The policy was updated on May 25, 2018



1. The operator of the website (hereinafter "the Website") is KCR S.A. with its seat at 6 Postępu str., 02-676 Warsaw registered in the Regional Court for the Capital City of Warsaw 13th Commercial Division of the National Court Register under the number KRS 0000289542, tax identification number (NIP): 5213169665, share capital: 571.666,20 PLN (fully paid), hereinafter referred to as KCR.

2. This Privacy Policy is for information purposes only and is not intended to substitute the security policy pursued by KCR in accordance with the personal data protection regulations.

3. In terms of data, which are personal data protected under the personal data protection regulations, the data controller is KCR.


The notions below shall bear the following meaning:
1. User – any natural person having full capacity to perform acts in law, legal person or organizational unit having legal capacity that uses the Website, by receiving the data or providing the Website with the data in any form. The User of the Website can also be defined as a natural person having limited capacity to perform acts in law, under the condition of obtaining a consent from the statutory representative.

2. Cookie files (the so-called “cookies") - computer data, especially text files that are stored in the Website User’s final device and are intended for using the Website. Cookies typically contain the name of the website of origin, their storage time in the Website User’s final device and a unique number.

3. “Session” cookie files – temporary cookies that are stored in the Website User's final device until he or she logs out, leaves the web page or closes the software (the web browser).

4. “Persistent” cookie files – cookies stored in the Website User's final device for the time specified in cookie file parameters or till they are removed by the User.

5. Website User's final device - electronic device by means of which the User gains access to the Website.


1. The Website collects information provided voluntarily by the User. The aforementioned data contained in a form may be made available to third parties solely upon express consent of the User. The Website may additionally save information about technical parameters of the User’s final device (including IP address of the User’s final device).

2. The data provided about the User may constitute collection of personal data, in which case, KCR shall make sure that there is legal basis for processing such personal data.

3. KCR may use technology such as that provided by Google Analytics, and Hotjar, which also collects information about the Website Users’ visit and behavior. These tools enable KCR to analyse how the Website User interacts with KCR’s website and any apps provided therein, to optimize the Website and User experience. The information KCR collects through these tools may include: IP address, the type of a browser, the number of sessions per browser on each device, the type of the device and operating system the Website User is using, referrer information, time zone and country, user preferences; how many and which pages the Website User visited, how much time the User spends on which pages, which links the User chooses to click etc. To opt out of being tracked by Google Analytics across all websites visit Hotjar stores this information in a pseudonymized user profile. Neither Hotjar nor we will ever use this information to identify individual users or to match it with further data on an individual user. For further details, please see Hotjar’s privacy policy by clicking on this link. You can opt-out to the creation of a user profile, Hotjar’s storing of data about your usage of our site and Hotjar’s use of tracking cookies on other websites by following this opt-out link.

4. The technology described above may require transferring personal data to the USA. KCR guarantees that such transfer may only take place upon providing legal basis (e.g. upon signing standard contractual clauses). MailChimp and Google participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework.


1. KCR processes the personal data for the following purposes:
- carrying out services offered through the Website
- enabling the Website User to contact KCR for any reason
- contacting the Website User in relation to the services offered through the Website
- ensuring security of the services, including prevention of frauds
- dealing with the Website Users’ claims
- carrying out analytics and statistics
- monitoring activities of the Website User
- archiving the data

2. In the case when the data is provided in the form enabling identification of a natural person, the data subject has right of access to their data, the right to rectify these data, the right to object to the processing, the right to demand data deletion or limitation and – where the data is processed on the basis of consent or to execute an agreement – the right to transmit the data to another data controller. Where the Website User has granted his/her consent, he/she may withdraw the consent at any time, The Website User may also lodge a complaint with the supervisory authority.

3. It should be emphasized that the data provided in the form shall be processed solely for the purposes resulting from the functions of this Website. The data is processed on the basis of KCR’s legitimate interests which relate to offering the Website services to the Users and on the basis of consent of the User.

4. If you have any questions to KCR concerning the processing of your personal data, please contact us at

5. Data Protection Officer: Ms. Katarzyna Ochman, e-mail:


Our websites may contain links to other websites. Please keep in mind when you access websites operated by other parties, whether through links on our websites or otherwise, that we do not control what happens on those websites. You should always check the privacy policy of the website you are visiting in order to be sure you know how the operator of that website will collect information from you and what the operator of that website will do with the information.


