Cookie Policy

1. About this policy

This Cookie Policy explains how CYFROSEC PROSTA SPÓŁKA AKCYJNA (“CyfroSec”, “we”, “us” or “our”) uses cookies and similar technologies on cyfrosec.com and the web interfaces through which authorised users access CyfroSec services (together, the “Digital Properties”).

CyfroSec has its registered office at ul. Józefa Marcika 6, 30-443 Kraków, Poland and is entered in the Register of Entrepreneurs of the National Court Register under KRS 0001250469, NIP 6793369771.

This policy should be read with our Privacy Policy at https://www.cyfrosec.com/privacy/.

2. What cookies and similar technologies are

Cookies are small data files stored on or read from a computer, telephone or other terminal device when a website or online service is used. Similar technologies include local storage, session storage, software-development-kit identifiers, pixels, tags and other mechanisms that store information on, or access information from, a terminal device.

Cookies may be set directly by CyfroSec (“first-party cookies”) or by another provider used on the Digital Properties (“third-party cookies”). Session cookies normally expire when the browser is closed. Persistent cookies remain until their stated expiry date, until they are deleted, or until they are replaced by the provider.

3. Information processed

Depending on the technology and your choices, cookies and similar technologies may process:

• cookie, consent or device identifiers;
• IP address and approximate location derived from the IP address;
• browser, operating system, device, language and time-zone information;
• authentication, session and account-security information;
• pages, screens and functions viewed, referral source, timestamps and interaction events;
• performance, diagnostic, error and security information;
• interface and preference settings; and
• analytics, campaign or attribution information where the relevant technology is enabled with consent.

4. Cookie categories

Strictly necessary cookies. These technologies are necessary to transmit communications, provide a service expressly requested by you, protect the Digital Properties or remember your consent choices. They may support authentication, session continuity, load balancing, fraud prevention, security controls, account routing and consent-preference storage. They are always active because the relevant Digital Property or requested function may not operate correctly without them.

Preference and functionality cookies. These technologies remember optional choices, such as language, theme or interface settings. They are used only where enabled and after consent where consent is required. Refusing them may prevent an optional preference from persisting.

Analytics and performance cookies. These technologies help us measure use, identify errors and understand performance or user journeys. Where Metricool or another non-essential analytics provider is enabled, it is activated only after your consent.

Marketing and attribution cookies. These technologies may measure campaigns, attribute visits, limit repeated advertising or support marketing across websites. CyfroSec activates such technologies only where they are actually deployed, identified in the cookie register and covered by valid consent.

Third-party and embedded-content technologies. An embedded video, support widget, identity service, source-control integration or other optional function may allow a third party to store or access information on your device. Non-essential third-party technologies are activated only after any required consent. A third party may act as a separate controller for its own processing.

5. Cookie register

The current cookie register is displayed below. It forms part of this Cookie Policy and identifies the name, provider, purpose, category, data or identifier used, whether the technology is first-party or third-party, duration, consent status and available provider information.

The register is reviewed whenever a material website, application or provider change is deployed. The absence of an optional category from the register means that CyfroSec does not currently represent that a technology in that category is deployed.

6. Consent and legal basis

Where required by Article 399 of the Polish Electronic Communications Law and applicable data-protection law, non-essential technologies remain disabled until you make an affirmative choice. You may accept all optional categories, reject them or select individual categories. Optional categories are not preselected.

Where cookie-derived information constitutes personal data, processing associated with non-essential technologies is ordinarily based on consent under Article 6(1)(a) GDPR. Processing connected with strictly necessary technologies may be based, as applicable, on performance of a contract, compliance with a legal obligation or CyfroSec’s legitimate interest in delivering and securing the Digital Properties. CyfroSec does not rely on legitimate interests as a substitute for consent where consent is legally required to store or access information on your device.

7. Managing and withdrawing consent

You may accept, reject or adjust optional categories through the consent interface shown when you first visit the relevant Digital Property. You may later change or withdraw your choice at any time using the “Cookie settings” control available in the footer of every page.

Withdrawing consent is as easy as giving consent and does not affect processing carried out lawfully before withdrawal. Rejecting optional technologies will not prevent access to core website content or the principal platform functions, although an optional preference, embedded feature or analytics-dependent function may be unavailable or may work differently.

You may also delete or block cookies through your browser or device settings. Browser-level blocking may remove stored choices or prevent requested or strictly necessary functions from operating correctly.

8. Recipients and international transfers

Cookie-related information may be processed by providers that host, deliver, operate or secure the Digital Properties, manage consent, provide authentication or embedded functions, or provide analytics and marketing services after consent. The provider, purpose and duration are identified in the cookie register.

Some providers may process personal data outside the European Economic Area. Where this occurs, CyfroSec uses a lawful transfer mechanism, such as an adequacy decision or the European Commission’s Standard Contractual Clauses, together with supplementary measures where appropriate. Further information is available in our Privacy Policy and Subprocessor Notice.

9. Retention

Session cookies expire when the relevant session or browser is closed, subject to their technical design. Persistent technologies remain for the period identified in the cookie register or until deleted. CyfroSec does not intentionally set a duration longer than reasonably necessary for the relevant purpose.

Consent records and limited preference or suppression information may be retained for as long as necessary to demonstrate and respect your choice, resolve disputes and protect legal claims.

10. Your rights

Where cookie-related information constitutes personal data, you may have rights of access, rectification, erasure, restriction, objection, portability, withdrawal of consent and complaint to a supervisory authority. Further information is available in our Privacy Policy.

11. Changes to this policy

We may update this Cookie Policy when technologies, providers or applicable law change. The current version and date will be published on this page. Where a material change affects an optional technology or the purpose for which consent was obtained, we will request new consent where required.

12. Contact

CYFROSEC PROSTA SPÓŁKA AKCYJNA
ul. Józefa Marcika 6, 30-443 Kraków, Poland
Privacy email: privacy@cyfrosec.com