PRIVACY POLICY​

PRIVACY POLICY

The controller of your personal data is MG Sp. z o.o. Sp. K, located at ul. Wiśniewskiego 13, 81-335 Gdynia, Poland.

NIP: 958-170-92-58, REGON: 386449436.

Contact email: biuro@mg-cat.pl

 

We inform you that your personal data may be processed for the purposes outlined below. The scope of necessary data we collect includes: name, surname, company name, business address, correspondence address, email address, phone number, username, NIP, REGON, and KRS.

  • Entering into and performing a contract– pursuant to Article 6(1)(b) of the GDPR, processing is necessary for the performance of a contract or to take steps prior to entering into a contract.
  • Compliance with legal obligations – pursuant to Article 6(1)(c) of the GDPR, to fulfill legal obligations related to maintaining accounting and tax records in accordance with the Accounting Act of September 29, 1994, and the Corporate Income Tax Act of February 15, 1992.
  • Debt recovery – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to maintain financial liquidity.
  • Pursuing claims and defending against claims – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to protect interests and safeguard reputation.
  • Handling complaints, claims, and other feedback related to collaboration – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to ensure the quality of services provided and adherence to contract terms.

 

We process your personal data only for the period necessary to fulfill the purpose for which it was collected, in compliance with applicable laws. Specifically:

a) Data related to contract performance – retained for the duration of the contract and subsequently for the period required by law (e.g., tax or accounting regulations) or until claims become time-barred.

b) Data processed based on consent – retained until consent is withdrawn or the purpose of processing is achieved.

c) Data processed based on the legitimate interest of the controller – retained until a valid objection is raised or the interest ceases to exist.

 

After these periods, the data is deleted or anonymized.

Recipients of the data may include entities in the following categories:

  •  Entities cooperating with the controller providing advisory and legal services.
  • Entities authorized under applicable laws (particularly courts and state authorities).
  • Entities providing IT services, email hosting, and website hosting on behalf of the controller.
  • Entities providing postal and courier services on behalf of the controller.
  • Banks and other financial institutions involved in processing payments under the contract.
  • Entities providing accounting and bookkeeping services for the controller.

 

As a result of processing your personal data, you have the right to:

  • Request access to your personal data.
  • Request the rectification of your personal data.
  • Request the erasure or restriction of the processing of your personal data.
  • Data portability (for data processed based on a contract).

 

Additionally, you have the right to object to the processing of your personal data in cases specified in Article 21 of the GDPR.

If you believe your personal data is being processed in violation of the law, you have the right to file a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, [https://www.uodo.gov.pl/](https://www.uodo.gov.pl/)).

Pursuant to Article 13 of the GDPR (provided when collecting data from the person to whom the data pertains)

Respecting your privacy and ensuring that you are informed about how your personal data is processed, we present the key information related to EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”).

DATA CONTROLLER

The controller of your personal data is MG Sp. z o.o. Sp. K, located at ul. Wiśniewskiego 13, 81-335 Gdynia, Poland.

NIP: 958-170-92-58, REGON: 386449436.

Contact email: biuro@mg-cat.pl

PURPOSES AND LEGAL BASIS OF DATA PROCESSING

Your personal data may be processed for the purposes described below. The scope of necessary data collected includes: name, surname, company name, business address, correspondence address, email address, username, registration date, NIP, order information, billing details, including bank account number.

 

  •  To enter into and perform a contract – pursuant to Article 6(1)(b) of the GDPR, processing is necessary for the performance of a contract or to take steps prior to entering into a contract.
  • To comply with legal obligations – pursuant to Article 6(1)(c) of the GDPR, related to maintaining accounting and tax documentation in accordance with the Accounting Act of September 29, 1994, and the Corporate Income Tax Act of February 15, 1992.
  • Debt recovery – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to maintain financial liquidity.
  • To pursue claims and defend against claims – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to protect interests and safeguard reputation.
  • To handle complaints, claims, and other feedback related to collaboration – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to ensure the quality of services provided and adherence to contract terms.

 

DATA RETENTION PERIOD

Your personal data will be processed for the following periods:

  • Data processed for contract performance, complaint handling, or other contractor requests – until the cooperation agreement is terminated.
  • Data derived from tax documentation – up to 5 years from the end of the calendar year in which the tax payment deadline occurred.
  • Data processed to pursue claims and defend against claims – until claims become time-barred.
  • Data processed for debt recovery – until full settlement of liabilities.

