1. Purpose of this Notice
This Cookie Notice describes what cookies and similar technologies are used on the corporate website of Suite Profit Sp. z o.o. published at suiteprofit.org and on any Suite Profit-controlled subdomain that a visitor may reach from it. It explains the categories of cookies deployed, the legal basis for their use, the retention period applicable to each of them, and how a visitor may exercise granular control over their preferences. The Notice is issued by Suite Profit Sp. z o.o., a Polish limited liability company seated at ul. Nowogrodzka 42 lok. 11, 00-695 Warszawa, Polska, entered in the register of entrepreneurs under KRS 0001102845, NIP 523-456-78-90, and REGON 528 145 906.
2. What is a cookie
A cookie is a small text file that a website causes to be stored on the visitor's terminal equipment — a laptop, desktop computer, tablet, or mobile phone — and that the same website may later read back when the visitor returns. Cookies were originally introduced to keep sessions active across page loads, but they have since become the standard mechanism for many other purposes such as remembering interface preferences, protecting forms against cross-site request forgery, and, subject to consent, measuring aggregated usage patterns. The same technical principles apply to other client-side storage mechanisms such as local storage, session storage, and IndexedDB. Where this Notice refers to "cookies", the description extends by analogy to those equivalent technologies.
3. Legal basis
Suite Profit relies on the framework established by Directive 2002/58/EC on privacy and electronic communications ("ePrivacy Directive"), as transposed into Polish law by Article 173 of the ustawa z dnia 16 lipca 2004 r. Prawo telekomunikacyjne, and by Regulation (EU) 2016/679 (the "GDPR"). Strictly necessary cookies are stored on the terminal equipment on the basis of legitimate interest (Article 6(1)(f) GDPR) because they are indispensable for the delivery of the electronic service that the visitor has requested. All other cookies are deployed only after the visitor has expressed a specific, informed, freely given, and unambiguous consent within the meaning of Article 4(11) and Article 7 GDPR.
4. Consent mechanism
On the visitor's first arrival at suiteprofit.org and on every arrival following the expiry of an existing consent, a consent banner is displayed at the bottom of the viewport. The banner presents three primary options with equivalent prominence: "Accept all", "Reject all", and "Customise". The "Customise" option opens a preference centre in which each non-essential category is presented with a toggle that defaults to the off position. No non-essential cookie is written before the visitor makes a choice. Closing or ignoring the banner has the same effect as pressing "Reject all". The consent decision is stored inside a dedicated cookie named consent_state, so that the banner does not reappear on subsequent visits until the retention period of consent (see section 12) has expired or until the visitor decides to reopen the preference centre.
5. Categories of cookies
Suite Profit organises the cookies used on suiteprofit.org into four categories, corresponding to the classification recommended by the European Data Protection Board and the Polish supervisory authority. The categories are: strictly necessary, analytics, marketing, and preferences.
5.1 Strictly necessary
Strictly necessary cookies enable core website functions such as maintaining the visitor's session, protecting forms against automated attacks, remembering that a consent choice has already been made, and load-balancing across servers. These cookies do not require prior consent because their sole purpose is to deliver an information-society service requested by the visitor. They cannot be disabled from the preference centre because their absence would render the website non-functional.
5.2 Analytics
Analytics cookies measure how visitors interact with the website in aggregate: which pages are viewed, in which order, from which entry points, and with what conversion rate to key downstream actions such as sales-contact requests. Suite Profit uses only a self-hosted analytics stack running on infrastructure that Suite Profit controls inside the European Union. No data is transmitted to third-party providers such as Google Analytics. Analytics cookies are deployed only after the visitor's consent.
5.3 Marketing
Marketing cookies would allow Suite Profit or its advertising partners to measure the effectiveness of paid distribution campaigns and to display Suite Profit content on external properties. At the effective date of this Notice, Suite Profit deploys no third-party marketing cookies on suiteprofit.org. The category is nonetheless documented so that any future change is transparent and requires an updated consent from previously consenting visitors.
5.4 Preferences
Preferences cookies remember non-essential interface choices such as language, colour theme, or the collapsed state of the pricing comparison table. These cookies are deployed only after the visitor's consent, unless the preference in question is required to deliver a service that the visitor has expressly requested.
6. Specific cookies deployed
The table below lists each cookie currently deployed on suiteprofit.org, together with its provider, purpose, category, and retention period. The list is reviewed at least twice a year and updated as necessary; the effective date at the top of this Notice indicates when the list was last revised.
- session — Provider: Suite Profit. Category: strictly necessary. Purpose: maintains the visitor's authenticated session in the operator console. Retention: for the duration of the browser session; deleted on browser close or explicit sign-out.
- csrf — Provider: Suite Profit. Category: strictly necessary. Purpose: protects form submissions against cross-site request forgery. Retention: for the duration of the browser session.
- cart_id — Provider: Suite Profit. Category: strictly necessary. Purpose: identifies the shopping-basket state during self-service pricing simulations. Retention: seven (7) days.
- analytics_id — Provider: Suite Profit self-hosted analytics. Category: analytics (consent required). Purpose: aggregated measurement of pageviews and downstream conversions. Retention: thirteen (13) months.
- consent_state — Provider: Suite Profit. Category: strictly necessary. Purpose: stores the visitor's consent decision so that the banner is not displayed on every visit. Retention: thirteen (13) months.
7. Third-party cookies
Suite Profit does not deploy third-party marketing pixels on suiteprofit.org, does not use Google Analytics, and does not use Facebook Pixel, LinkedIn Insight Tag, or equivalent trackers. Where Suite Profit needs to embed content hosted by a third party (for instance, a webinar recording), that embed is loaded only after the visitor's explicit interaction with a placeholder that identifies the third party and its data-protection implications, so that no data is transmitted to that third party before the visitor decides to engage with the embed.
