Privacy policy

Website privacy policy

1 Definitions

1.1 Administrator – MAR-S sp. z o.o. S.K -Awith its registered office at 9b Namysłowska Street, 63-640 Bralin.

1.2 Personal Data – information about a person or entity identified or identifiable by one or more specific factors and information collected through cookies and other similar technology.

1.3 Policy – this Privacy Policy.

1.4. RODO – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27.04.2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC.

1.5 Service – the website operated by the Administrator at 9b Namysłowska Street, 63-640 Bralin

1.6 User – any person, including a person acting on behalf of a company, visiting the Site or using one or more services or functionalities described in the Policy. 2.

 

2 Processing of Personal Data in connection with use of the Site

2.1 In connection with the use of the Website by the User, the Administrator collects data to the extent necessary to provide the particular services offered. The detailed principles and purposes of the processing of Personal Data collected during the use of the Website by the User are described below.

 

3 Purposes and legal basis for the processing of Personal Data on the Website

3.1 Use of the Website

3.1.1 Personal Data of all persons using the Service is processed by the Administrator:

3.1.2. in order to provide services electronically in terms of making the content collected on the Website available to the Users – in which case the legal basis of the processing is the necessity of the processing for the performance of the agreement (Art. 6(1)(b) RODO);

3.1.3. for the purpose of establishing and investigating claims or defending against claims – the legal basis for processing is the legitimate interest of the Administrator (Article 6(1)(f) RODO), consisting in the protection of his/her rights.

3.2 Contact form

3.2.1 The Administrator provides the possibility to contact it using an electronic contact form. The use of the form requires the User to provide the Personal Data necessary to make contact with the User. The User may also provide other data in order to facilitate the contact or handling of the enquiry. The provision of data marked as mandatory is required in order to receive and handle the enquiry, and failure to provide such data will result in the impossibility of service. The provision of other data is voluntary.

3.3 Personal data is processed in order to identify the sender and to handle his/her enquiry sent via the form provided – the legal basis for the processing is the necessity of the processing for the performance of the contract for the provision of the service (Article 6(1)(b) RODO); with regard to the data provided optionally, the legal basis for the processing is consent (Article 6(1)(a) RODO).

3.4 Personal data is processed:

3.4.1 for the purpose of sending requested commercial information – the legal basis for processing, including using profiling, is the legitimate interest of the Administrator (Article 6(1)(f) RODO) in relation to consent;

3.4.2 for analytical and statistical purposes – the legal basis of the processing is the Administrator’s legitimate interest (Article 6(1)(f) RODO), consisting of conducting analyses of Users’ activity on the Website in order to improve the applied functionalities.

4 Cookies

4.1 The Administrator uses cookies on the Website. For the purposes and rules concerning the use of cookies, please refer to the Cookie Policy.

5 Period of processing of Personal Data

5.1 The period of data processing by the Administrator depends on the type of service provided and the purpose of the processing. As a general rule, data shall be processed for the duration of the service provided, until the withdrawal of the consent given or until an effective objection is made to the processing of data in cases where the legal basis for the processing is the legitimate interest of the Administrator.

5.2 The processing period may be extended where the processing is necessary for the establishment and assertion of possible claims or the defence against claims, and thereafter only where and to the extent required by law. After the expiry of the processing period, the data shall be irreversibly deleted or anonymised.

 

6 Entitlements of the User

6.1 The User has the right to access the content of the data and to request rectification, erasure, restriction of processing, the right to data portability and the right to lodge a complaint with the supervisory authority dealing with the protection of Personal Data.

6.2 The User shall also have the right to object to data processing that is based on the legitimate interest of the Administrator.

6.3 To the extent that User Data is processed on the basis of consent, you may withdraw this consent at any time by contacting the Administrator in accordance with the contact details provided below.

 

7 Recipients of Personal Data

7.1 In connection with the provision of services, Personal Data will be disclosed to external entities, including in particular IT service providers enabling the correct use of the Website.

7.2 The Administrator reserves the right to disclose selected information concerning the User to competent authorities or third parties, who will make a request for such information on the basis of an appropriate legal basis and in accordance with the provisions of the applicable law.

 

8 Transfer of Personal Data outside the EEA

8.1 The level of protection of Personal Data outside the European Economic Area (EEA) differs from that provided by European law. For this reason, the Administrator transfers Personal Data outside the EEA only when necessary and with an adequate level of protection, primarily by:

8.1.1. cooperating with processors of Personal Data in countries for which a relevant decision of the European Commission has been issued as to whether an adequate level of protection of Personal Data is ensured;

8.1.2. applying the standard contractual clauses issued by the European Commission;

8.1.3. the application of binding corporate rules approved by the competent supervisory authority.

8.2 The Controller shall always inform of its intention to transfer Personal Data outside the EEA at the stage of collection.

 

9 Security of Personal Data

9.1 The Administrator shall, on an ongoing basis, conduct a risk analysis to ensure that Personal Data is processed by the Administrator in a secure manner – ensuring, in particular, that only authorised persons have access to the data and only to the extent that this is necessary for their tasks. The Administrator shall ensure that all operations on Personal Data are recorded and performed only by authorised employees and associates.

9.2 The Administrator shall take all necessary measures to ensure that also its subcontractors and other cooperating entities guarantee the application of appropriate security measures whenever they process Personal Data on behalf of the Administrator.

 

10 Contact details

10.1 Contact with the Administrator is possible in writing to the Administrator’s registered office address or electronically to the e-mail address indicated on the site.

 

11 Changes in the Privacy Policy

11.1 The Policy shall be verified on an ongoing basis and updated if necessary. The current version of the Policy shall always be available on the Site.

11.2 The current version of the Policy has been adopted and is effective as of 01 February 2025.