Cookie Policy

This Cookie Policy applies to the use of "cookies", system logs and other similar technologies and the processing of personal data using them, which are used as part of the websites of the Comarch Capital Group. The cookies policy is a supplement to the Information about the processing of personal data by the Comarch Group Companies.

The controller of personal data on the Comarch Capital Group websites is Comarch S.A. with headquarters in Kraków, Al. Jana Pawła II 39a, 31-864 Kraków, registered in the National Court Register under the number KRS 000005756. The controller have appointed Data Protection Officer with whom you can contact at: iod@comarch.pl.

I. COOKIE

Comarch Capital Group websites use so-called cookies.

1.     What are cookies?

A cookie is a small text file that the website you visit places on your computer. On each subsequent visit - using the same browser as before - this file is sent back to the website or service that created it. Cookies enable or improve the operation of the website and provide its owners certain information, which can then be used to personalize and improve the quality of service. Cookies work on two levels: they are either placed on the user's device directly by us or by our partners whose scripts we have installed on the website.

 We divide cookies into:

  • session cookies-  temporary cookies that are deleted automatically when you close your browser. We use them for technical purposes, e.g. to provide better navigation on the website, as well as to enable us to adjust the preferences of users regarding the use of our website.
  • persistent cookies – with a lifetime exceeding the browser session, i.e. having a specific operating time, individual for a given file, after which they are deleted. Their goal is to determine which users visit the site for the first time (they are new) and which are returning for the second time. 

2.     Types of cookies

Please be informed that our websites, apart from our own cookies, also use the so-called third party cookies placed through our website by our third party providers.

Detailed information on first-party and third-party cookies can be found in the tables below.

We also inform you that depending on the website you use, the type and number of cookies may vary.

Comarch Capital Group sites use the following types of cookies: 

Necessary  Cookies

They are necessary to ensure the proper functioning of our website, therefore they do not require your consent. 

The purposes we pursue through the required cookies are described in point 3 (Purpose and legal basis) of the Cookie Policy.

Cookie ProviderCookie NameCookie DescriptionData CollectedDuration of storage of the Datafirst-party/ third-party
Alphabet Inc.reCAPTCHAThis is a service provided by Alphabet Inc for Comarch that verifies if the data entered on a site is entered by a human or by an automated program.

IP address

Click path

Time spent on page

Website visitor’s behaviour

Browser language

User selections entered

Javascript objects

Browser plug-ins

_ga - 2 years

_gid - 24 hours

_gat - 1 minute

AMP_TOKEN - 30 seconds to 1 year

_gac_<property-id> - 90 days

Third-party

Privacy policy of Alphabet:

https://support.google.com/policies/

Comarch SAdwld_hashThis is a hash generated by the Comarch Content Management System, used to mask download links after submitting the form in the Form module. Currently also associated with the Quiz and PriceCalculator modules (also based on the Form module).Doesn’t collect the data.1 yearFirst party
Comarch SA

pdf-token

This is a hash generated by the Price Calculator module in the Comarch Content Management System, related to viewing PDF files.

Doesn’t collect the data.30 daysFirst party

Analytical Cookies

With these cookies, we collect analytical data that helps us learn statistics about the use of our website and develop reports. As a result, we learn more about what should be modified and what content should be developed to make the site run more efficiently and better meet your personal needs. The purposes we pursue through the analytical cookies are described in point 3 (Purpose and legal basis) of the Cookie Policy.

Cookie ProviderCookie NameCookie DescriptionData CollectedDuration of storage of the Datafirst-party/ third-party

Google Inc.

Google AnalyticsThis is a tool that measures website visitors statistics.

The total time a user spends on the website

The time a user spends on each web page and in what order those web pages are visited

What internal links were clicked (based on the URL of the next pageview)

IP address

The geographic location of the user

What browser and operating system are being used

Screen size and whether Flash or Java is installed

_ga - 2 years

_gid - 24 hours

_gat - 1 minute

AMP_TOKEN - 30 seconds to 1 year

_gac_<property-id> - 90 days

Third-party

Google Inc., 1600 Amphitheatre Pkwy. Mountain View, CA 94043
Privacy Policy of Google:

https://policies.google.com/privacy

Comarch SAComarch Content Management System UTMThis is a mechanics that enables to track traffic on the website (traffic source, medium, campaign etc.).

Information about how the user got to the current web page:

utm_source – source where the user  came from (e.g. search engine)

utm_medium – what type of traffic is it (from paid ads and campaigns; search engines or other external source; from inside of the website)

http_referrer – the address of the web page from which the user came to the current web page.

