Privacy policy

The controller of personal data is C-⁠FORM Sp. z o.o., ul. Zamkowa 9, 58-⁠530 Kowary, Poland, KRS 0000250967, NIP (tax ID) 611-⁠258-⁠36-⁠65, REGON 020231586.

For data protection matters, write to rfq@cform.pl or call +48 75 718 24 18.

Data from the enquiry form: name, company, e-mail address, phone, country, the content of the enquiry and any files you send (e.g. 3D models, drawings).

The source of your enquiry, added by the form: campaign parameters from the page address (e.g. utm_source), the Google ad click ID (gclid, gbraid, wbraid), the landing page and the page the enquiry was sent from, the type of traffic (e.g. search engine, advertising, direct visit) and the state of your cookie consent.

With your consent to analytics: data on how you use the website, collected by Google Analytics 4 and Microsoft Clarity (pages visited, traffic source, country and city derived from your IP address, device and browser type, clicks, scrolling and cursor movements).

Technical data needed to run and secure the website, such as IP addresses in server logs.

Answering your enquiry and preparing a quotation: Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (legitimate interest: communication with business clients).

Establishing where an enquiry came from (e.g. a search engine or an advertising campaign) and assessing how well our marketing works: Art. 6(1)(f) GDPR (legitimate interest).

Visitor statistics and session recordings (Google Analytics 4, Microsoft Clarity): your consent, Art. 6(1)(a) GDPR. Storing and reading cookies on your device: consent under Art. 399 of the Polish Electronic Communications Law (Prawo komunikacji elektronicznej).

Demonstrating that cookie consent was given: Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR.

Website security and abuse prevention: Art. 6(1)(f) GDPR.

Establishing or defending legal claims: Art. 6(1)(f) GDPR.

We treat files sent with an enquiry as confidential. They are stored on a server in the European Union and only people working on your enquiry can access them.

On request we sign a non-disclosure agreement (NDA) before you send the full documentation.

Your data may be received by service providers we use: server hosting and e-mail. They process it only on our instructions.

If your enquiry concerns moulding, series production, laser welding or hot runners, we pass it on to C-⁠TECH Sp. z o.o. (ul. Zamkowa 9, 58-⁠530 Kowary, KRS 0000034041), which provides these services within the C-⁠FORM Group.

When selecting a hot runner system, we may, with your knowledge, pass the part's technical data to the manufacturer, MasterFlow AB (Västervik, Sweden, European Union).

With your consent to analytics: Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland), provider of Google Analytics, and Microsoft Ireland Operations Limited (One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland), provider of Microsoft Clarity.

Google and Microsoft may also process data in the United States. Google LLC and Microsoft Corporation participate in the EU-US Data Privacy Framework, for which the European Commission adopted an adequacy decision on 10 July 2023 (Art. 45 GDPR).

For as long as needed to answer your enquiry and conduct business talks, and then until the limitation periods for claims expire. We keep the source of an enquiry together with the enquiry, for the same period.

Data in Google Analytics 4: 14 months. Session recordings in Microsoft Clarity: 30 days; recordings we mark and a random sample of recordings up to 9 months.

The record of your cookie consent (random ID, date, version and choice): 3 years.

You have the right to access, rectify and erase your data, to restrict processing, to data portability, and to object to processing based on legitimate interest.

You can change or withdraw your cookie consent at any time with the “Cookie settings” link in the page footer. Withdrawal does not affect the lawfulness of processing carried out before it.

You may lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Necessary cookies always work. Analytics and marketing cookies are stored only after you consent in the banner. Without consent the website does not connect to Google Analytics or Microsoft Clarity.

cf_consent (C-⁠FORM, necessary): your choice in the banner and a random consent ID; 12 months.

cf_internal (C-⁠FORM, necessary): marks our employees' devices so that their visits are not counted in statistics; set only on those devices; 12 months.

_ga, _ga_<ID> (Google Analytics, analytics): distinguish visitors and their visits; 13 months.

_clck, _clsk (Microsoft Clarity, analytics): visitor ID and joining page views into one recording; 12 months and 1 day. Clarity may also set cookies on Microsoft domains (CLID, MUID, ANONCHK, MR, SM).

cf_gclid (C-⁠FORM, marketing): the click ID of our Google ad, to attribute the enquiry to the campaign; 90 days.

Local storage (localStorage): a flag that the animation on the home page has already been played, so it does not play again. It contains no personal data and is never sent to our server.

You can also delete or block cookies in your browser settings.