Documents

Privacy policy

We care about your privacy. Below we explain what data we collect, why we collect it and what rights you have.

Last updated: 12 October 2026

1. Personal data controller

The controller of your personal data is Koda Plus sp. z o.o., Działoszyńska 20/23, 51-503 Wrocław, Poland (NIP: 8952305260 | KRS: 0001247407).

For all matters concerning the protection of personal data you can contact us at hello@koda.plus.

2. What data we collect

  • Contact data: your first name, email address, telephone number and the content of the messages you send us through the contact form or directly.
  • Technical data: IP address, browser and device type, and data about how you use the website, collected automatically for statistical and security purposes.

3. Purposes and legal bases of processing

  • Contact and replying to your enquiry: on the basis of our legitimate interest (Article 6(1)(f) GDPR) and in order to take steps at your request prior to entering into a contract (Article 6(1)(b) GDPR).
  • Performance of a contract: if we start working together, to the extent necessary to perform it (Article 6(1)(b) GDPR).
  • Statistics and development of the site: only with the consent you give in the cookie window (Article 6(1)(a) GDPR).
  • Measuring your visit to the online implementation analysis: on the basis of your consent (Article 6(1)(a) GDPR), and for a submitted analysis also to take steps at your request before entering into a contract (Article 6(1)(b) GDPR).
  • Legal obligations: e.g. tax settlements (Article 6(1)(c) GDPR).

4. Cookies

We use no cookies for advertising or tracking and we do not profile users, so we do not display a cookie consent banner. The site uses only what is strictly necessary.

  • Necessary: the Cloudflare Turnstile protection for the contact form (see section 8), which may set a technical cookie on its own domain purely to tell a human from a bot. Such items are exempt from the consent requirement.
  • Analytics: Cloudflare Web Analytics counts page views and measures page speed. It sets no cookies and stores nothing in your browser, does not profile you and does not track you across other sites – we see only aggregate statistics. It runs on the basis of our legitimate interest (Article 6(1)(f) GDPR) and does not require consent.

You can still manage cookies in your browser settings.

5. Data recipients

We may entrust your data to trusted service providers who support our operations, including providers of hosting, email and analytics tools. These entities process the data solely on our instructions and only to the extent necessary to provide their services.

6. Retention period

We keep the data for as long as is necessary to achieve the purposes for which it was collected: until we have replied and the correspondence has ended, for the duration of the contract, and for the period required by law (e.g. tax law), and in the case of a legitimate interest, until an effective objection is raised.

7. Your rights

In connection with the processing of your data you have the right to: access your data, rectify it, erase it or restrict its processing, data portability, object to the processing, and withdraw your consent at any time (without affecting the lawfulness of the processing carried out before the withdrawal).

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO, ul. Stawki 2, 00-193 Warsaw) if you consider that we process your data unlawfully.

8. Anti-spam protection (Cloudflare Turnstile)

To protect the contact form against spam and automated abuse (bots), we use Cloudflare Turnstile, a service provided by Cloudflare, Inc. Turnstile runs in the background (invisible mode) and does not display CAPTCHA-style puzzles.

For this purpose Turnstile processes limited technical data (including your IP address, browser and device information, and signals about your interaction with the site) in order to tell real users apart from bots. The legal basis is our legitimate interest in keeping the site secure (Article 6(1)(f) GDPR), and Cloudflare acts as our provider (processor).

The detailed rules for processing data within this service are set out in the Cloudflare Turnstile Privacy Policy (Turnstile Privacy Addendum).

9. Online implementation analysis

On the contact page you can go through an interactive implementation analysis for an online store or a wholesale platform. It opens at koda.plus/oferty/… only after you tick the consent to measuring your visit. During the visit we record:

  • The course of the visit: which screens of the analysis you view, for how long and what you click.
  • Technical data: IP address, device type, operating system and browser, and approximate location (city and country determined by Cloudflare from the IP address).
  • Answers and contact details: company name, first name, email and job title together with your answers, but only if you send us the result of the analysis.

We do this to prepare for the conversation and an offer that fits your needs. The visit identifier is kept in your browser's session storage so that reloading the page does not count as a new visit, and your answers are saved in your browser's storage so they are not lost.

You can withdraw your consent at any time by writing to hello@koda.plus. We will then delete the history of your visit. Withdrawing consent does not affect the lawfulness of the measurement carried out before the withdrawal.

10. Contact

For matters relating to the protection of personal data and to this policy, write to us at hello@koda.plus.

Contact us

Remigiusz in a navy shirt and glasses
I use iMessage I use WhatsApp
Adrian in a grey turtleneck and glasses
I use iMessage I use WhatsApp