Privacy policy and cookies

This policy describes how Eurowool processes the personal data of website users, particularly those who send enquiries through our contact forms.

1. Data controller

The controller of your personal data is EUROINSULATION.EU sp. z o.o., ul. Magnoliowa 2, 15-523 Grabówka, Poland, tax identification number (NIP) 9662171455. For personal data enquiries, contact info@euroinsulation.eu. The controller has not appointed a data protection officer unless required to do so by law.

2. What data we process

Depending on your enquiry, we may process your first name, last name, company name, tax identification number, email address, phone number, selected topic and message. We may also process technical data needed to protect the form, such as your IP address, device information and details of the form submission event.

3. Purposes and legal bases

• handling your enquiry, responding and conducting correspondence — on the basis of the controller’s legitimate interests (Article 6(1)(f) GDPR);
• taking steps at your request before entering into a contract — where your enquiry concerns a quotation or partnership (Article 6(1)(b) GDPR);
• complying with legal obligations, particularly tax and accounting requirements — where applicable (Article 6(1)(c) GDPR);
• establishing, exercising or defending legal claims, maintaining website security and protecting forms against misuse — on the basis of the controller’s legitimate interests (Article 6(1)(f) GDPR);
• other purposes, including electronic marketing, only where separate, freely given consent has been provided (Article 6(1)(a) GDPR).

4. Whether providing data is required

Providing the information marked as required in the form is voluntary, but necessary for us to receive and handle your enquiry. Without it, we may be unable to respond or prepare a quotation. Providing other information is optional.

5. Recipients and transfers of data

Data may be shared with service providers that support the controller in operating the website and handling correspondence, particularly hosting, email, technical tool and form security providers. Sharing is limited to what is necessary to provide those services and is governed by appropriate agreements. If we use a provider based outside the European Economic Area, transfers rely on a mechanism required by the GDPR, particularly an adequacy decision or standard contractual clauses. Data may also be disclosed to authorised public bodies where required by law.

6. How long we retain data

• enquiry data — for as long as needed to handle the correspondence and resolve the matter, and generally for no longer than 12 months afterwards, unless further retention is needed to perform a contract, comply with a legal obligation or protect against claims;
• data needed to establish, exercise or defend legal claims — until the relevant limitation period expires;
• data required by law — for the period specified by that law;
• data processed on the basis of consent — until consent is withdrawn; withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

7. Your rights

You have the right to access your data and obtain a copy, rectify it, request erasure, restrict processing and, where provided for by the GDPR, data portability. You may also object to processing based on the controller’s legitimate interests. Where processing is based on consent, you may withdraw it at any time.

8. How to exercise your rights

Send personal data requests to info@euroinsulation.eu. To protect your data, we may ask for information to verify your identity. We respond without undue delay, generally within one month of receiving your request, in accordance with Article 12 GDPR.

9. Right to complain

If you believe that the processing of your data breaches the GDPR, you may lodge a complaint with the President of the Personal Data Protection Office in Poland. Information and contact details for the supervisory authority are available at uodo.gov.pl.

10. Automated decisions and profiling

When handling form submissions, we do not make decisions about you based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect you.

11. Cookies, analytics and form security

The website uses necessary technologies for its operation, security and remembering privacy preferences. Forms may use Cloudflare Turnstile, which processes technical data to protect against automated misuse.

We use Google Analytics 4 to measure visits, website use, document downloads and contact performance. We measure phone and email link clicks and successfully received enquiries. Analytics events do not include form contents, names, email addresses or phone numbers entered by users. Google provides this service; see Google’s privacy policy and its explanation of data use on partner websites.

The banner lets you accept analytics and marketing separately, reject optional cookies or save a custom choice. Optional cookies are disabled by default. We use advanced Google Consent Mode V2: before consent or after rejection, the Google tag may send limited measurement signals without reading or writing analytics or advertising cookies. This does not completely disable communication with Google. After analytics consent, Google Analytics may use cookies to recognise a browser and its sessions.

• universal_consent — stores your selected categories and decision date for 180 days, shared between the Polish and English versions.
• ew_lead_receipt — a short-lived, single-use receipt for a successfully submitted form, valid for up to 5 minutes. It contains no form data and is deleted when read.
• _ga and _ga_* — Google Analytics cookies used after analytics consent. Google’s standard lifetime is up to 2 years and may be refreshed on subsequent visits. Your browser may shorten this period. Withdrawing consent removes accessible analytics cookies on this website’s domain.

GA4 user and event data retention is set to 14 months; the retention period for a user identifier may reset with new activity. This setting does not determine how long aggregated reports are retained. Marketing consent controls signals for Google advertising cookies, advertising data and ad personalisation. As of this update, no separate Google Ads tag or Meta Pixel has been deployed.

You can change or withdraw your choice at any time using “Cookie settings”, available on every page. Withdrawing consent does not automatically delete data already sent to Google. You can also delete or block cookies in your browser settings.

Cookie settings

12. Security and policy updates

We apply technical and organisational measures appropriate to the risks, including encrypted connections, access controls and protection against form misuse. This policy may be updated as website features, data processing practices or legislation change. Last updated: 14 September 2026.