 

DATA RECIPIENTS

Recipients of your data may include entities in the following categories:

  • Entities cooperating with the controller providing advisory and legal services.
  • Entities authorized under applicable laws (e.g., courts and state authorities).
  • Entities providing IT services, email hosting, and website hosting on behalf of the controller.
  • Entities providing postal and courier services on behalf of the controller.
  • Banks and financial institutions involved in processing payments under the contract.
  • Entities providing accounting and bookkeeping services for the controller.

 

YOUR RIGHTS

As we process your personal data, you have the right to:

  • Request access to your personal data.
  • Request rectification of your personal data.
  • Request deletion or restriction of the processing of your personal data.
  • Data portability (for data processed based on a contract).

 

RIGHT TO OBJECT

You also have the right to object to the processing of your personal data in cases specified in Article 21 of the GDPR.

 

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, [https://www.uodo.gov.pl/](https://www.uodo.gov.pl/)).

 

INFORMATION ON DATA PROVISION REQUIREMENTS AND CONSEQUENCES OF NON-PROVISION

Providing your data is voluntary, but failure to do so will result in the inability to conclude or perform the contract. For data processed to fulfill the controller’s legal obligations, providing data is a legal requirement. For other purposes, providing data is voluntary but necessary for entering into and performing the contract or ensuring proper service delivery.

 

ADDITIONAL INFORMATION

Your data will not be transferred to third countries (outside the EEA).

We do not make decisions based solely on automated data processing or profiling.

Pursuant to Article 13 of the GDPR (provided when collecting data from the person to whom the data pertains)

Respecting your privacy and ensuring that you are informed about how your personal data is processed, we present the key information related to EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”).

 

DATA CONTROLLER

The controller of your personal data is MG Sp. z o.o. Sp. K, located at ul. Wiśniewskiego 13, 81-335 Gdynia, Poland.

NIP: 958-170-92-58, REGON: 386449436.

Contact email: biuro@mg-cat.pl

 

PURPOSES AND LEGAL BASIS OF DATA PROCESSING

We process the following personal data: name, phone number, and email address.

Your personal data will be processed for the following purposes:

  • To enter into and perform a contract, and to establish and maintain relationships with the contractor you represent – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to conclude and properly execute the contract.
  • To comply with legal obligations – pursuant to Article 6(1)(c) of the GDPR, related to maintaining accounting and tax documentation in accordance with the Accounting Act of September 29, 1994, and the Corporate Income Tax Act of February 15, 1992.
  • Debt recovery – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to maintain financial liquidity.
  • To pursue claims and defend against claims – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to protect interests and safeguard reputation.
  • To handle complaints, claims, and other feedback related to collaboration with the contractor you represent – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to ensure the quality of services provided and adherence to contract terms.

 

DATA RETENTION PERIOD

Your personal data will be processed for the following periods:

  • Data processed for contract performance, complaint handling, or other contractor requests – until the cooperation agreement is terminated.
  • Data derived from tax documentation – up to 5 years from the end of the calendar year in which the tax payment deadline occurred.
  • Data processed to pursue claims and defend against claims – until claims become time-barred.
  • Data processed for debt recovery – until full settlement of liabilities.

 

DATA RECIPIENTS

Recipients of your data may include entities in the following categories:

  • Entities cooperating with the controller providing advisory and legal services.
  • Entities authorized under applicable laws (e.g., courts and state authorities).
  • Entities providing IT services, email hosting, and website hosting on behalf of the controller.
  • Entities providing postal and courier services on behalf of the controller.
  • Banks and financial institutions involved in processing payments under the contract.
  • Entities providing accounting and bookkeeping services for the controller.

 

YOUR RIGHTS

As we process your personal data, you have the right to:

  • Request access to your personal data.
  • Request rectification of your personal data.
  • Request deletion or restriction of the processing of your personal data.

 

RIGHT TO OBJECT

You also have the right to object to the processing of your personal data in cases specified in Article 21 of the GDPR.

 

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, [https://www.uodo.gov.pl/](https://www.uodo.gov.pl/)).

 

INFORMATION ON DATA PROVISION REQUIREMENTS AND CONSEQUENCES OF NON-PROVISION

For the processing of personal data to fulfill the controller’s legal obligations, providing data is a legal requirement. For other purposes, providing personal data is voluntary but necessary for entering into and performing the contract or ensuring proper service delivery.

 

ADDITIONAL INFORMATION

Your data will not be transferred to third countries (outside the EEA).

We do not make decisions based solely on automated data processing or profiling.

Pursuant to Article 13 of the GDPR (provided when collecting data from the person to whom the data pertains).

Respecting your privacy and ensuring that you are informed about how your personal data is processed, we present the key information related to EU Regulation 2016/679, known as the General Data Protection Regulation (“GDPR”).

