Last updated: August 24, 2026
For users in Poland, Article 399 of the Polish Electronic Communications Act (Prawo komunikacji elektronicznej) applies in particular to cookies and comparable storage and access technologies, as well as—to the extent that personal data is processed—the GDPR. Article 399 of the Prawo komunikacji elektronicznej covers the storage of information on a subscriber’s or end user’s device, as well as access to information already stored there. In principle, this is only permitted if the user has been informed in advance, in a clear, easily understandable, and unambiguous manner, about the purpose of the storage or access and about the possibility of controlling it via software or service settings, and has subsequently given consent. An exception applies only if the storage or access is necessary to transmit an electronic message via a public telecommunications network or to provide a telecommunications service or electronically provided service requested by the user. Non-essential analytics, statistics, marketing, personalization, and tracking technologies must therefore be blocked in advance and may only be used after valid consent has been obtained.
Necessary cookies and comparable storage and access technologies that do not require consent under Art. 399 of the Electronic Communications Act.
| Cookie | Publicly Available Privacy Notice | Retention Period | Legal basis in Poland |
|---|---|---|---|
| __cfruid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests, prevent misuse, and ensure the website is provided in a stable and secure manner. | Until the end of the session | Art. 399 of the Electronic Communications Act in conjunction with the exception for technically necessary storage or access; to the extent that personal data is processed: Art. 6(1)(f) of the GDPR. Legitimate interest: secure, stable, and abuse-free provision of the website. |
| __cfuvid | This cookie is used by the website hosting provider’s content delivery or security service provider to limit requests and support the secure operation of the website. | Until the end of the session | Article 399 of the Electronic Communications Act in conjunction with the exception for technically necessary storage or access; to the extent that personal data is processed: Article 6(1)(f) of the GDPR. Legitimate interest: technical security and availability of the website. |
| __cf_bm | This cookie serves to protect against automated access and bots. It helps detect and prevent abusive or technically harmful access to the website. | 30 minutes | Article 399 of the Electronic Communications Act in conjunction with the exception for technically necessary storage or access; to the extent that personal data is processed: Article 6(1)(f) of the GDPR. Legitimate interest: Protection of the website against misuse, attacks, and automated access. |
| __hs_opt_out | This cookie records that a visitor has declined the use of non-essential cookies or should not be prompted for consent again. It contains the value “yes” or “no.” | 6 months | Art. 399 of the Electronic Communications Act in conjunction with the exception for the technically necessary administration of the cookie decision; Art. 6(1)(f) of the GDPR. Legitimate interest: Storage and implementation of the cookie decision, as well as proof of consent management in compliance with data protection regulations. |
| __hs_do_not_track | This cookie may be set to prevent the tracking code from transmitting information to HubSpot. It stores the corresponding opt-out or “do not track” decision. | 6 months | Art. 399 of the Electronic Communications Act in conjunction with the exception for the technically necessary management of tracking opt-out; Art. 6(1)(f) GDPR. Legitimate interest: technical implementation of the tracking opt-out and preservation of user preferences. |
| __hs_initial_opt_in | This cookie prevents the cookie banner from reappearing in strict mode every time a page is loaded. It contains the value “yes” or “no.” | 7 days | Article 399 of the Electronic Communications Act in conjunction with the exception for technically necessary consent management; Article 6(1)(f) of the GDPR. Legitimate interest: user-friendly and technically sound management of the cookie prompt. |
| __hs_cookie_cat_pref | This cookie stores which cookie categories the visitor has consented to or declined. It is used for the technically necessary management of cookie preferences. | 6 months | Article 399 of the Electronic Communications Act in conjunction with the exception for technically necessary consent management; Article 6(1)(f) of the GDPR. Legitimate interest: Storing and implementing the user’s decision to consent or refuse. |
| __hs_gpc_banner_dismiss | This cookie records that a notification regarding Global Privacy Control has been closed. It contains the value “yes” or “no.” | 180 days | Article 399 of the Electronic Communications Act in conjunction with the exception for technically necessary management of data protection preferences; Article 6(1)(f) of the GDPR. Legitimate interest: Management of data protection preferences and prevention of repeated notifications. |
| __hs_notify_banner_dismiss | This cookie records that a “Notify” notification banner has been closed. It contains a Boolean value. | 180 days | Article 399 of the Electronic Communications Act in conjunction with the exception for the technically necessary management of notifications; Article 6(1)(f) of the GDPR. Legitimate interest: user-friendly management of technically necessary notifications. |
