In accordance with the requirements of REGULATION OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL (EU) 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data and on the free movement of such data, hereinafter referred to as “regulation”, replacing Directive 95/46/EC (general data protection regulation), we would like to inform you that:
- Personal data Controller
The Controller of personal data, hereinafter referred to as the “Controller”, is MVProject sp. z o.o. with its registered office at 27 Jana Uphagena Street, 80-237 Gdańsk.
Registration data:
KRS 0000517660
Taxpayer Identification Number (NIP): 5833169441
National Business Registry Number (commercial register number): 222133031
Share capital: PLN 12,500.00 – fully paid up. The personal data Controller is responsible for using the personal data in a safe manner, in accordance with the purposes for which they were collected and in compliance with the applicable laws.
- Contact with the Controller:
Phone: +48 58 380 0110
E-mail: biuro@mvproject.pl
Address for correspondence: 27 Jana Uphagena Street, 80-237 Gdańsk.
Contact details of the data protection officer:
Dawid Maciejewski
Tel: +48 501 583 913
- General provisions
We use the collected personal data only for the specific, legally justified purposes for which the data was collected. The scope of personal data, the purpose of their processing, the legal basis for such processing, the period of processing and the categories of data recipients result from legal obligations imposed on the Controller and the nature and scope of activities performed by the data subject.
- Purpose of data processing by the Controller, legal basis for processing, and period of retention of personal data:
Purpose of data processing: To take action at the request of the data subject before entering into a contract (e.g., Preparation of an offer).
- Legal basis for processing: Art. 6, para. 1, item b) of the Regulations (“performance of a contract”).
- Storage period: The data shall be stored for the period necessary for the performance, termination or expiration of the contract and for the period of limitation of possible claims.
Purpose of data processing: To carry out direct marketing (directing messages to carefully selected individual customers, on a one-to-one basis, in order to obtain a direct response(-s)).
- Legal basis for processing: Art. 6, para. 1, item f) of the Regulations (“legitimate interest of the Controller”).
- Storage period: The data shall be stored for the duration of the legitimate interest of the Controller and for the period of limitation of possible claims. If the data subject raises a legitimate objection to the use of his/her personal data, the Controller will no longer process the data for direct marketing purposes.
Purpose of processing: Electronic transmission of information on advertising content relating to MVProject sp. z o.o..
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”)
- Storage period: Data is stored until the data subject withdraws consent to further processing of their data for marketing purposes. Consent may be withdrawn at any time by contacting the office using office address – biuro@mvproject.pl
Purpose of processing: Electronic transmission of information about MVProject sp. z o.o. events.
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”)
- Storage period: The data is stored until the data subject withdraws consent to the further processing of his/her data for marketing purposes. Consent may be withdrawn at any time by contacting the office using office address – biuro@mvproject.pl
Purpose of processing: Electronic transmission of information about new expert publications by MVProject sp. z o.o.
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”)
- Storage period: Data are stored until the data subject withdraws consent to further processing of their data for marketing purposes. Consent can be withdrawn at any time by contacting the office using office address – biuro@mvproject.pl
Purpose of data processing: Electronic transmission of expert publications by MVProject sp. z o.o.
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”)
- Storage period: The data shall be stored until the data subject withdraws his/her consent to the further processing of his/her data for marketing purposes. Consent may be withdrawn at any time by contacting the office using office address – biuro@mvproject.pl
Purpose of data processing: Sending the MVProject sp. z o.o. newsletter.
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”).
- Storage period: Data is stored until the data subject withdraws consent to further processing of their data for marketing purposes. Consent may be withdrawn at any time by contacting the office using office address – biuro@mvproject.pl
Purpose of data processing: Customer’s expression of opinion
- Legal basis for processing: Art. 6, para. 1, item a) of the Regulations (“consent of the data subject”)
- Storage period: The data is stored until the data subject withdraws his/her consent to further processing of his/her data for this purpose.
- Recipients of the data
In order to perform the contract and ensure the proper functioning of the Administrator’s websites, the services of external entities cooperating with the Administrator are used (e.g.: mail, couriers, payment service providers). Personal data are provided to external entities only if and to the extent necessary to achieve the purpose of processing. Provided personal data can be used by external entities only to perform the task ordered by the Administrator. Personal data may be provided to the following recipients who cooperate with the Administrator:
- entities providing postal, courier and similar services (e.g., courier brokers) – to the extent necessary to carry out deliveries and correspondence,
- entities providing technical support services rendered to the Administrator and providers of IT solutions enabling the Administrator to operate (e.g. software provider, e-mail provider and hosting) – the Administrator shall make personal data available to a trusted provider acting on its behalf only in the case and to the extent necessary to achieve a specific purpose of processing,
- providers of the solutions for expressing/publishing of the customer feedback – to the extent necessary to express opinions.
- Transfer of data outside the European Economic Area
Personal data may be transferred outside of the European Economic Area (including the European Union, Iceland, Liechtenstein and Norway) to Google LLC based on appropriate legal safeguards, which are standard contractual clauses on data protection approved by the European Commission. See also chapter 8 Web analytics.
