Privacy policy
Effective from 23 October 2026.
1. Data controller
Your personal data is controlled by Colbergcoffee, the Coffee Format distributor that runs coffeeformatpolska.pl (“we”). We provide the controller's full details, including company name, address and tax number (NIP), in our reply to every enquiry and on request through the contact form. This site is run by a distributor, not by the manufacturer of Coffee Format machines.
2. What we collect
Through the enquiry form we collect the data you give us:
- full name and email address (required),
- phone number, where the machine will go, cups per day and your message (optional),
- the model chosen in the form, the machine finder or the comparison tool.
With each enquiry we also store your IP address and how you reached the site (for example which ad or search engine), to protect the form from abuse and measure our marketing.
After you send the form, the enquiry goes to our mailbox and to a file of enquiries on the server, and you receive an automatic confirmation by email. We reply by email, and if you give a phone number we may call you. We do not send newsletters or marketing unrelated to your enquiry.
3. Purpose and legal basis
| Purpose | Legal basis (GDPR) | Retention |
|---|---|---|
| Replying to your enquiry and preparing a quote | Art. 6(1)(a) (consent) and (b) (steps prior to a contract) | Up to 24 months after last contact or until consent is withdrawn |
| Protecting the form from spam and abuse | Art. 6(1)(f) (legitimate interest) | Up to 12 months |
| Establishing and pursuing claims | Art. 6(1)(f) (legitimate interest) | Until the limitation period ends |
4. Who we share data with
Data is stored on the server that hosts the site and sent to us by email. We use hosting and email providers and, with your consent, Google Ireland Limited (Google Analytics 4, Google Ads) and Meta Platforms Ireland Limited (Facebook and Instagram ad measurement). Fonts are hosted on our own server, so simply opening the site does not send data to Google.
We do not sell data or pass it to other companies for marketing. Google and Meta may process data outside the European Economic Area under a European Commission decision (Data Privacy Framework) or standard contractual clauses.
5. Security
The site runs over HTTPS, so form data is encrypted in transit. The enquiry file and server configuration are not accessible from the internet.
6. Cookies and browser storage
Until you consent, we do not store analytics or marketing cookies on your device. We only remember your cookie choice, the models you add to a comparison and how you arrived at the site (session storage, cleared when you close the tab). You can change your choice under “Cookie settings” in the footer.
7. Your rights
You have the right to access, rectify, erase, restrict and port your data, and to object to processing based on legitimate interest. You can withdraw consent at any time by writing to us through the form; this does not affect processing before withdrawal. You may also complain to the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych).