1. What are cookies?

Cookies are small text files stored on your device (computer, tablet, smartphone) when you visit our website. They let us remember your preferences, improve the site’s functionality and analyse how it’s used.

This Cookie Policy explains which cookies we use, the purposes we use them for and how you can manage your settings.

2. Legal basis

The use of cookies on our website complies with:

  • General Data Protection Regulation (GDPR) — EU Regulation 2016/679
  • ePrivacy Directive — Directive 2002/58/EC (the “Cookie Directive”)
  • Applicable national e-communications laws of the user’s country of residence

For strictly necessary cookies we do not need your consent (Art. 6(1)(f) GDPR — legitimate interest). For all other cookies (analytics, marketing) we obtain your explicit consent under Art. 6(1)(a) GDPR.

3. Types of cookies

3.1. Strictly necessary cookies

These cookies are essential for the basic operation of the website. Without them, key services such as navigation, access to secure areas and cart functionality cannot be provided. They do not require consent.

Cookie nameProviderPurposeStorage
cookieyes-consentCookieYesStores your cookie consent preferences1 year
__stripe_midStripeFraud prevention for payments1 year
__stripe_sidStripeSession identifier for secure paymentsSession

3.2. Functional cookies

These cookies enable enhanced functionality and personalisation, such as storing your language preference or remembering form inputs.

Cookie nameProviderPurposeStorage
localeTollentrioStores your preferred language1 year

3.3. Analytics cookies

These cookies help us understand how visitors interact with our website by collecting and reporting information anonymously. They are only set with your explicit consent.

Cookie nameProviderPurposeStorage
_gaGoogle AnalyticsDistinguishes users for analysis2 years
_ga_*Google Analytics 4Stores and counts page views2 years
_gidGoogle AnalyticsDistinguishes users (24h)24 hours

3.4. Marketing cookies

These cookies are used to show visitors relevant adverts and measure the effectiveness of advertising campaigns. They are only set with your explicit consent.

Cookie nameProviderPurposeStorage
_gcl_auGoogle AdsConversion tracking for ad campaigns90 days
_gac_*Google AdsStores campaign information90 days
IDEGoogle DoubleClickRemarketing and personalised ads13 months
test_cookieGoogle DoubleClickChecks whether cookies are enabled15 minutes

4. Google Consent Mode v2

We use Google Consent Mode v2 (GCM v2) to control data collection by Google services based on your cookie settings. GCM v2 allows us to use Google Analytics and Google Ads in line with GDPR and the ePrivacy Directive.

How it works:

  • Denied by default: on the first visit all non-essential cookies are denied by default (ad_storage, analytics_storage, ad_user_data, ad_personalization = denied).
  • After consent: when you accept in the cookie banner, the relevant consents are updated and Google services may collect data.
  • Cookieless pings: even without consent, anonymised pings without cookies can be sent for basic statistics.

This implementation ensures that no personal data is sent to Google without your explicit consent.

5. Consent Management Platform (CookieYes)

We use CookieYes by Adzapier LLC as our Consent Management Platform (CMP) to manage your cookie preferences.

Provider: Adzapier LLC, 110 E Houston St Floor 7, San Antonio, Texas 78205, USA

Features:

  • Displays a GDPR-compliant cookie banner on your first visit
  • Provides granular control over cookie categories
  • Stores your consent preferences for 12 months
  • Integrates with Google Consent Mode v2
  • Allows you to withdraw or change consent at any time

6. Managing your cookie settings

6.1. Through our cookie banner

On your first visit a cookie banner is shown. You can accept all cookies, allow only necessary cookies or customise your settings.

6.2. Through the cookie icon

After your first choice you can change your settings at any time by clicking the cookie icon in the bottom-left corner of the site.

6.3. Through your browser

Most browsers let you control cookies:

  • Chrome: Settings → Privacy and security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies
  • Safari: Settings → Privacy → Manage cookies
  • Edge: Settings → Cookies and site permissions

Note: disabling cookies may affect the functionality of our website.

7. Third parties and international data transfers

Some cookies are set by third-party providers located outside the EU/EEA:

  • Google (USA): Google Analytics, Google Ads, Google Tag Manager — transfers based on EU Standard Contractual Clauses (SCCs) and the EU–U.S. Data Privacy Framework.
  • Stripe (USA): payment processing — transfers based on SCCs and the EU–U.S. Data Privacy Framework.
  • CookieYes/Adzapier (USA): consent management — transfers based on SCCs.

We ensure that all international data transfers meet GDPR requirements.

8. Your rights

Under the GDPR you have the following rights regarding cookies and the related data processing:

  • Right to withdraw consent: you may withdraw consent at any time without affecting the lawfulness of previous processing.
  • Right of access: you may request information about data collected through cookies.
  • Right to erasure: you may request the deletion of data collected through cookies.
  • Right to object: you may object to processing based on legitimate interest.

To exercise your rights, contact us at: help@tollto.com

9. Changes to this Cookie Policy

We may update this Cookie Policy from time to time to reflect changes in our practices or for other operational, legal or regulatory reasons.

The date of the last update is shown at the top of this page. We recommend reviewing this page regularly.

10. Contact

For questions about this Cookie Policy or about the use of cookies on our website, please contact:

Entrio sp. z o.o.
ul. Zagórna 28, 37-420 Kopki, Poland
Email: help@tollto.com
Phone: +48 880 685 468