1. The Website uses cookies which are used to generate statistics and retain User preferences.

2. The entity that places cookies in the Website User’s final device and has access to them (under the Website) is KCR and/or entities co-operating with KCR on its behalf.

3. In many cases the software used for browsing websites allows saving cookies on the Website User’s final device by default settings of the User’s browser. Therefore, the Website Users may change the settings related to cookies at any time in this respect, in a way that allows deleting cookies or blocking their use automatically.

4. KCR encourages its Website Users to actively choose their browsers’ settings and express consent to the preferred way of cookie use but needs to inform that restricting the use of cookies may affect some of the Website’s functionalities.

5. Cookie files placed in the final device of the Website User may also be used by the advertisers and partners co-operating with the Website operator.


1. Information concerning certain behavior of User specified by the Website shall be stored in the server event log and used solely for the Website administration purposes i.e. analysis of the Website software functioning. It will however not be linked to particular persons using the Website.

2. Information referred to in point 1 hereinabove may contain data referring to selected technical parameters of the Website User’s final device (including IP address of the device).


1. The data shall be made available to external parties only in accordance with the binding laws.

2. The data which permit identification of a natural person shall be made available solely upon consent of the data subject.

3. KCR may be obliged to make the data collected by the Website available to authorized bodies on the basis of their lawful demands and in the scope of such demands.


1. By signing to our KCR Insights you are signing up to receiving emails which may include news about the company (newsletter), comments, articles, question of the month and other quality content about KCR and companies of its group.
KCR Insights content shall be sent out in an electronic mail form to the e-mail address provided on a voluntary basis by the Website User.

2. The KCR Insights database contains email addresses provided by the Users and the date of adding their e-mail address to the database as well as their newsletter preferences, if any. KCR does not collect names or surnames of the KCR Insights users but these may be derived from email addresses provided by the users.

3. Users may at any time unsubscribe from the KCR Insights services by clicking the link in the KCR Insights mails which were sent to them earlier.

4. To manage the KCR Insights subscribers list KCR uses Mailchimp, a marketing platform for content distribution. The platform collect feedback from our subscribers in terms of who opened our mailings, which links clicked, the reasons of unsubscribing etc. MailChimp participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework. More information about MailChimp data privacy compliance here.


1. KCR offers the Website Users a smart scheduling tool and automatic reminder for doctor’s appointments or medical examinations called KCR Date Forecaster.
2. The service is thought to send the Website Users notifications and reminders about their upcoming doctor’s visits. It allows to note the name of the doctor and any other details about the visit (e.g. a need to drink a lot of water beforehand).
3. For the purposes of offering this service KCR collects the following personal data: name, surname, email address of the application user, name and surname of the doctor, date and type of a visit, special need for the visit.
4. The data are processed for the sole purpose of sending email notifications. The data are deleted 7 days after sending the notification.


1. KCR enables Website Users to contact KCR via Contact services.
2. While contacting KCR, the Website User is asked to provide some personal data such as name and surname, company name, email address, enquiry (obligatory) and position, department, phone number, area of interest, source of knowledge about KCR (voluntarily).
3. Upon receiving an enquiry through Contact, KCR files them in its CRM system. The system is hosted by Salesforce, a USA-based company and therefore the Website Users data may be transferred to the USA. KCR guarantees that such transfer may only take place upon providing legal basis (e.g. upon signing standard contractual clauses).
4. The data collected through the Contact service will be used by KCR to answer the Website User’s enquiry and in case of a need for subsequent business purposes arising of such an enquiry.


The User might also contact KCR for his/her career development purposes. In this case the personal data is provided to KCR voluntarily and is going to be processed only for recognizing the User as a KCR work candidate.


1. KCR does not agree to receiving unordered commercial information (spam) to the e-mail addresses indicated in the Website. It should be noted that such actions are unlawful.

2. Any questions or reservations concerning the Website and its functionalities should be sent to

3. KCR reserves the right to modify or amend this Privacy Policy at any time and for any reason including, inter alia, the development of the Website or any changes in the binding laws.