Cookie Policy

What are cookies?

Cookies are small text files sent by a website that a user visits to the user's device. A cookie is stored on the device by the web browser. When the user revisits the same site, the browser sends the cookie back to the server.

Why do we use cookies?

We use cookies to:

• Ensure proper functioning of the website
• Customize page content to user preferences
• Remember user settings
• Collect anonymous statistics on website usage
• Analyze website traffic for optimization

Types of cookies used

Essential Cookies

These cookies are absolutely essential for the proper functioning of our website and services offered. Functions: security and user authentication, user session management, security against attacks (CSRF, XSS), maintaining login state. Examples: PHPSESSID (PHP session identifier), Session ID, CSRF Token, Security Cookies. They cannot be rejected - they are required for proper website functioning. Usually deleted automatically after closing the browser. They do not require express consent, as they are essential (processing is based on Art. 6 para. 1 lit. f GDPR - legitimate interest).

Functional Cookies

These files enable additional, more advanced website features that enhance user comfort. Functions: remembering user choices, adapting interface to preferences, personalization features, improving website functionality. Examples: preferred language, website theme (light or dark), accessibility preferences, browsing history, user messages. User has the right to reject - website will function, but personalization features will not be available. Storage period: usually from a few days to 1 year. They require expressed user consent (Art. 6 para. 1 lit. a GDPR).

Analytical Cookies

These files allow us to analyze how users use the website, which helps us improve it. Functions: analysis of number of visits, analysis of traffic sources, analysis of devices and browsers, analysis of user behavior, identification of errors on the website. Examples: Google Analytics (user identifier _ga, session identifier _gid, analysis of time spent on website). Data anonymization: Google Analytics - data is anonymized by hiding the last octet of IP address. They do not collect personal data - they serve to collect aggregated statistics. User has the right to reject - website will function without analytical cookies. Storage period: Google Analytics - 26 months from last action. They require expressed user consent (Art. 6 para. 1 lit. a GDPR).

Marketing/Advertising Cookies

These files are used to track users across different websites to display ads tailored to their interests. Functions: tracking user across different websites, collecting information about interests, displaying personalized ads, retargeting, measuring effectiveness of advertising campaigns. Examples: Facebook Pixel, Google Ads, LinkedIn Pixel, TikTok Pixel. Data collected: browsing history, user interests, website behavior, device information. User has the right to reject - website will function. Very important: user has the right to equivalent alternative (either access to website without tracking for free, or access to website with tracking for a fee). Access to website cannot be blocked without clear, equivalent alternative. Storage period: from a few weeks to 12 months. They require expressed, unambiguous user consent (Art. 6 para. 1 lit. a GDPR). Consent must be clearly expressed for each tool. User must have easy ability to withdraw consent. UODO (2025) principle: Expressing consent must be as easy as withdrawing it. 'Reject' or 'Decline' button cannot be hidden. User must have choice without losing access to website.

Third-party cookies

Our website may use third-party cookies:

• Google Analytics - Purpose: Website traffic analysis. Owner: Google LLC. Cookies: _ga, _gid, _gat, _gac_*. Storage period: 26 months from last action. Consent required: Yes (analytical cookies). Privacy policy: https://policies.google.com/privacy
• Google Maps - Purpose: Displaying map with office location. Owner: Google LLC. Cookies: NID, PREF. Consent required: Yes (if cookies are used). Policy: https://policies.google.com/privacy
• Facebook Pixel (If Used) - Purpose: Tracking for Facebook marketing campaigns. Owner: Meta Platforms, Inc. Cookies: _fbp. Consent required: Yes (marketing cookies) - only if patient expresses consent. Policy: https://www.facebook.com/policies

Cookie management

On first visit to www.stacjamowa.pl website, user will see a cookie banner that informs about cookie usage on the website, purposes of cookie processing, types of cookies and ability to manage cookies. User has the option to: Accept All (accept all types of cookies), Reject All (reject all non-essential cookies), Settings (customize cookie preferences), More Information (go to full Cookie Policy). Very important (UODO requirement): 'Reject' or 'Reject All' button must be equally easy to find as 'Accept' button. Tricks such as hiding 'Reject' button, making 'Reject' button smaller or emphasizing 'Accept' while muting 'Reject' are not allowed. In 'Settings' section, user can enable/disable functional, analytical and marketing cookies and check details - list of all cookies and their purpose. User can change cookie preferences at any time by clicking cookie icon in website footer, clearing cookies from browser or changing browser settings.

How to delete cookies?

Instructions for deleting cookies in popular browsers:

• Chrome: Settings > Privacy and security > Cookies
• Firefox: Settings > Privacy and security > Cookies
• Safari: Preferences > Privacy > Manage website data
• Edge: Settings > Cookies and site permissions

Right to Express Consent

In accordance with GDPR and UODO (2025) guidelines, the website must obtain expressed, voluntary, specific and unambiguous user consent for non-essential cookies. Non-essential cookies are not loaded until user accepts them. The website documents when consent was expressed, what its content was and method. User can withdraw consent at any time. If user rejects cookies, non-essential cookies will not be stored on their device - only essential cookies will function. The website does NOT create 'cookie walls' - i.e., it does not block access to content without accepting all cookies. In accordance with Court of Justice of the EU ruling (C-21/23, 2024): Patient cannot be forced to accept tracking to view the offer or use services. If patient rejects marketing cookies, they should have full access to website without restrictions.

Contact

For questions regarding Cookie Policy:

• Email: kontakt@stacjamowa.pl
• Phone: +48 737 394 377
• Address: Tytusa Chałubińskiego 1A, 80-807 Gdańsk