Privacy and Cookie Policy

Last updated: 27 September 2026

This policy explains what personal data we process when you use draco-rollcutter.com, for what purposes, for how long, and what rights you have.

1. Data controller

The controller of your personal data is DRACO Machinery Sp. z o.o., ul. Fabianowska 131/A4, 62-052 Komorniki, Poland, KRS: 0001145509, NIP (tax ID): 7792481354.

You can contact us about personal data:

• by e-mail: draco@draco.info.pl,
• by phone: +48 790 383 000,
• by post at our registered office address.

We have not appointed a data protection officer.

2. What data we process and why

2.1. Contact form and correspondence

If you send an enquiry through the contact form, e-mail us or call us, we process the data you provide, e.g. your name, company name, e-mail address, phone number and the content of your message.

• Purpose: replying to your enquiry, preparing an offer and further correspondence.
• Legal basis: our legitimate interest in answering enquiries and maintaining business contacts (Art. 6(1)(f) GDPR) and, where the enquiry concerns a contract, taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Retention: for the duration of the correspondence and then for 3 years after it ends, to establish, exercise or defend legal claims. If we enter into a contract, we keep the data for the term of the contract and for the period required by law (e.g. tax law).
• Providing data is voluntary, but we cannot reply to your enquiry without it.

Messages from the form are delivered to our e-mail inbox and stored in the website’s admin panel. We do not send newsletters or other marketing messages to addresses provided in the form.

2.2. Website statistics (Google Analytics 4)

With your consent, we use Google Analytics 4, provided by Google Ireland Limited. It shows us how visitors use the website: which pages they view, where they come from (e.g. a search engine or an ad) and what device they use. Google Analytics 4 does not store full IP addresses.

• Purpose: traffic analysis and improving the website.
• Legal basis: your consent (Art. 6(1)(a) GDPR).
• Retention: data in Google Analytics is kept for 2 months (event data) and 14 months (user data); cookies as listed in section 3.

2.3. Ad performance measurement and remarketing (Google Ads)

With your consent, we use Google Ads (Google Ireland Limited) to:

• check whether a visit from our ad resulted in an enquiry (conversion measurement),
• show our ads in Google services to people who have previously visited our website (remarketing).

• Legal basis: your consent (Art. 6(1)(a) GDPR).
• Retention: as listed in the cookie table in section 3 and according to Google’s service settings.

2.4. Google Consent Mode

The website uses Google Consent Mode. Until you give consent, Google tools do not store analytics or advertising cookies on your device. They may, however, send Google basic information without cookie identifiers (e.g. that a page was viewed or a form was submitted, and that consent was not given). Google uses this information to estimate statistics in aggregated form.

• Legal basis: our legitimate interest in basic, cookieless measurement of the website and ads (Art. 6(1)(f) GDPR). You may object to this processing (section 6).

2.5. YouTube videos

The website contains videos from YouTube (Google Ireland Limited). Videos do not load automatically – you see a picture with a play button. Only after you click does the video load from YouTube in privacy-enhanced mode. From that moment YouTube may store cookies and process your data under Google’s own privacy policy.

2.6. Directions map

We do not embed Google Maps on the website. The “Show on Google Maps” button opens Google Maps in a new tab, where Google’s privacy policy applies.

2.7. Technical data (server logs)

The server hosting the website automatically records basic technical data such as IP address, date and time of the visit and browser type.

• Purpose: ensuring the security and proper operation of the website.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• Retention: for a short period set by the hosting provider.

3. Cookies

Cookies are small text files stored on your device when you use the website. We use three categories:

• Necessary – remember your choices in the consent banner. They are required for the website to work and do not need consent.
• Statistics – Google Analytics. Only with your consent.
• Marketing – Google Ads. Only with your consent.

Current list of cookies:

How to manage your consent:

• On your first visit, the banner lets you accept all cookies, reject them or choose categories.
• You can change your decision at any time by clicking the floating cookie settings button in the corner of the page.
• Your choice is remembered for 180 days. After that we will ask again.
• You can also delete or block cookies in your browser settings.

4. Recipients of data

Your data may be disclosed only to entities that help us run the website and our business, to the extent necessary:

• our website and e-mail hosting provider,
• Google Ireland Limited – for Google Analytics, Google Ads and YouTube,
• providers of IT, accounting or legal services,
• public authorities, where required by law.

We do not sell personal data.

5. Transfers outside the European Economic Area

When we use Google services, your data may be transferred to the United States. Google LLC participates in the EU-US Data Privacy Framework, for which the European Commission has found an adequate level of data protection. Google also uses standard contractual clauses approved by the European Commission.

6. Your rights

You have the right to:

• access your data and receive a copy,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing based on our legitimate interest,
• withdraw consent at any time – this does not affect the lawfulness of processing before withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office in Poland (ul. Stawki 2, 00-193 Warsaw) or with the data protection authority in your country of residence.

To exercise these rights, write to draco@draco.info.pl.

7. Automated decision-making and profiling

We do not make decisions producing legal effects concerning you solely by automated means. If you consent to marketing cookies, Google may tailor the ads shown to you based on your visit to our website (remarketing).

8. Changes to this policy

We may update this policy, e.g. when the tools used on the website or the law change. The current version is always available on this page, with the date of the last update shown at the top.