- Rights of the person whose data is processed by the Controller
The processing of personal data does not require consent if, among others: the processing is necessary for the performance of a contract or taking steps prior to entering into a contract, results from a legal obligation imposed on the Controller, or is necessary for the performance of a legitimate interest of the Controller. If consent is necessary for the processing of personal data for a specific purpose (e.g. consent for the use of cookies), the Controller asks for such consent. The consent can be withdrawn at any time. In the case of withdrawal of the consent, the data will no longer be processed in the manner in which the prior consent was permitted, but the withdrawal of the consent will not affect the legality of processing that was carried out on the basis of the consent before its withdrawal. Under the terms of the Regulations, the data subject also has the right to request access to the personal data concerning him/her from the Controller for the purpose of rectification, erasure (“forgetting”) or restriction of processing, the right to object to processing, and the right to data portability. If personal data are processed for direct marketing purposes, you may object at any time to the processing of such data for marketing purposes, including profiling, for the part of such processing that is related to direct marketing. In order to exercise the above rights, requests should be addressed to the Controller by email, letter or by submitting the request in person at the Controller’s office, the contact details of which are given above. In order for the person making the request to be entitled to submit the request, the Controller may ask for additional information confirming the identity of the applicant. The provisions of the Regulations indicate to what extent each of these rights can be exercised. This will depend, in particular, on the legal basis and the purpose of the processing of personal data by the Controller. The above rights may be exercised free of charge not more often than once every 6 months. Pursuant to Article 12 of the Regulations, if the requests made by the data subject are manifestly unfounded or excessive, in particular because of their continuing nature, the Controller may impose a fee. The data subject shall have the right to lodge a complaint to the supervisory authority, i.e. to the President of the Office for Personal Data Protection.
- Use of data for advertising purposes
- Newsletter
The newsletter and other marketing communications are sent only to those Users who have given their consent and provided their e-mail address. Consent to receive the newsletter can be withdrawn at any time by clicking on the unsubscribe link provided in each newsletter or by contacting the Controller at the address given above.
- Cookies
The Administrator’s websites use cookies, which are text files saved on the User’s terminal device. These files make it possible to analyze how the website is used and identify the User’s web browser. By entering the appropriate browser settings, you can block the installation of cookies – this may limit the functionality of the service. The Administrator may process the data contained in cookies for the purpose of anonymous analysis of visitors’ activities, researching their behavior (e.g. opening specific pages) in order to provide them with advertisements tailored to their predicted interests, also when they visit other websites that are partners of the company’s advertising network , Google Inc. and Facebook Ireland Ltd., and to improve the administration of the Administrator’s websites.
- On-site targeting
The Administrator uses cookies to conduct analysis of visitors’ activities (e.g., opening specific subpages) and may present the User with advertisements and/or special offers.
- Retargeting, cookies of the third parties and data collection for advertising purposes by the third parties
The Administrator’s websites use retargeting technology. As a part of the Administrator’s website, the Administrator uses the services of third parties that use cookies, these are: Google Analytics, Universal Analytics and Google Remarketing provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA). Detailed information on the operation of the above services is available at www.google.com/intl/pl/policies/privacy/partners see also https://policies.google.com/privacy/update?hl=en&gl=en
Facebook Pixel provided by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Details are available at https://www.facebook.com/about/privacy .
- How can you prevent cookies from being saved?
In order to block saving of cookies, the User should enable the setting in the browser which allows accepting the saving of cookies only with consent.
In order to give your consent for the Administrator to use cookies while at the same time blocking cookies from third parties, you should check the “Block cookies from external websites” option in your browser settings.
- Internet analysis
The Administrator uses the Google Analytics website analysis service provided by Google. Google Analytics uses cookies to analyze user behavior on the website. The information generated by cookies regarding the use of the website by the user (including his IP address) is transferred to Google and may be stored by it on the servers in the United States. Google will use this information to analyze the use of the website by the user, to compile reports for websites using Google Analytics and to provide other services. Google may also transfer this information to third parties as required by law or in the event that third parties process this information on behalf of Google. By using the service, the User consents to the processing of his personal data by Google in the manner and for the purposes set out above. The website is analyzed by Google Analytics with the extension “_anonymizelp ()”, therefore IP addresses are processed only in abbreviated form, which prevents direct association of the address with a given User. The user may opt out of cookies by entering the appropriate browser settings. This may limit the functionality of the website and you may not be able to use all its functions. The consent to the collection and collection of personal data may be withdrawn at any time with effect for the future, for example by means of the Google Analytics Opt-Out tool: https://tools.google.com/dlpage/gaoptout. To prevent the transmission of data generated by the cookie file related to the User’s use of the website (including the IP address) to Google and the processing of this data by Google, it is enough to download and install the blocking plugins available in the browser available at the following address: https://tools.google.com/dlpage/gaoptout?hl=en
- Server log files
The web browser provides data on the activities of users on the Administrator’s websites, which are saved in the server log files. Data records saved in this way contain the following data: date and time of download, name of the page opened, amount of downloaded data, as well as information about the product version of the web browser used, IP address, reference page URL (address of the page from which the user was redirected). The data records of the server log files are analyzed to remove errors, manage server performance, protect against DDoS attacks, and customize offers.
- Automated decision making and profiling
Personal data will not be used for automated decision-making, including profiling, causing legal effects in relation to the data subject.
- Final Provisions
The Administrator’s services may contain links to other websites. Such websites operate independently of the Administrator and are not supervised by the Administrator in any way. The Administrator recommends that after switching to other websites, data subjects should read the privacy policies of other websites. The Administrator is not responsible for the rules of handling data on these websites.