Logo

Privacy Policy

Mag Graf Projekt respects your right to privacy and applies best practices in accordance with applicable privacy laws and regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (“GDPR”).

This Privacy Policy describes how and why we collect your personal data, what we do with it, how we protect it, and the choices you can make regarding your personal data.

1. What data do we collect?

      Mag Graf Projekt collects data about you that is limited to the type of information found on the company’s official website or business card: first name, last name, job title, employer’s name, company name, work address, work email address, and work phone number.

      1.1. What data do we collect?

      Your personal data that we process may come from the following sources:
      a) directly from you – when you contact us by email, telephone, or other means, e.g., via a contact form,
      b) automatic data collection – when you visit our website, the following data may be collected: device data, location information, website activity data, cookies,
      c) third parties – we do not rule out the possibility that your personal data may be provided to us by third parties, e.g., via email correspondence,
      d) public sources – e.g., the Central Register and Information on Business Activity, data obtained from analytical service providers.

      2. Personal Data Security

      Mag Graf Projekt, taking into account the state of technical knowledge, implementation costs, nature, scope, context, and purposes of processing, as well as the risk of infringement of the rights and freedoms of natural persons, applies appropriate technical and organizational measures to ensure the protection of processed personal data appropriate to the threats and categories of data being protected. In particular, it protects data against unauthorized disclosure, unauthorized removal, processing in violation of applicable regulations, and alteration, loss, damage, or destruction.

      We update and test security measures on an ongoing basis and limit access to personal data only to those who need to receive it to provide the content or services offered by our company. The information we obtain about you, including information containing personal data, is stored on appropriately secured servers. Despite the personal data protection measures we have implemented, sharing information via the internet or publicly available networks can never be considered completely secure, and there is a risk that unauthorized third parties will gain access to your personal data.

      3. Storage of Personal Data

        We store your personal data using our own IT infrastructure and using the services of hosting providers based in the EU.

        We do not share your data with third parties or entities, but we may disclose your personal data to law enforcement agencies, supervisory authorities, public authorities, entities performing public tasks or acting on behalf of public authorities, and other third parties. Such data is disclosed in connection with compliance with legal obligations.

        4. Operations with Your Personal Data

          We use the personal data we collect to communicate with you, improve our services, or present offers that may be of interest to you. We may also contact you to offer additional products or services from our Partners.

          5. Legal Basis for Processing Your Personal Data

            In the case of data processing operations for marketing purposes, the basis for such processing is the fulfillment of the purposes arising from the legitimate interests pursued by Mag Graf Projekt (Article 6, paragraph 1, letter f) of the GDPR).

            For other (other) purposes, your personal data may be processed based on:

            voluntarily given consent – (Article 6, paragraph 1, letter a) of the GDPR).

            necessity for other purposes arising from the legitimate interests pursued by Mag Graf Projekt in correspondence with Customers (including responding to Customer messages or inquiries).

            6. Personal Data Retention Period

            We retain your data for as long as necessary to achieve the purposes for which it was collected. In the case of marketing activities, until you object or withdraw your consent. To determine the appropriate retention period for personal data, we consider the amount and nature of the data being processed, including the nature of special categories of data. We also consider the potential risk of unauthorized use or unauthorized disclosure of your personal data, the possibility of achieving the processing purposes using other means, and the provisions regarding the personal data being processed. Personal data related to cookie technology are retained for a period corresponding to the lifespan of cookies or until you delete them.

            7. Your Rights

            In connection with the processing of your personal data, the GDPR provides the following rights for individuals whose personal data is processed – you can exercise each of the rights referred to below by contacting us at odo@mag-graf-projekt.pl

              a) the right to access personal data – this right allows you to receive information as to whether we are processing personal data about you, and if so, the right to receive a copy of the personal data we process. The right to access personal data allows you to verify whether we are processing it lawfully,

              b) the right to rectification of personal data – this right allows you to request the correction of incomplete, inaccurate, or outdated data that we process. In some cases, in fulfilling your request, we will need to verify the accuracy of the new data you provide to us,

              c) the right to restriction of personal data – this right allows you to request that we suspend the processing of your personal data in the following situations: (i) when you wish us to verify the accuracy of the data; (ii) when our processing is unlawful; (iii) when you have objected to our processing, but we need to verify whether we still have overriding legitimate grounds to continue processing your personal data.