Detecting whether the user has visited the current web page before.

utm_tracker - 7 days

utm_source - 1 day

utm_campaign - 1 day

utm_term - 1 day

utm_content - 1 day

http_referrer - 1 day

First-party
Hotjarhotjar.comThis is a behavior analytics and user feedback service provided by Hotjar for Comarch that helps to understand the behavior of the website users and get their feedback through tools such as heatmaps, session recordings, and surveys.

Name of the user’s internet service provider

The website from which the user visited the current website

The parts of the website the user visited

The date and duration of the visit

Device type

Operating system

Screen resolution

Language

Country of location

Web browser type

IP address

_hjClosedSurveyInvites - 365 days

_hjDonePolls - 365 days

_hjMinimizedPolls -  365 days

_hjShownFeedbackMessage - 365 days

_hjid - 365 days

_hjRecordingLastActivity - Session

_hjTLDTest - Session

_hjUserAttributesHash - Session

_hjCachedUserAttributes - Session

_hjLocalStorageTest - Under 100ms

_hjIncludedInPageviewSample - 30 minutes

_hjIncludedInSessionSample - 30 minutes

_hjAbsoluteSessionInProgress - 30 Minutes

Third-party


Privacy Policy of Hotjar:

https://www.hotjar.com/legal/policies/privacy/
Google Ireland Limited Google Tag ManagerThis is a tag management system for managing JavaScript and HTML tags used for tracking and analytics on websites.

Aggregated data about tag firing

Other than data in standard HTTP request logs, all of which is deleted within 14 days of being received, Google Tag Manager does not collect, retain, or share any information about visitors.Third-party

Privacy Policy of Google:

https://policies.google.com/privacy
Google IncGoogleOptimizeSystem for testing different versions of websites.

IP address Browser type and settings

 

Device information

 

Information about the operating system

The collected data will be deleted as soon as it is no longer needed for processing purposes.

Name of the cookie - the expiration time

 

_gaexp_rc – 10 seconds

_opt_awcid - 24 hours

_opt_awmid - 24 hours

_opt_awgid - 24 ours

_opt_awkid - 24 hours

_opt_utmc- 24 hours

_opt_expid - 10 hours

Third-party

Privacy Policy of Google:

https://policies.google.com/privacy

Microsoft Corporationbing.comThis is a web search engine.

Browse history

Device, connectivity, and configuration data (including IP address)

Error reports and performance data

Troubleshooting and technical support data

Bot usage data
UET - 2 yearsThird-party

Privacy Policy of Microsoft:

https://privacy.microsoft.com/en-us/privacystatement

Social Media

These cookies come from our partners and allow us to share content from our website via external social media sites as well as display information from social media sites on our site, such as the videos from our profile. In addition, information obtained from these cookies may be used for advertising purposes on the particular social media platform that you use. Specific purposes we pursue through the social cookies are described in point 3 (Purpose and legal basis) of the Cookie Policy.

Cookie ProviderCookie NameCookie DescriptionData CollectedDuration of storage of the Datafirst-party/ third-party
LiveChat Inc.,LiveChatThis is a service provided by LiveChat Inc for Comarch, enabling live chat with our customer service department.

IP address

Geolocation data

Domain

Browser type

Operating system type
30 days to 3 yearsThird-party

Privacy Policy of LiveChat:
https://www.livechat.com/legal/privacy-policy/
The Point We care about your customers Sp. z o.o.czater.plThis is a service provided by LiveChat Inc for Comarch, enabling live chat with our customer service department.

The URL from which the user/customer got to the page

Whether the chat widget was last opened or closed

Information about closing the notification next to the widget

Information about the last used section

Information about the width and height of the browser window

Data used to recognize the client in the widget

Czater__4(..) - 1 year czater_teaser_shown - 1 year

czater_first_refer - 1 year

czater_open2 - 1 day

czater_teaser-closed - 1 year

czater__last-section 1 month

czater_screenWidth - session

czater_screenHeight - session

czaterReferrer - 1 year

first_enter_date - 2 years

czater__owner - 1 year

Third-party

Privacy Policy of The Point We care about your customers Sp. z o.o:

https://www.czater.pl/Polityka_Prywatnosci

Google Ireland LimitedYouTube VideoThis is a video player service provided by Google Ireland Limited for Comarch.

Referrer URL

IP Address

PREF   -  10 years from set/ update

VISITOR_INFO1_LIVE  -  8 months from set/update

use_hitbox   -     At end of session

YSC   -     At end of session
Third-party

Privacy Policy of Google:
https://policies.google.com/privacy
Vimeo Inc.Vimeo VideoThis is a video player service provided by Vimeo Inc. for Comarch.

