KBH AKORD Transport Systems – CARGO PROTECTION SOLUTIONS that keep your business moving.

KBH AKORD Transport Systems - Your Specialist Partner for Insulated Bodies & Aluminium Body Systems
BOOK A DEMO

Privacy Policy

This Privacy Policy is addressed to users of the website (hereinafter referred to as “Users”) operating at www.transportsystems.kbhakord.pl and www.ts.kbhakord.pl, hereinafter referred to collectively, along with related services, as the “Website”.

The Privacy Policy defines the rules for collecting and using data of Website Users, which are obtained directly from them or through cookies.

I. General Provisions

  1. The controller of personal data of Users using the Website is the company: KBH AKORD Sp. z o.o. with its registered office in Krakow, ul. Sikorki 21, 31-589 Kraków, entered in the Register of Entrepreneurs of the National Court Register, the registration files of which are maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register, under KRS number: 0000938652, NIP: 6760012851, REGON: 350105469, hereinafter referred to as the “Company” or the “Controller”.
  2. Contact with the Controller is possible via e-mail: rodo@kbhakord.pl or in writing to the Company’s registered address.

II. Data Sources

  1. The Controller collects data directly from the User.
  2. The User may provide data of another person authorised to collect the order – in such case the User is the source of the recipient’s data.

III. Scope of Processing

  1. During use of the Website, the Controller processes the personal data of the User, including:
    1. information about activity on the Website, including cookies, traffic data, date and source of visit to the Website,
    2. IP address,
    3. device and browser data,
    4. search queries,
    5. number of subpages viewed,
    6. Google Analytics cookie identifier.
  2. The Website provides the possibility of contacting the Controller via an electronic contact form and transmitting to the Controller, through the contact form, the following personal data of the User:
    1. first name,
    2. last name,
    3. company name,
    4. e-mail address,
    5. phone number,
    6. information contained in the message.
  3. The User’s contact or analytical data may be processed by the Controller for marketing purposes solely with the User’s consent.

IV. Purpose and Legal Basis for Processing Personal Data

  1. Personal data are processed by the Controller for the following purposes:
    1. provision of services by electronic means within the scope of making content collected on the Website available to the User, enabling the use of the Website and contact with the Controller – on the basis of the necessity of processing for the performance of a contract, Article 6(1)(b) GDPR,
    2. ensuring the security of the Website and conducting statistics and analyses for the purpose of its optimisation – on the basis of the legitimate interest of the Controller, Article 6(1)(f) GDPR,
    3. identifying the sender and handling their enquiry submitted via the contact form – on the basis of the necessity of processing for the performance of a contract, Article 6(1)(b) GDPR; with respect to data provided on an optional basis, the legal basis for processing is the User’s consent, Article 6(1)(a) GDPR,
    4. conducting marketing activities, including promotion of goods and services, presenting offers and carrying out marketing communication via e-mail or telephone – on the basis of the User’s consent, Article 6(1)(a) GDPR, and in the scope of marketing of own products and services carried out in another form – on the basis of the legitimate interest of the Controller, Article 6(1)(f) GDPR,
    5. organising and conducting loyalty programmes and promotional campaigns – on the basis of the necessity of processing for the performance of a contract concluded by accepting the terms and conditions of a given programme, Article 6(1)(b) GDPR, and in the scope of processing data for marketing purposes related to these activities – on the basis of the User’s consent, Article 6(1)(a) GDPR,
    6. establishing and pursuing claims or defending against claims – on the basis of the legitimate interest of the Controller, Article 6(1)(f) GDPR.
  2. Where cookies are used for analytical or marketing purposes, processing will be carried out only if the User has given their consent, Article 6(1)(a) GDPR.

V. Obligation or Voluntary Nature of Providing Data

  1. Providing personal data by the User is voluntary but necessary for accepting and handling an enquiry. Failure to provide personal data by the User will prevent the receipt of an offer, marketing materials and a response to the enquiry.
  2. Providing data necessary for statistical analysis of Website Users is voluntary.

