by their policies.
| Cookie / Technology | Provider | Category | Storage period | Purpose and data collected |
|---|---|---|---|---|
| Google Analytics 4 (GA4) | Google LLC | Analytics | See below | Visitor behavior analysis; collects anonymous data about visit source, pages viewed, time on site, device type, approximate location (city/region). |
| _ga | Google LLC | Analytics | 2 years | Distinguishes unique users. |
| _gid | Google LLC | Analytics | 24 hours | Distinguishes users within a day. |
| _ga_[IDENTIFIER] | Google LLC | Analytics | 2 years | Stores session identifier. |
| Meta (Facebook) Pixel | Meta Platforms, Inc. | Marketing | See below | Conversion tracking and retargeting audiences for Facebook and Instagram ads; collects actions on the site, IP address, browser and device info. |
| _fbp | Meta Platforms, Inc. | Marketing | 3 months | Used to deliver ads after visiting our Website. |
| fr (possible) | Meta Platforms, Inc. | Marketing | 3 months | Contains an encrypted Facebook user identifier. |
C. Processing of your personal data (name, phone)
- When you voluntarily submit a contact or service request form, we collect your name and phone number.
- These data are processed separately from cookies, but may be linked in our lawful tools to measure marketing effectiveness (e.g., Google Ads or Meta Ads Manager) in encrypted/hashed form for conversion tracking.
- Used solely to contact you about your request, provide consultation, schedule service, or fulfill an order.
- Stored according to the periods stated in our Privacy Policy.
- Not shared with third parties for their own marketing purposes.
3.2. When cookies are rejected (limited functionality)
If you click "Reject all" in the consent banner:
- Only strictly necessary cookies are stored (session and your refusal status).
- Google Analytics and Facebook Pixel scripts are not loaded or activated.
- No analytics or marketing data are collected via these services.
- You still have access to content and contact forms (name and phone are processed as described above).
- You will not see personalized DOC Serwis ads based on your visit.
4. Data Transfers Outside the EEA
Our partners Google and Meta are headquartered in the United States. Transfers of data outside the European Economic Area (EEA) may occur and are carried out with appropriate safeguards, including:
- Standard Contractual Clauses (SCC) of the European Commission, supplemented with technical and organizational measures.
- Participation in the EU-US Data Privacy Framework, where applicable (recognized as adequate by the European Commission).
More about safeguards from our partners:
- Google — Privacy Policy and service terms.
- Meta — Privacy Policy and data transfer information.
5. Data Retention Periods
- Cookie data: stored for the periods shown in the tables above and automatically deleted after expiry.
- Partner services data: Google and Meta store data according to their policies; for example, Google Analytics retention can be set to 2 or 14 months.
- Personal data (name, phone): stored as long as necessary to handle your request, perform contracts, or comply with legal obligations. Details are in our Privacy Policy.
6. Your Rights and How to Use Them
Under GDPR you have the following rights:
- Right of access.
- Right to rectification.
- Right to erasure ("right to be forgotten").
- Right to restriction of processing.
- Right to data portability.
- Right to object.
- Right to withdraw consent at any time.
How to exercise your rights or change cookie settings:
- On our Website: use the "Cookie settings" link in the footer to change analytics and marketing choices.
- In your browser settings: delete existing cookies or block their storage.
- For specific services: disable personalized ads in Google Ads settings, use the Google Analytics opt-out add-on, and adjust Facebook ad settings.
- Direct request to us: contact us via email or postal address regarding personal data requests.
We will respond within one month. For complex or numerous requests, we may extend this period by two months and inform you.
7. Contact Information
8. Policy Updates
This policy may be updated periodically. The current version is always available on this page.