IP address

Browser type

Operating system

Basic device information

The web page the user visited or search query they entered before reaching the website

Other users’ activities

player -  After 1 year

vuid   -   After 2 years

_abexps      -       After 1 year

continuous_play_v3   -   After 1 year

_ga   -     After 2 years

_gcl_au  - After 3 months

_fbp   -   After 3 months

Third-party

Privacy Policy of Vimeo:

https://vimeo.com/privacy
LinkedIn Ireland Unlimitedlinkedin.comThis is a service provided by LinkedIn Ireland Unlimited for Comarch that tracks and analyzes the visitors behavior on the website.

Operating system information

Device identifier

ISP or mobile network provider

IP Address

Referrer URL

Add-ons information

Browser information

UserMatchHistory  -  30 days

li_sugr - 3 months

BizographicsOptOut  - 10 years

_guid - 3 months

li-oatml - 1 month

li_fat_id  - 1 month

U -  3 months

bcookie - 2 years

lang- Session

lidc - 1 day
Third-party

Privacy Policy of LinkedIn:

https://www.linkedin.com/legal/privacy-policy…
Twitter, Inc., twitter.comThis is a service provided by Twitter Inc. for Comarch that integrates a Twitter user’s content into the website dynamically in a JavaScript application as well as integrates user interactions into the website owner’s applications. 

IP address

Browser type

Operating system

The referring web page

Pages visited, location

Mobile carrier

Device information (including device and application IDs)

Search terms (including those not submitted as queries)

ct0    -   Persistent

_twitter_sess  - Session

guest_id  - 2 years

personalization_id  - 2 years

external_reference   - 7 days

eu_cn  - 1 year

kdt  - 2 years

lang - Session

remember_check_on - Never

tfw_ex  - 14 days
Third-party

Privacy Policy of Twitter:

https://twitter.com/en/privacy
Twitter, Inc.t.co

This is a service provided by Twitter Inc. for Comarch, the purpose of which is to protect users from harmful activity. Thanks to it, it is possible to maintain the appropriate quality of the displayed content.

IP address

Browser type

Operating system

The referring web page

Pages visited, location

Mobile carrier

Device information

Search terms

muc_ads - 729 days

Third-party

Privacy Policy of Twitter:

https://twitter.com/en/privacy
 Facebook Ireland Ltd

facebook.com

This is a service provided by Facebook for Comarch in the field of personalizing content (including advertisements), measuring the effectiveness of advertisements, providing analytical data and ensuring a safer mode of use for the user.

IP address

Geographical location

Networks and connections

Browser type

Operating system

Device information

fr - 3 months

Third-party

Privacy Policy of Facebook:

https://www.facebook.com/privacy/explanation/
 Google Ireland LimitedGoogle Maps

This is a service provided by Google Ireland Limited for Comarch that allows scripts to generate static maps, find directions, convert addresses into geocode coordinates, and sample elevations.

IP address

E-mail address

Browser type and settings

Device information

Operating system information

Preferences to view the maps

NID - 6 months

PREF - 2 years

khcookie – as soon as you close your browser

Third-party.

Privacy Policy of Google:

https://policies.google.com/privacy
LiveCall Software sp. z o.oLivecall  

This is a service provided by Livecall Software for Comarch that enables communication with website users via telephone calls.

 
First and last name

E-mail address, phone number

Computer IP address

Tax Identification Number NIP or VAT number

Place of business activity

Data concerning the user collected by Google Analytics, Google AdWords, Crisp chat, Facebook Pixel

Other data necessary for provision of services

livecall-account- <id> - 1 year

Third-party.

Privacy Policy of LiveCall:

https://www.livecall.io/en/privacy-policy

Issuu Inc Issuu

This is a service provided by Issuu Inc for Comarch that enables the presentation of PDF documents in the form of flipbooks and social media posts.

IP address

The type of the computer’s operating system

The type of internet browser software

Browser history

Device information

CookieConsent - 1 year

__qca - 1 year

_pin_unauth - 1 year

_fbp - 3 miesiące

_uetvid - 1 year

_gcl_au - 3 months

_uetsid - 1 day

mp_{ID}_mixpanel - 1 year

_gid - 1 day

_ga - 2 years

Third-party

Privacy Policy of Issuu:

https://issuu.com/legal/privacy

USA IncSpotify

This is a digital music, podcast, and video service provided by Spotify USA Inc. for Comarch.