VI. Retention Period of Personal Data

  1. The period of data processing by the Controller depends on the type of service provided and the purpose of processing. As a rule, data are processed for the duration of the service, until the given consent is withdrawn or an effective objection to data processing is raised.
  2. The data processing period may be extended where processing is necessary for the establishment and pursuit of potential claims or defence against claims, and after that period only where and to the extent required by law. After the processing period has elapsed, the data are irreversibly deleted or anonymised.
  3. Personal data will be stored for accounting purposes for 5 years from the end of the year in which the tax obligation arose.
  4. Data relating to web traffic analysis collected via cookies and similar technologies will be stored until the expiry of the given cookie. Some cookies do not expire, and in such cases the data will be stored for the period necessary to achieve the Controller’s purposes.

VII. User Rights

  1. The Website User, within the scope and on the terms set out in the GDPR, has the right to:
    1. request access to their personal data and receive a copy thereof, Article 15 GDPR,
    2. request immediate rectification of inaccurate personal data or completion of incomplete personal data, Article 16 GDPR,
    3. request erasure of personal data, Article 17 GDPR,
    4. request restriction of processing of personal data, Article 18 GDPR,
    5. data portability, Article 20 GDPR.
  2. The User has the right to object to the processing of personal data carried out on the basis of the legitimate interest of the Controller.
  3. The User has the right to withdraw consent at any time, where processing is based on consent, by contacting the Controller.
  4. The User has the right to lodge a complaint with the President of the Personal Data Protection Office, www.uodo.gov.pl, regarding processing carried out by the Controller.

VIII. Recipients of Personal Data

  1. In connection with the provision of services, personal data will be disclosed to external entities, including in particular IT service providers enabling proper use of the Website, hosting providers, e-mail server providers, law firms and accounting offices cooperating with the Controller.
  2. The Controller reserves the right to disclose selected information concerning the User to the competent authorities or third parties who submit a request for such information on an appropriate legal basis and in accordance with applicable law, including the Police and common courts in connection with pending proceedings.

IX. Use of External Tools and Transfer of Data Outside the EEA

  1. Within the use of cookies, the Controller uses, among others, Google Analytics, a service provided by Google Ireland Limited with its registered office in Dublin.
  2. Users’ data may be transferred by Google outside the European Economic Area, EEA, in particular to Google LLC with its registered office in the USA.
  3. Information on the scope and purpose of data processing by Google is available in Google’s privacy policy: https://policies.google.com/privacy
  4. The Google Analytics terms of service are available at: https://marketingplatform.google.com/about/analytics/terms/pl
  5. The legal basis for data processing within Google Analytics is the User’s consent, Article 6(1)(a) GDPR.
  6. The Controller uses external tools for conducting mailing campaigns and automating marketing communication, such as Mailchimp, Intuit Inc., USA, Brevo, Sendinblue SAS with its registered office in France, or MailerLite, MailerLite Limited, an Irish registered company.
  7. Personal data, e.g. first name, last name, e-mail address, information on e-mail activity – opens, clicks, may be processed using the indicated tools for the purposes of:
    1. sending newsletters,
    2. conducting marketing campaigns,
    3. analysing the effectiveness of communication.
  8. The legal basis for data processing in this scope is the User’s consent, Article 6(1)(a) GDPR.
  9. Where providers based outside the EEA are used, e.g. Mailchimp – USA, data may be transferred to third countries. Transfer is carried out in accordance with the GDPR, in particular on the basis of an adequacy decision or standard contractual clauses.
  10. Entities providing analytical and mailing services process data on the basis of data processing agreements concluded with the Controller.

X. Use of Cookies

  1. The Website enables the collection of information about the User via cookies, which are installed on the User’s device, such as computer, smartphone, etc. Cookies are used to remember preferences, collect information about the device and visit, ensure security, analyse visits and customise content.
  2. Information from cookies is not combined with other User data and is not used to identify the User.
  3. The User may configure their browser to block certain types of cookies.
  4. Cookies for marketing and analytical purposes are used only after obtaining the User’s voluntary and explicit consent.
  5. The User may change their cookie settings at any time.

XI. Changes to the Privacy Policy

  1. The Controller reserves the right to amend this Privacy Policy in connection with the development of technology, changes in law or expansion of the Website’s functionality.
  2. The current version of the Policy is effective as of 27.02.2026.

Book a demo