Terms and privacy policy

Version of 20 October 2026. Applies to the kol.ski website, its contact form and consultation booking. This is a translation; the Polish version prevails.

Privacy policy

Who is responsible for your data

The controller is Kol.ski sp. z o.o., ul. Twarda 44, 00-831 Warsaw, Poland, KRS 0001248317, NIP (tax ID) 5273223575. For any personal data matter, write to hi@kol.ski. We have not appointed a data protection officer.

What we process and why

• Contact form: your name, an email address or a phone number (or both), a company name if you give one, the message, and the time, language and page address the form was sent from. We use them only to answer your message and continue the conversation.
• Email: if you write to hi@kol.ski, we process your address and message for the same purpose.
• Consultation booking: if you book a free consultation through our calendar, we process your name, email address, the chosen time and anything else you enter in the booking form (for example a company name and the topic). We use them to arrange and hold the conversation and to continue it afterwards.
• Technical data: the server that delivers the site records the IP address, browser type and request time. This keeps the site secure and working.

The legal basis is our legitimate interest (Article 6(1)(f) GDPR): handling enquiries, keeping the site secure, and establishing, exercising or defending legal claims. If your message or consultation booking concerns an offer or a contract, the basis is also steps taken before entering into a contract (Article 6(1)(b) GDPR).

Giving your data is voluntary, but without a name, a message and one way to reach you we cannot reply. Please do not put sensitive data (for example about health), passwords or other people's data in the form.

How the form works

1. Your message is encrypted in your browser before it leaves it.
2. The encrypted message goes to a queue in a database in the European Union. The database provider has no key and cannot read it.
3. Our server collects the message, decrypts it and checks it.
4. We save the message in the company's internal, encrypted enquiries base and delete it from the queue straight away.

We do not send form messages by email and do not pass them to outside companies in readable form.

How consultation booking works

The booking button leads to a booking page in Google Calendar (google.com domain), which we provide through our Google Workspace account. The data from the booking form goes into our calendar, and Google sends you an invitation, a confirmation and reminders by email. The meeting takes place in Google Meet; we do not record it without your consent. The booking page and Google Meet run outside kol.ski: they use Google cookies and are subject to the Google privacy policy. You can cancel or reschedule using the link in the confirmation.

Who has access

• Authorized people acting on behalf of Kol.ski sp. z o.o. who need access to the data to handle a message.
• Cloudflare, Inc. (United States) as a sub-processor — provider of the site hosting and content delivery network (Cloudflare Pages); it processes the technical data of requests (IP address, headers) under a data processing agreement.
• Google Cloud Poland Sp. z o.o. and other Google group companies as sub-processors — provider of the queue database (Firebase, Belgium region) and of our email, calendar and video calls (Google Workspace: Gmail, Google Calendar, Google Meet). Only encrypted content reaches the queue; Google processes booking data on our behalf under a data processing agreement.
• Dynalist Inc. (Canada) — provider of Obsidian Sync, which synchronizes our enquiries base. Content is end-to-end encrypted, so the provider cannot see it.

We do not sell data or share it for marketing.

Transfers outside the European Economic Area

The providers above may also process data outside the EEA. For transfers to the United States, Google LLC takes part in the EU–US Data Privacy Framework; in other cases Google uses standard contractual clauses; Cloudflare, Inc. also takes part in the EU–US Data Privacy Framework, and its data processing agreement includes standard contractual clauses. Canada is covered by a European Commission adequacy decision for commercial organizations subject to PIPEDA; Dynalist Inc. declares compliance with that act.

How long we keep data

• Messages and contact details: for the duration of the conversation and 12 months after the last contact. If we sign a contract, longer — for as long as the law requires and until claims expire.
• Consultation bookings: the calendar entry and the booking form data are kept like messages, for the duration of the conversation and 12 months after the last contact.
• The encrypted message in the queue: deleted as soon as it is saved in the enquiries base, usually within a few seconds. If saving fails, our server deletes it automatically after 7 days.
• The technical delivery status (no content, no contact details): 24 hours.
• After an enquiry is deleted, its earlier encrypted versions may remain in the Obsidian Sync version history for up to 12 months, after which they are deleted automatically.
• Server technical data: we do not collect or analyze it ourselves. The hosting provider keeps it for the period set by its own rules.

Your rights

You have the right to access your data and have it corrected. In the cases set out in the GDPR you can also ask for it to be erased, for its processing to be restricted, or to receive it in a portable form. Where we process data on the basis of legitimate interest, you can object to that processing. Just write to hi@kol.ski. You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw).

We make no automated decisions and do no profiling.

Cookies and browser storage

The site uses no cookies, analytics or tracking scripts. Your browser's storage holds only the chosen theme (light, dark, system) and the animation pause setting — saved only when you change them yourself, and only to remember them. These never leave your device. The consultation booking page and Google Meet are Google services outside kol.ski; Google's cookies and privacy policy apply there.

Terms

Service provider

The kol.ski website is run by Kol.ski sp. z o.o. (limited liability company), ul. Twarda 44, 00-831 Warsaw, Poland, entered in the business register (KRS) by the District Court for the Capital City of Warsaw, 13th Commercial Division, under number 0001248317, NIP 5273223575, REGON 545042195, share capital PLN 5,000.00. Contact: hi@kol.ski.

Services

We provide three free electronic services on the site: browsing its content, a contact form for sending us a message, and booking a free online consultation through our Google calendar.

Technical requirements

You need a device with internet access and an up-to-date browser. The form needs JavaScript and an HTTPS connection, because the message is encrypted in the browser. When the form cannot work, the button opens an ordinary email instead.

Using the site and the form

• The agreement to browse the site is concluded when you enter it and ends when you leave.
• The agreement to use the form is concluded when you send a message and ends once it has been handled. Until you send it, you can withdraw by closing the form — an unsent message never leaves your browser.
• The agreement to book a consultation is concluded when the time is confirmed and ends after the meeting or its cancellation. The consultation is free and non-binding. We may cancel or reschedule it, letting you know by email in advance.
• Do not send unlawful or offensive content, content that infringes other people's rights, or attempts to disrupt the site.
• The form is protected against abuse: a limit on the number of messages and rejection of repeats.
• We usually reply within two business days. Neither a reply nor the site content is an offer within the meaning of the Polish Civil Code.

Security

Using the internet carries typical risks such as malware, phishing and attempts at unauthorized access to your device. We recommend an up-to-date browser and operating system. The site works over HTTPS only, and the form additionally encrypts your message before sending. The only things the site stores on your device are the settings described under “Cookies and browser storage”.

Complaints

Send any complaint about the site or the form to hi@kol.ski, describing the problem. We will answer within 14 days.

Final provisions

Polish law applies. These terms do not limit consumer rights under mandatory law. We announce changes to the terms and the policy on this page, with the version date.

Back to the home page