IP address

Browser type and settings

Browser history

Device information

Location

sp_landing - 1 day

sp_t - 1 year

sp_m - 3 years


Privacy Policy of Spotify USA Inc:

https://www.spotify.com/us/legal/privacy-policy/

Advertising

We also track what you browse and read about on our website to further tailor the ads that are shown to you. In this way, we and our partners primarily show you ads that match your interests and are related to your interactions with our site. The purposes we pursue through the advertising cookies are described in point 3 (Purpose and legal basis) of the Cookie Policy.

Cookie ProviderCookie NameCookie DescriptionData CollectedDuration of storage of the Datafirst-party/ third-party
Google Inc.Google Marketing Platform (earlier as doubleclick.net)This is  an advertising and analytics platform for marketers (consisting of Display & Video 360, Campaign Manager, and Search Ads 360).

The total time a user spends on the website

The time a user spends on each webpage and in what order those pages are visited

What internal links were clicked (based on the URL of the next pageview)

IP address

The geographic location of the user

What browser and operating system are being used

Screen size and whether Flash or Java is installed

The referring site

_ga - 2 yars

_gid - 24 hours

_gat - 1 minute

AMP_TOKEN - 30 seconds to 1 year

_gac_ <property-id> - 90 days

Third-party

Privacy Policy of Google:

https://policies.google.com/privacy
Twitter, Inc.,ads-twitter.comThis is an advertising service provided by Twitter Inc. for Comarch.

IP address

Browser type

Operating system

The referring web page

Pages visited, location

Mobile carrier

Device information (including device and application ids)

Search terms (including those not submitted as queries

ct0   -   Persistent

_twitter_sess  -  Session

guest_id     -    2 years

personalization_id   -   2 years

external_reference   - 7 days

eu_cn  - 1 year

kdt   -  2 years

lang  -  Session

remember_check_on  -  Never

tfw_ex   -  14 days

Third-party.

Privacy Policy of Twitter:

https://twitter.com/en/privacy
Comarch SAMautic (marketing-comarch.pl/mtc.js)This is an e-mail marketing automation system.

IP address

Operating system

Web browser version

Name and surname, e-mail address, telephone number, company the user is linked to, branch, job position, country, consents to contact via phone and e-mails, other information made available by the user

Other Comarch’s websites visited by the user and the amount of time spent there

Information if e-mails received by the user were opened by them

Downloaded information available via e-mail or on the ca websites created in comarch content management system, version 1.1 and newer
mautic_device_id - 1 year

mautic_referer_id - session
First-party
Campaign Monitor Pty Ltd.createsend1.comThis is an advertising and email campaign service provided by Campaign Monitor Pty Ltd. for Comarch.

IP address

Device attributes (hardware model, operating system, web browser version, as well as unique device identifiers and characteristics)

Connection information (name of the mobile operator or internet service provider, browser type, language and time zone, and mobile phone number)

Device locations (internet protocol [ip] addresses and wi-fi information)

Log data

Dates and times of accessing the services

Webpage views

Activities and features are used of the services

Crash logs, storage configuration settings

Technical data relating to the user’s device(s) while accessing and using the services and the performance of the services in doing so

CM-Init-Visit    -  1 year

CM-PTB-Visit  -   1 year

CM-comm   -      1 year

CM-currency (string)     1 year

CM-location-abbr (string)      -     1 year

CM-location-city (string)     -        1 year

CM-location-country (string) country name   -        1 year   

CM-location-set (string) Region name   -     1 year

CM-location-state (string)         -        1 year

CM-location-timezone (string), Timezone     -       1 year    

CM-location-zip (string), Postcode/Zip code       -        1 year

CM-location-check (string), Region name  - 7 days

CM-location-dv5 (encoded string)     -     1 year

_cdeTrkData  -   1 year

CM-location-eu and CM-location-gdpr  - 1 year

CM-location-status   -     1 year

cookie-accept     -    1 year

apex__payload   -    30 days

Third-party

Privacy Policy of Campaign Monitor:

https://www.campaignmonitor.com/policies/#priv-section-2b
Amazon Europe Core SARLSizmek by Amazon

This is a service provided by Amazon Europe Core SARL for Comarch that allows to manage advertising content and monitor its effectiveness.

IP address

The type of the computer’s operating system

The type of internet browser software

What web pages were viewed and at what time

Device information
OT_{ID} -  session

OT2 -  3 months

u2 - 3 months
Third-party.

Privacy Policy of Sizmek by Amazon:

https://sizmek.com/privacy-policy/
HubSpot Inc.Hubspot

This is an e-mail marketing automation system.

