Merawex
EN
PLDE

PRIVACY AND COOKIE POLICY
MERAWEX sp. z o.o.

  1. General information
    www.merawex.com.pl

    This Policy sets out the rules for processing personal data of users of the website www.merawex.com.pl and the rules for using cookies and similar technologies.
    The Controller ensures that data processing complies with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR).

  2. Data controller
    The controller of personal data is:
    MERAWEX sp. z o.o.,
    ul. Toruńska 8, 44-122 Gliwice, Poland.
    Contact regarding personal data processing:
    daneosobowe@merawex.com.pl
  3. Scope of processed data
    The website may process the following data:

    1. Data provided voluntarily in the contact form or quotation request:
      – full name,
      – e-mail address,
      – telephone number,
      – message content.
    2. Data collected automatically:
      – IP address,
      – device identifiers,
      – technical data of the browser and system,
      – cookies in accordance with this Policy.

    The website does not require the provision of special categories (sensitive) data.

  4. Purposes and legal bases for processing
    Personal data may be processed for the following purposes:

    1. Responding to an enquiry, contacting you, preparing an offer
      Legal basis:
      – Article 6(1)(b) GDPR – steps taken at the request of the user who initiates contact by submitting a form,
      – Article 6(1)(f) GDPR – the controller’s legitimate interest in conducting correspondence, handling enquiries and enabling communication.
    2. Marketing communications (if the user gives consent)
      Legal basis:
      Article 6(1)(a) GDPR, and also:
      – Article 10 of the Polish Act on Providing Services by Electronic Means (UŚUDE) – consent to e-mail marketing,
      – Article 172 of the Polish Telecommunications Law – consent to telephone marketing.
      Giving marketing consent is voluntary and does not affect your ability to use the contact form.
    3. Website usage statistics, web analytics (GA4)
      Legal basis:
      Article 6(1)(a) GDPR – the user’s consent.
      Analytical cookies and statistical tools are activated only after consent is given in the cookie banner.
      Google Signals are not enabled.
    4. Ensuring the security and functionality of the website (including reCAPTCHA)
      Legal basis:
      Article 6(1)(f) GDPR – the controller’s legitimate interest.
    5. Compliance with the controller’s legal obligations
      Legal basis:
      Article 6(1)(c) GDPR.
    6. Processing based on legitimate interest
      Data may be processed under Article 6(1)(f) GDPR in order to enable communication, conduct correspondence related to the submitted enquiry, maintain relationships resulting from previous cooperation, prevent abuse and ensure the security of the website. Information on processing based on legitimate interest is provided to the user in the content of contact forms.
    7. Newsletter subscription
      Personal data are processed to send a newsletter and commercial information solely on the basis of consent (Article 6(1)(a) GDPR). The user may withdraw consent at any time by using the link in the footer of the message or by contacting the Controller.
    8. Recruitment process
      Data are processed to carry out a recruitment process on the basis of Article 6(1)(b) GDPR. If the candidate gives separate consent, the data may also be processed for future recruitment processes (Article 6(1)(a) GDPR).
  5. Data retention period
    Data are stored:
    – for the time necessary to handle the enquiry,
    – up to 12 months for evidentiary purposes and to ensure accountability,
    – marketing data – until consent is withdrawn,
    – data required by law – for the period resulting from those provisions,
    – data may be stored for the period necessary to establish, pursue or defend claims (Article 6(1)(f) GDPR),
    – data processed for the purposes of the newsletter – until consent is withdrawn,
    – candidates’ data – until the end of the recruitment process, and in the case of consent for future recruitment – up to 12 months.
  6. Data recipients
    Data may be disclosed to:
    – entities hosting the website (nazwa.pl),
    – entities providing IT services,
    – providers of analytical and marketing tools:
    – Google Ireland Ltd. (GA4, Google Ads),
    – Meta Platforms Ireland Ltd. (Facebook),
    – LinkedIn Ireland Unlimited Company,
    – CRM / form system provider:
    – HubSpot may process data within infrastructure located outside the EEA. Transfers are carried out in accordance with the Standard Contractual Clauses (SCC) and additional security measures.
    Data are disclosed on the basis of data processing agreements or other appropriate legal bases.
  7. Transfers of data outside the EEA
    Some services (Google, HubSpot, Meta, LinkedIn) may involve transfers of data to third countries.
    Such transfers are carried out using appropriate safeguards, such as the Standard Contractual Clauses (SCC).
  8. User rights
    The data subject has the right to:
    – access to data,
    – rectification,
    – erasure,
    – restriction of processing,
    – data portability,
    – objection to processing,
    – withdrawal of consent at any time,
    – lodging a complaint with the President of the Personal Data Protection Office.
    Contact for exercising rights: daneosobowe@merawex.com.pl
  9. Voluntary provision of data
    Providing data in the form is voluntary, but necessary to receive a response or obtain an offer. Submitting the form means providing data for the purpose of making contact or preparing a response.
  10. Cookies and similar technologies
    The website uses cookies in order to:
    – ensure proper operation,
    – adjust functionality,
    – compile statistics,
    – carry out marketing activities (only with the user’s consent).
  11. Types of cookies used
    1. Necessary (technical) cookies
      They enable the proper functioning of the website and the operation of forms.
      They include, among others:
      – session cookies,
      – cookies that store consent choices,
      – security-related mechanisms (e.g., reCAPTCHA).
    2. Analytical cookies – with the user’s consent
      They relate to Google Analytics 4:
      – website traffic analysis,
      – basic statistical measurements,
      – Google Signals not enabled.
    3. Marketing cookies – with the user’s consent
      Associated with tools:
      – Google Ads,
      – Facebook / Meta,
      – LinkedIn,
      – possibly YouTube (if embedded content appears).
  12. Third-party tools using cookies
    1. Google Analytics 4 (GA4)
      The tool is enabled only after consent is granted.
      It does not use Google Signals.
    2. Google Ads
      Cookies used to personalize ads and measure campaign effectiveness.
      Enabled after consent to marketing cookies.
    3. Meta (Facebook)
      Social plugins may collect data about the user’s activity.
      Enabled only after consent.
    4. LinkedIn
      It may allow traffic analysis and matching advertising content.
      Enabled only after consent.
    5. reCAPTCHA
      A tool used to protect forms.
      Due to its security nature, it operates as a necessary component.
  13. Managing cookies
    The user may:
    – accept all cookies,
    – reject all except necessary ones,
    – select individual categories,
    – change the decision at any time in the preferences panel.
  14. Deleting cookies
    Most browsers allow cookies to be deleted or blocked.
    Instructions are available on browser vendors’ websites.
  15. Changes to the Policy
    The Controller may update the content of the Policy due to the development of website functionality, changes in laws or technology.
    The date of the last update will be indicated on the website.