Terms and privacy policy
Version of 2 October 2026. Applies to the kol.ski website and its contact form. This is a translation; the Polish version prevails.
Privacy policy
Who is responsible for your data
The controller is Kol.ski sp. z o.o., ul. Twarda 44, 00-831 Warsaw, Poland, KRS 0001248317, NIP (tax ID) 5273223575. For any personal data matter, write to hi@kol.ski. We have not appointed a data protection officer.
What we process and why
- Contact form: your name, an email address or a phone number (or both), a company name if you give one, the message, and the time, language and page address the form was sent from. We use them only to answer your message and continue the conversation.
- Email: if you write to hi@kol.ski, we process your address and message for the same purpose.
- Technical data: the server that delivers the site records the IP address, browser type and request time. This keeps the site secure and working.
The legal basis is our legitimate interest (Article 6(1)(f) GDPR): handling enquiries, keeping the site secure, and establishing, exercising or defending legal claims. If your message concerns an offer or a contract, the basis is also steps taken before entering into a contract (Article 6(1)(b) GDPR).
Giving your data is voluntary, but without a name, a message and one way to reach you we cannot reply. Please do not put sensitive data (for example about health), passwords or other people's data in the form.
How the form works
- Your message is encrypted in your browser before it leaves it.
- The encrypted message goes to a queue in a database in the European Union. The database provider has no key and cannot read it.
- Our server collects the message, decrypts it and checks it.
- We save the message in the company's internal, encrypted enquiries base and delete it from the queue straight away.
We do not send form messages by email and do not pass them to outside companies in readable form.
Who has access
- Authorized people acting on behalf of Kol.ski sp. z o.o. who need access to the data to handle a message.
- Google Cloud Poland Sp. z o.o. and other Google group companies as sub-processors — provider of the site hosting and the queue database (Firebase, Belgium region) and of our email (Google Workspace). Only encrypted content reaches the queue.
- Dynalist Inc. (Canada) — provider of Obsidian Sync, which synchronizes our enquiries base. Content is end-to-end encrypted, so the provider cannot see it.
We do not sell data or share it for marketing.
Transfers outside the European Economic Area
The providers above may also process data outside the EEA. For transfers to the United States, Google LLC takes part in the EU–US Data Privacy Framework; in other cases Google uses standard contractual clauses. Canada is covered by a European Commission adequacy decision for commercial organizations subject to PIPEDA; Dynalist Inc. declares compliance with that act.
How long we keep data
- Messages and contact details: for the duration of the conversation and 12 months after the last contact. If we sign a contract, longer — for as long as the law requires and until claims expire.
- The encrypted message in the queue: deleted as soon as it is saved in the enquiries base, usually within a few seconds. If saving fails, our server deletes it automatically after 7 days.
- The technical delivery status (no content, no contact details): 24 hours.
- After an enquiry is deleted, its earlier encrypted versions may remain in the Obsidian Sync version history for up to 12 months, after which they are deleted automatically.
- Server technical data: we do not collect or analyze it ourselves. The hosting provider keeps it for the period set by its own rules.
Your rights
You have the right to access your data and have it corrected. In the cases set out in the GDPR you can also ask for it to be erased, for its processing to be restricted, or to receive it in a portable form. Where we process data on the basis of legitimate interest, you can object to that processing. Just write to hi@kol.ski. You can also lodge a complaint with the Polish supervisory authority, Prezes Urzędu Ochrony Danych Osobowych (ul. Stawki 2, 00-193 Warsaw).
We make no automated decisions and do no profiling.
Cookies and browser storage
The site uses no cookies, analytics or tracking scripts. Your browser's storage holds only the chosen theme (light, dark, system) and the animation pause setting — saved only when you change them yourself, and only to remember them. These never leave your device.
Terms
Service provider
The kol.ski website is run by Kol.ski sp. z o.o. (limited liability company), ul. Twarda 44, 00-831 Warsaw, Poland, entered in the business register (KRS) by the District Court for the Capital City of Warsaw, 13th Commercial Division, under number 0001248317, NIP 5273223575, REGON 545042195, share capital PLN 5,000.00. Contact: hi@kol.ski.
Services
We provide two free electronic services on the site: browsing its content and a contact form for sending us a message.
Technical requirements
You need a device with internet access and an up-to-date browser. The form needs JavaScript and an HTTPS connection, because the message is encrypted in the browser. When the form cannot work, the button opens an ordinary email instead.
Using the site and the form
- The agreement to browse the site is concluded when you enter it and ends when you leave.
- The agreement to use the form is concluded when you send a message and ends once it has been handled. Until you send it, you can withdraw by closing the form — an unsent message never leaves your browser.
- Do not send unlawful or offensive content, content that infringes other people's rights, or attempts to disrupt the site.
- The form is protected against abuse: a limit on the number of messages and rejection of repeats.
- We usually reply within two business days. Neither a reply nor the site content is an offer within the meaning of the Polish Civil Code.
Security
Using the internet carries typical risks such as malware, phishing and attempts at unauthorized access to your device. We recommend an up-to-date browser and operating system. The site works over HTTPS only, and the form additionally encrypts your message before sending. The only things the site stores on your device are the settings described under “Cookies and browser storage”.
Complaints
Send any complaint about the site or the form to hi@kol.ski, describing the problem. We will answer within 14 days.
Final provisions
Polish law applies. These terms do not limit consumer rights under mandatory law. We announce changes to the terms and the policy on this page, with the version date.