Cookie Policy
How cookies, analytics and advertising tools work on Morze Rejsów.
Last updated: 8 August 2026.
1. How it works
Without additional consent, the Website uses only technologies necessary for operation, security or remembering privacy choices. Analytics and marketing are optional.
We use Basic Consent Mode v2. Before the user decides, external Google Analytics, Google Ads / Google Tag Manager and Meta Pixel tags are not downloaded by the browser and do not send data to those services. After consent, only the categories authorised by the user are enabled.
2. Legal basis
Storing information on a user’s device or accessing information already stored is governed primarily by Articles 399–400 of the Polish Act of 12 July 2024 — Electronic Communications Law (Prawo komunikacji elektronicznej) and Article 5(3) of Directive 2002/58/EC (ePrivacy). Where a technology involves processing personal data, the GDPR also applies, in particular the requirements for valid consent, accountability and withdrawal of consent.
Official texts: Polish Electronic Communications Law, Directive 2009/136/EC and GDPR.
3. Technology categories
Essential — always active
Used only for website operation, security, functions explicitly requested by the user and remembering privacy choices.
| Name / mechanism | Purpose | Period |
|---|---|---|
mr_cookie_consent | Remembering the choice identifier, notice version and selected categories | maximum {{COOKIE_CONSENT_MAX_AGE_DAYS}} days |
mr_session | Administrator-panel session; not set for ordinary visitors | up to 12 hours |
| Cloudflare / Turnstile, if enabled | Protection of the Website and forms against abuse | according to the actual configuration and provider rules |
Analytics — after consent
After analytics consent, Google Analytics 4 may be enabled directly or through Google Tag Manager. Specific cookies and identifiers depend on the Google configuration; cookies from the _ga family may typically be used.
Marketing — after consent
After marketing consent, Google advertising tags and Meta Pixel may be enabled. They may be used for conversion measurement, remarketing, audience building and ad personalisation. Depending on configuration, cookies such as _gcl_*, _fbp and _fbc may appear.
4. How consent is given
On the first visit, the user can accept all categories, reject all optional categories, or open settings and choose categories separately. Analytics and marketing are disabled by default. Refusal does not restrict access to Website content.
The choice is remembered for a maximum of {{COOKIE_CONSENT_MAX_AGE_DAYS}} days. A new choice may be requested earlier if we materially change the purposes, providers or notice version.
5. Changing or withdrawing consent
Consent can be changed or withdrawn at any time using the “Cookie settings” button in the footer. When previously granted consent is restricted, the Website updates the consent state, removes recognised first-party cookies for the disabled category to the extent technically possible, and reloads the current page so that previously loaded scripts do not remain active in that tab.
The Website cannot independently delete cookies stored on domains belonging to external providers. Those cookies can be removed through browser settings or the provider’s own mechanisms.
6. Choice log and proof of notice content
For accountability, the server stores only: a random consent identifier, notice version, a cryptographic hash of the immutable notice snapshot, selected categories, method of choice, language and time.
The log does not store the IP address, visited URL, User-Agent, name, email address or CRM enquiry identifier. Choice events are automatically deleted after a maximum of {{CONSENT_LOG_RETENTION_DAYS}} days. The notice snapshot contains no user data and is retained as version documentation.
7. External tools
Google Tag Manager, Google Analytics 4 and Meta Pixel identifiers are configured on the server side. Entering those identifiers does not itself start the tools before consent.
For GTM, the Consent Mode state is set before the container loads. Every tag in the container must also have appropriate consent requirements; in particular, Custom HTML tags must not bypass the user’s choice. The configuration should be checked in Tag Assistant after every material container change.
8. Retention by external providers
Morze Rejsów controls the retention of its own consent cookie and consent log. Retention on the side of Google, Meta, Cloudflare or other providers depends on the active configuration of the relevant product and the provider’s rules. The Privacy Policy describes the criteria and settings we use instead of claiming one universal period for all external data.
9. Browser settings
Cookies can also be removed or blocked in browser settings. Blocking optional technologies does not prevent use of the Website’s essential functions.
10. Contact
The data controller is {{PRIVACY_CONTROLLER_NAME}}. Privacy questions may be sent to {{PRIVACY_CONTROLLER_EMAIL}}. More information is available in the Privacy Policy.