Personal data and cookies
Privacy policy.
Here we describe what data we collect, why, how long we keep it and what rights you have.
1. Who is responsible for your data
Our three companies are joint controllers of your data. The correspondence address of each of them is ul. Prymasa Stefana Wyszyńskiego 85, 41-940 Piekary Śląskie, Poland.
- Dominopack Folia A. Wieczorek sp.k., NIP 6263021988, REGON 364549936,
- Dominopack Dominik Wieczorek, NIP 5472065653, REGON 241614860,
- Dominotrans sp. z o.o., NIP 4980265493, REGON 364262643.
The companies jointly determine the purposes and means of processing. You can exercise your rights against each of them.
For personal data matters, contact Dominik Wieczorek at biuro@dominopack.pl or the postal address above.
This policy covers dominopack.pl in all language versions and tuleje-tekturowe.dominopack.pl. The sklep.dominopack.pl shop has its own privacy policy.
2. What data we collect, why and how long we keep it
An enquiry from the form goes through the n8n automation to our CRM system (Odoo), where the sales team handles it. If that fails, we receive it by e-mail. The sales team may direct smaller enquiries to our shop. Your address then goes to GetResponse, from which we send an invitation to create an account.
| Purpose | What data | Legal basis (GDPR) | How long |
|---|---|---|---|
| Answering your enquiry, quotation, offer | E-mail or phone, full name, company, message, product parameters, attachment up to 8 MB, address of the page with the form, visit source (referring page, UTM, gclid) | Art. 6(1)(b) (steps before a contract) and (f) (contact on business matters) | 3 years from the last contact |
| Copy of your enquiry to your e-mail | E-mail, form content | Art. 6(1)(f) | As above |
| Protecting forms against spam | SHA-256 hash of the IP address and e-mail, without raw addresses. Enquiries classed as spam go to the CRM archive | Art. 6(1)(f) | IP hash: 1 hour. E-mail hash: 1 day. We delete hashes on the next enquiry after this time. Archive: 12 months |
| Recruitment (CV sent by e-mail) | Data from your CV and message | Art. 6(1)(c) in conjunction with Art. 22¹ of the Polish Labour Code. Art. 6(1)(a) for additional data and future recruitment | Until the end of recruitment, and with your consent 12 months |
| Website analytics, after consent | Cookie identifiers, IP address, pages visited, clicks, course of the visit | Art. 6(1)(a) | Until consent is withdrawn. Google Analytics: up to 14 months. Clarity: recordings 30 days, labelled recordings and click data 9 months. |
| Measuring ads, remarketing and company recognition, after consent | Cookie identifiers, IP address, pages visited, events | Art. 6(1)(a) | Until consent is withdrawn. At providers according to their rules. |
| Google map, after clicking “Show map”, and YouTube video, after clicking play | IP address, device data | Art. 6(1)(a) | According to Google rules |
| Consent register | Random identifier, chosen categories, language, date. No IP address | Art. 6(1)(c) in conjunction with Art. 7(1) | 3 years from the expiry of consent |
| Server logs | IP address, date, page address, browser data | Art. 6(1)(f) | According to cyber_Folks hosting settings |
| Establishing and defending legal claims | Data from the purposes above that is needed in the matter | Art. 6(1)(f) | Until the limitation period expires |
| Shop invitation for smaller enquiries | E-mail, first name, enquiry number, registration code | Art. 6(1)(f) | Until the account is created, at most 12 months |
3. Cookies and tools activated after consent
We turn on analytics and marketing cookies only after you consent. You can decline them with one click in the banner, and the site works the same. You can change your consent at any time using the “Cookie settings” link in the footer.
| Tool | Category | What for | Cookies | Duration |
|---|---|---|---|---|
| Consent banner (CookieConsent, our server) | Necessary | Remembers your choice | cc_cookie | 182 days |
| Google Analytics | Analytics | Visit and click statistics | _ga, _ga_* | Up to 2 years, in Chrome up to 400 days |
| Microsoft Clarity | Analytics | Recording the course of a visit, such as scrolling and clicks | _clck, _clsk | According to Microsoft rules. Clarity also uses the third-party cookies CLID, MUID, MR, ANONCHK and SM. |
| Google Ads | Marketing | Measuring ad effectiveness | _gcl_au | 90 days |
| Meta Pixel | Marketing | Measuring ads and reaching people who have visited the site | _fbp | 90 days |
| Albacross | Marketing | Recognising a company by IP address and technical data | nQ_cookieId, nQ_userVisitId | nQ_cookieId: 1 year. nQ_userVisitId: for the duration of the visit |
4. Who we share data with
Data goes to companies that run our website, forms, e-mail and advertising for us. They act under data processing agreements. Our marketing agency also handles analytics and advertising.
| Provider | What it does | Registered office |
|---|---|---|
| cyber_Folks S.A. | Website hosting and form handling | Poland |
| n8n GmbH | Automation that passes enquiries to the CRM | Germany |
| Odoo S.A. | CRM and sending the copy of your enquiry | Belgium |
| Microsoft Ireland Operations Ltd | Microsoft 365 e-mail, Clarity | Ireland |
| Google Ireland Ltd | Analytics, Ads, Tag Manager, map, YouTube | Ireland |
| Meta Platforms Ireland Ltd | Meta Pixel | Ireland |
| Albacross Nordic AB | Recognising a company by IP address | Sweden |
| GetResponse S.A. | Sending the shop invitation for smaller enquiries | Poland |
After you consent, Albacross Nordic AB (Malmskillnadsgatan 44a, 111 57 Stockholm, Sweden) processes the IP address of your device and technical data to link a visit to a company. It also stores the domain entered in a form. It uses the data in its own database independently, as a controller, to develop its Intent service and for advertising aimed at companies. It may pass the data to external data providers. Contact: contact@albacross.com, details in the Albacross privacy policy.
Some providers may transfer data to the USA and other countries outside the EEA. The basis is then the European Commission decision on the EU-US Data Privacy Framework or standard contractual clauses.
5. Your rights
You have the right to:
- access your data,
- have it rectified,
- have it erased,
- restrict processing,
- data portability, where the basis is consent or a contract,
- object, where the basis is our legitimate interest,
- withdraw consent at any time, without affecting earlier processing.
To exercise these rights, write to biuro@dominopack.pl. You can withdraw your consent to cookies using the “Cookie settings” link in the footer.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland.
6. Do you have to provide your data
Providing data is voluntary. The form requires an e-mail address or phone number because we cannot answer your enquiry without them. The other fields help us prepare a quotation.
We do not make decisions with legal effects on you solely by automated means. The spam filter automatically moves suspicious enquiries to the CRM archive. After you consent, marketing tools may tailor ads based on the pages you visited.
7. Changes to this policy
We change this policy when our tools or the law change. Last updated: 31 October 2026.