Effective from: 15 October 2026
This policy explains what personal data we process when you use www.kcc.com.pl and contact us, why we process it, how long we keep it and what rights you have.
1. Data controller
The controller of your personal data is KCC Sp. z o.o., ul. Armii Krajowej 116/13, 81-824 Sopot, Poland, NIP (tax ID): PL5840200264, REGON: 002865810, KRS: 0000105889.
For any matter concerning your personal data, contact us by e-mail at kcc@kcc.com.pl, by phone at +48 884 258 114 or in writing at our registered address. We have not appointed a data protection officer.
2. What data we process and why
Contact form. When you send a message through the contact form, we process the data you enter: your name, e-mail address and – if you provide them – your phone number, subject and message. We use it to answer your enquiry and, if you ask for one, to prepare a quotation. The legal basis is the consent you give in the form (Art. 6(1)(a) GDPR) and taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
E-mail and phone. When you write to us or call us, we process your contact details and the information you give us in order to handle your enquiry, prepare a quotation and continue the correspondence. The legal basis is our legitimate interest in responding to messages sent to us (Art. 6(1)(f) GDPR) and, for requests for quotation, taking steps prior to entering into a contract (Art. 6(1)(b) GDPR).
Spam protection. The contact form is protected by Google reCAPTCHA, which analyses information such as your IP address, browser details and how you use the page to tell humans from bots. The legal basis is our legitimate interest in protecting the website against spam and abuse (Art. 6(1)(f) GDPR).
Legal claims. Where necessary, we may process data to establish, exercise or defend legal claims (Art. 6(1)(f) GDPR).
Providing your data is voluntary, but without the fields marked as required we will not be able to reply to your message.
3. How long we keep your data
- enquiries and correspondence – for as long as needed to handle them, and then for up to 3 years after our last contact, unless a contract is concluded, in which case for the period required by law (e.g. tax and accounting rules),
- data processed on the basis of consent – until you withdraw it, but no longer than the period above,
- data processed in connection with legal claims – until the claims become time-barred.
4. Who receives your data
We do not sell your data. It may only be accessed by service providers who help us run the website and our communication, acting on our behalf:
- OVH – website and e-mail hosting,
- Google Ireland Limited – the reCAPTCHA service protecting the contact form,
- CookieYes Limited – the cookie consent management tool,
- companies providing IT and maintenance services to us, to the extent necessary to perform them.
Data may also be disclosed to public authorities where required by law.
5. Transfers outside the European Economic Area
Because we use Google reCAPTCHA, data may be transferred to the United States. Google LLC participates in the EU-U.S. Data Privacy Framework, and transfers are based on the European Commission’s adequacy decision or on standard contractual clauses. More information: Google Privacy Policy.
6. Your rights
In connection with the processing of your personal data, you have the right to:
- access your data and receive a copy of it,
- have your data rectified,
- have your data erased,
- restrict processing,
- data portability,
- object to processing based on our legitimate interest,
- withdraw your consent at any time – this does not affect the lawfulness of processing before the withdrawal.
To exercise these rights, write to kcc@kcc.com.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland) if you believe we process your data unlawfully.
We do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.
7. Cookies
Cookies are small files stored in your browser. Our website does not use analytics, advertising or social media plugins. We only use cookies that are necessary for the website to work:
- to remember the language version you selected,
- to remember your cookie choices (CookieYes),
- to protect the contact form against spam (Google reCAPTCHA).
You can change your cookie settings at any time using the cookie banner on the website or in your browser settings. Blocking necessary cookies may cause some features, such as the contact form, to stop working properly.
8. Links to other websites
Our website contains links to manufacturers’ websites and other services. We are not responsible for the privacy practices of those websites – please read their own privacy policies.
9. Changes to this policy
We may update this policy, for example following changes to the website or to the law. The current version is always available on this page.