              d) the right to erasure of personal data – this right allows you to request the deletion of your personal data if it is no longer necessary for the purposes for which it was collected. You can also request the deletion of your personal data if you have effectively exercised your right to object to processing (see below), if we are processing your data unlawfully, or if we are required to erase your personal data to comply with a legal obligation specified in applicable law. Please note that in some cases, we are required to process your data under applicable law and cannot comply with your request, for example, if we are required to do so by law, including tax law.

              e) the right to object to the processing of your data where we process it based on a legitimate interest (ours or those of third parties) – you can exercise this right for reasons relating to a specific situation, where you believe the processing impacts your rights or freedoms. You also have the right to object if we process your data for direct marketing purposes. In some cases, we can demonstrate that we have legitimate grounds for processing your data that override your rights and freedoms (e.g., the need to ensure the security of the Website and prevent fraud). In such cases, the right to object is not combined with the deletion of your personal data.

              f) the right to data portability – in exercising this right, we will provide you or a third party designated by you with your personal data in a structured, commonly used, machine-readable format. This right applies only to data processed based on consent or the performance of a contract concluded with us, and the processing itself is carried out by automated means (in IT systems).

              If you have given us consent to process your personal data, you have the right to withdraw it at any time. Withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal. You can withdraw your consent by sending a request to the email address or by clicking the link in any email sent as a result of obtaining your prior consent (e.g., newsletters, commercial information).

              Exercising your rights is generally free of charge – there is no fee required to exercise the right to access your personal data (or to exercise any other rights). However, we may charge a reasonable fee if you submit a request.

              We take into account the potential risk of unauthorized use or unauthorized disclosure of your personal data, the possibility of achieving the processing purposes using other means, and the provisions relating to the personal data being processed. Personal data related to cookie technology are stored for a period corresponding to the life cycle of cookies or until you delete them.

              8. Cookies

              Cookies are computer data, particularly text files, stored on users’ end devices intended for use with websites. These files allow the user’s device to be recognized and the page to be displayed appropriately, tailored to their individual preferences. Cookies typically contain the name of the website from which they originated, the duration of their storage on the device, and a unique number.

              1. Cookies are used to tailor website content to user preferences and optimize website use. They are also used to create anonymous, aggregated statistics that help us understand how users use websites, which allows us to improve their structure and content, excluding personal user identification.
              2. We inform you that we store cookies on the user’s end device and then access the information contained therein for statistical purposes, for marketing purposes (remarketing), and to ensure the proper functioning of the website. We also inform you that there may be a need or legitimate interest in using types of cookies other than those listed above.
              3. Personal data collected using cookies may be collected only to perform specific functions for the user.
              4. Web browsers allow cookies to be placed on end devices by default.
              5. These settings can be changed to block automatic cookie handling in the web browser settings or to notify you each time cookies are sent to the user’s device.
              6. Information about the possibilities and methods of handling cookies is available in the user’s web browser settings.
              7. Restricting the use of cookies may affect some functionalities available on the website.

              9. Automated processing of personal data

              The data we collect in connection with your use of our services may be processed by automated means (including profiling). This will not have any legal consequences for the individual or otherwise affect their situation. We attach particular importance to the issue of potential profiling and point out that:

              We do not process any sensitive data for the purposes of potential profiling.

              For the purposes of potential profiling, we use typical data:

              email address, IP number, or cookies.

              Profiling may be aimed at analyzing the preferences or interests of users of our services and/or may be aimed at tailoring the content of our services to individual preferences.

              Profiling may be performed for marketing purposes,

              adapting marketing offers to preferences.

              10. Changes to the Privacy Policy

              We reserve the right to change our Policy in the event of changes in legal regulations, guidelines from authorities responsible for overseeing personal data protection processes, the technology used to process personal data, or in the event of changes in the methods, purposes, or legal basis for processing personal data. In the event of significant changes, we may send you a separate notification.

              11. Questions or Concerns

              If you have any questions or concerns regarding our processing of your personal data, please contact us by email at: odo@mag-graf-projekt.pl