| hs_ab_test | This cookie is used to display the same version of an A/B test page to a visitor during a session that was previously assigned to them. | Until the end of the session | Justifiable as a necessary cookie only if the A/B testing serves exclusively to ensure the consistent technical delivery of the page version accessed by the user and does not pursue any analysis, audience measurement, optimization, personalization, marketing, or profiling purposes. Legal basis for this strictly limited case: Art. 399(3) of the Electronic Communications Act; to the extent that personal data is processed: Art. 6(1)(f) of the GDPR. In all other cases, consent is required prior to setting or reading the cookie in accordance with Art. 399 of the Electronic Communications Act and Art. 6(1)(a) of the GDPR. |
| wg-translations | This local storage entry is used by the translation feature to store translations that have already been loaded or generated in the browser and to display the website in the language selected by the user. | Depending on the provider’s or browser’s configuration; specified in the document as “stored indefinitely.” | Art. 399 of the Electronic Communications Act, provided that storage is strictly necessary for the explicitly requested language function; Art. 6(1)(f) of the GDPR. Legitimate interest: multilingual and user-friendly provision of the website. |
| wg-slugs | This local storage entry is used by the translation feature to store translated URLs in the browser and to provide navigation in the selected language. | Depending on the provider’s or browser’s configuration; specified in the document as “stored indefinitely.” | Art. 399 of the Electronic Communications Act, provided that the storage is strictly necessary for the explicitly requested language function; Art. 6(1)(f) of the GDPR. Legitimate interest: consistent language-based navigation. |
| wglang | This cookie stores the language selected by the user so that the website can be displayed in the preferred language. | Until the end of the session. | Art. 399 of the Electronic Communications Act, provided that storage is strictly necessary for the explicitly requested language function; Art. 6(1)(f) of the GDPR. Legitimate interest: Providing the language version selected by the user. |
These are non-essential cookies that are controlled via the cookie banner. As a visitor to a website powered by HubSpot, you can object to the use of these cookies by not giving your consent.
| Cookie / Storage Entry | Publicly Available Privacy Notice | Retention Period | Legal Basis in Poland |
|---|---|---|---|
| __hmpl | This storage entry contains metadata on tracking events that HubSpot collects while you use the website. It is used to analyze website usage and is only used if the appropriate consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration. | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Use is based solely on prior, voluntary, informed, and revocable consent. |
| hublytics_events_53 | This cookie is temporarily used by HubSpot to store tracking events until they are technically transmitted. It is used for analytical purposes and is only used if consent has been granted. | Session storage or local storage, depending on the consent and tracking configuration. | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Use is permitted only with prior consent. |
| __hstc | This HubSpot cookie is used to recognize and track visitors across multiple sessions. In particular, it stores the domain, visitor ID, times of visits, and session numbers. | 6 months | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required because the cookie is used for analytics and recognition purposes. |
| hubspotutk | This HubSpot cookie is used to recognize a visitor. It may be transmitted to HubSpot when a form is submitted and helps identify and merge duplicate contacts. | 6 months | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required because the cookie is used for visitor recognition and CRM/analytics mapping. |
| __hssc | This HubSpot cookie is used to track sessions and page views within a session. It supports the analysis of user behavior on the website. | 30 minutes | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required because the cookie is used for analytics purposes. |
| __hssrc | This HubSpot cookie is set to determine whether a visitor has restarted their browser and whether a new session should be initiated. | Until the end of the session | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required if the cookie is used in connection with HubSpot analytics tracking. |
| _ga | This Google Analytics 4 cookie is used to distinguish individual users and to compile statistical information about website usage. | By default, 2 years, subject to different browser settings or a different configuration. | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required because the cookie is used for analytics and recognition purposes. |
| _ga_<Container-ID> | This Google Analytics 4 cookie is used to store the session status and to statistically analyze website usage. | By default, 2 years, subject to different browser settings or a different configuration. | Art. 399 of the Electronic Communications Act; Art. 6(1)(a) of the GDPR. Consent is required because the cookie is used for analytics purposes. |