Total time spent by the user on the site

The amount of time a user spends on each page and in what order those pages are visited

IP address

User geographic location

The type of internet browser software

The type of the computer’s operating system

Device information

__hs_opt_out - 6 months

__hs_do_not_track - 6 months

__hs_initial_opt_- 7 days

__hs_cookie_cat_pref- 6 months

__hs_gpc_banner_dismiss - 180 days

<id>_key -  14 days

__hstc – 6 months

Hubspotutk – 6 months

__hssc - 30 minutes

__hssrc - session

Third-party.

Privacy Policy of HubSpot Inc.:

https://legal.hubspot.com/privacy-policy

3.     Purpose and legal basis

We use cookies and other internet technologies for specific purposes, which can be grouped according to the type of cookies.

Purposes of Necessary Cookies:

  • Ensuring user safety
  • Protecting our infrastructure from attacks
  • Maintaining the proper operation of the internal mechanisms of the website
  • Searching for errors in the operation of the website
  • Combating spam and abuse
  • Authentication of users

 Our website cannot function without these cookies, therefore they do not require users' consent. The processing of personal data from these cookies or similar technologies for the purposes indicated above is based on the legitimate interest of the Controller. We use other cookies only if users give us their consent. We do this for the purposes set out below.

Purposes of analytical cookies:

  • Counting the number of visits and gathering information about traffic sources
  • Collecting analytics about how users interact with our website
  • Creating viewing statistics for individual content
  • Page loading speed measurement
  • Modification and development of content in terms of users' needs

Purposes of social media cookies:

  • Sharing content from our website via social networking sites
  • Displaying information from social networking sites on our website
  • Creating statistics of playing audio and video files
  • Integration of social plug-ins with our website
  • Customizing ads and personalizing content displayed on social media

Purposes of advertising cookies:

  • Collecting statistics related to users' interactions with particular content on our website
  • Creating interest profiles of users interacting with the site
  • Tracking the effectiveness of advertising campaigns related to our website (on-site and external)
  • Adjusting the content of advertisements to the interests of specific users
  • Integration of sales and marketing data

4.     Consent Information 

When visiting GK Comarch websites, a banner with a message regarding the use of cookies is displayed. If you click "Accept all", it will mean that you accept all cookies that are placed on our website and confirm that you have read the information about cookies, the purposes of their use, and the situations in which the data collected for them are provided to our partners.

For necessery cookies, your consent is not required as these cookies ensure the security and proper functioning of our website.

5.     Withdrawal of consent to the installation of cookies

You also have the option to manage cookies yourself. You can choose the extent to which we will use cookies through the "Settings" option available on the cookie banner displayed to you and express your consent to the cookies you selected in the next step or reject all cookies by selecting the "Reject all" option.

If you click on the "Reject All" button, only necessery cookies will be stored, which are necessary for the website to function; the use of such cookies does not require the consent of the user.

In addition, you can also change the cookie settings in your browser at any time, but because some cookies are necessary for the website to function, changing the browser settings may cause some services to work incorrectly and even prevent the use of the website. Information on how to configure cookie settings in sample browsers can be found here:

II. SYSTEM LOGS

Each visit of a User visiting Comarch Capital Group websites is automatically registered in the server in the so-called system logs. Data saved in this way includes, among other things, date, time of the visit and the IP address. Data from the system logs are used only for purposes of server administration and for increasing the level of infrastructure security.

 III.  OTHER TEHNOLOGIES

We also use other technologies and solutions on our websites to save and access information about the User's activities and preferences.

Local Storage - this is a form of data storage in the User's browser. Data stored in Local Storage has no "expiry date" after which it would be deleted. In addition, the limitations on the volume of information are smaller. These features make Local Storage better than cookies for storing certain settings.

Session Storage – is a technology very similar to Local Storage, but the data has a specific validity period. For a given domain, they are available only until the tab or browser window is closed.

Pixel - allows you to collect analytical data on the User's behavior on websites in which it is placed. Pixel allows you to record both the fact of visiting the website and performing certain actions (e.g. adding a product to the basket, sending a form, etc.). Pixel may send the collected information to a third party, i.e. a code provider.

IV.  COOKIES POLICY CHANGES

This Cookie Policy may be subject to periodic changes deemed necessary by Comarch S.A. Its change is associated with a change in the update date. The changed Cookie Policy will apply to users and the data provided by them starting from the date of update.

The current version of the Cookies Policy has been adopted and is valid from 24th July 2023.

We encourage users to regularly check the Cookie Policy for information on how we use cookies.