8. Managing preferences
A visitor may reopen the preference centre at any time by clicking the "Cookie preferences" link in the website footer. Changes take effect immediately for subsequent page loads. Withdrawing consent for a category causes the cookies of that category to be deleted from the visitor's terminal equipment on the next page load. Withdrawing consent does not affect the lawfulness of processing that took place while consent was in force.
9. Browser controls
Modern browsers offer built-in controls to block cookies, to delete cookies stored so far, and to configure exceptions per site. Below are pointers to those controls for the browsers most commonly used to access suiteprofit.org:
- Google Chrome — Settings, Privacy and security, Cookies and other site data.
- Mozilla Firefox — Preferences, Privacy and Security, Cookies and Site Data.
- Microsoft Edge — Settings, Cookies and site permissions, Manage and delete cookies and site data.
- Apple Safari — Settings, Privacy, Manage Website Data.
- Brave — Settings, Shields, Cookies.
Blocking cookies at browser level may prevent the strictly necessary cookies from functioning, in which case parts of the website will become unavailable. Suite Profit encourages visitors who wish to refuse non-essential cookies to use the in-page preference centre rather than a global browser rule, so that indispensable functionality remains available. The exact wording of the menus in the list above may vary between browser versions; the underlying settings, however, are consistent across the modern releases of each product.
10. Do Not Track
The Do Not Track (DNT) header is an HTTP signal that some browsers can send to communicate the visitor's preference against being tracked. There is currently no consensus among European supervisory authorities on the legal effect of a DNT signal, and the specification has not been formally adopted. Suite Profit nonetheless treats an active DNT signal received from a visitor's browser as equivalent to a "Reject all" decision on the consent banner, with the corresponding effect on non-essential cookies.
11. Global Privacy Control
Suite Profit likewise recognises the Global Privacy Control (GPC) signal as an equivalent decision to reject non-essential cookies. Where a visitor's browser transmits a GPC signal, Suite Profit skips the display of the consent banner for that visit and records the decision in the same way as an explicit "Reject all". Suite Profit reserves the right to reconsider that behaviour if authoritative guidance departs from the current interpretation, in which case an updated version of this Notice will make the new posture explicit.
12. Consent renewal
The consent decision is renewed every thirteen (13) months, in line with the recommendation of the European Data Protection Board. On expiry of that period, the banner is shown again on the visitor's next visit so that consent can be confirmed, refined, or withdrawn. Renewal is likewise triggered whenever a materially new cookie is introduced, so that a previously granted consent is not silently extended to a purpose that the visitor has not evaluated.
13. Cookie audit cadence
Suite Profit performs an internal audit of the cookies present on suiteprofit.org at least every six (6) months. The audit reconciles the cookies actually deployed against the inventory published in this Notice, identifies any deviation, and initiates a documentation update or a cookie removal as appropriate. The audit log is retained for two (2) years and is available for inspection at the request of the DPO. The audit workflow is executed jointly by the security engineering team and the DPO, and its findings are reported to the executive team as part of the quarterly compliance review.
14. Changes to this Notice
Suite Profit may update this Cookie Notice from time to time to reflect changes in Applicable Law, changes in the cookies deployed on suiteprofit.org, or changes in guidance issued by the Polish supervisory authority or the European Data Protection Board. Material changes will be announced by a prominent notice on the homepage of suiteprofit.org for at least fourteen (14) days before their effective date. Non-material changes (clarifications, typographical corrections) will be published without prior notice, and the version and effective date at the top of the Notice will be updated accordingly.
15. Cookies inside the operator console
The operator console at app.suiteprofit.org is available only to Authorised Users of Customer organisations. The cookies deployed there are strictly necessary within the meaning of section 5.1 above: authentication, session management, cross-site request forgery protection, and load balancing. No analytics or marketing cookies are deployed inside the operator console, because such cookies would not correspond to any purpose that the Customer has instructed Suite Profit to pursue as processor under Article 28 GDPR.
16. Data subject rights
Because consent to non-essential cookies is a form of processing of personal data, the rights set out in Articles 15 to 22 GDPR apply. In particular, a visitor may withdraw consent at any time from the preference centre, may obtain access to the data collected about them by the analytics stack (which is designed to hold no identifier tied to a specific person), and may request its erasure. Full information on rights and on how to exercise them is available in the Privacy Notice at /legal/privacy.
17. Complaint to the supervisory authority
Where a visitor considers that Suite Profit has processed personal data connected with cookies in a manner incompatible with the GDPR or the Polish DPA 2018, that visitor has the right to lodge a complaint with the Prezes Urzędu Ochrony Danych Osobowych ("UODO"), ul. Stawki 2, 00-193 Warszawa, telephone +48 22 531 03 00, website uodo.gov.pl. The right to a complaint is without prejudice to any other administrative or judicial remedy available under Polish or European law.
18. Contact
Questions about this Cookie Notice or about the processing of personal data by Suite Profit may be addressed to the Data Protection Officer, Aleksandra Kwiatkowska, at dpo@suiteprofit.org or by post to Suite Profit Sp. z o.o., Inspektor Ochrony Danych, ul. Nowogrodzka 42 lok. 11, 00-695 Warszawa, Polska. Ordinary support requests are handled at support@suiteprofit.org. Suite Profit Sp. z o.o. is registered under KRS 0001102845, NIP 523-456-78-90, REGON 528 145 906, with fully paid-up share capital of PLN 10 000, and is supervised for data-protection purposes by the Prezes Urzędu Ochrony Danych Osobowych.