 

DATA CONTROLLER

The controller of your personal data is MG Sp. z o.o. Sp. K, located at ul. Wiśniewskiego 13, 81-335 Gdynia, Poland.

NIP: 958-170-92-58, REGON: 386449436.

Contact email: biuro@mg-cat.pl

 

PURPOSES AND LEGAL BASIS OF DATA PROCESSING

We process the following personal data: name, surname, identification data (NIP, REGON), email address, business address, and phone number.

Your personal data will be processed for the following purposes:

  • Establishing relationships with potential contractors or persons representing potential contractors, including making and receiving offers, responding to inquiries, and engaging in other activities aimed at establishing business contacts – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to select the most advantageous offer for the supply of services and goods and protect the controller’s interests.
  • Pursuing claims and defending against claims – pursuant to the legitimate interest of the controller (Article 6(1)(f) of the GDPR), which is to safeguard the controller’s interests.

 

DATA RETENTION PERIOD

Your personal data will be processed until the completion of contact with the potential contractor. After the original purpose for which the data was collected is fulfilled, the data will be processed for the period necessary for the limitation of claims or until a valid objection is raised.

 

DATA RECIPIENTS

Recipients of your data may include entities in the following categories:

  • Entities providing IT services (including email hosting providers).
  • Lawyers, legal advisors, and other entities cooperating with the controller that provide advisory and legal services.
  • Postal and courier service providers acting on behalf of the controller.
  • Entities authorized under applicable laws (e.g., courts and state authorities).

 

YOUR RIGHTS

As we process your personal data, you have the right to:

  • Request access to your personal data.
  • Request rectification of your personal data.
  • Request deletion or restriction of the processing of your personal data.

 

RIGHT TO OBJECT

You also have the right to object to the processing of your personal data in cases specified in Article 21 of the GDPR.

 

RIGHT TO LODGE A COMPLAINT

If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the supervisory authority, which is the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, [https://www.uodo.gov.pl/](https://www.uodo.gov.pl/)).

 

INFORMATION ON DATA PROVISION REQUIREMENTS AND CONSEQUENCES OF NON-PROVISION

Providing personal data is voluntary but necessary for the controller to establish a relationship with a potential contractor. Failure to provide personal data will prevent the fulfillment of the above purposes, including the establishment of cooperation.

 

ADDITIONAL INFORMATION

Your data will not be transferred to third countries (outside the EEA).

We do not make decisions based solely on automated data processing or profiling.

To effectively present the provided clauses for different scenarios (correspondence, recruitment, etc.), the content is best tailored and adapted for professional use, ensuring clarity and compliance. Below is a structured summary and adaptation for each use case:

 

Pursuant to Article 13 of the GDPR

 

DATA CONTROLLE

MG Sp. z o.o. Sp. K

Address: ul. Wiśniewskiego 13, 81-335 Gdynia, Poland

NIP: 958-170-92-58, REGON: 386449436

Contact email: biuro@mg-cat.pl

 

PURPOSES AND LEGAL BASIS OF DATA PROCESSING

Processed data includes: name, email address, and phone number.

  • Registering outgoing and incoming correspondence and responding to received correspondence, based on the legitimate interest of the controller (Article 6(1)(f) GDPR).
    • Legitimate interest: timely responses to communications, ensuring collaboration quality, and fulfilling contractual obligations.
  • Pursuing claims and defending against claims, based on the legitimate interest of the controller (Article 6(1)(f) GDPR).

 

DATA RETENTION PERIOD

  • Data processed for correspondence will be retained until the matter is resolved or, if related to a cooperation agreement, for the duration specified in the agreement.
  • Data processed for claims will be retained until the limitation period expires or a valid objection is raised.

 

DATA RECIPIENTS

Recipients include:

  • Authorized entities (e.g., courts, state authorities).
  • IT service providers (e.g., email hosting providers).
  • Legal advisors and other service providers assisting the controller.

 

YOUR RIGHTS

You have the right to:

  • Request access to your personal data.
  • Request correction of your data.
  • Request deletion or restriction of data processing.

 

RIGHT TO OBJECT

You may object to data processing in situations specified in Article 21 GDPR.

 

RIGHT TO LODGE A COMPLAINT

If you believe your data is being processed unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, [www.uodo.gov.pl](https://www.uodo.gov.pl/)).

 

DATA PROVISION REQUIREMENTS

Providing data is voluntary but necessary for registering and responding to correspondence. Failure to provide data may hinder the resolution of related matters.

Pursuant to Article 13 of the GDPR

 

DATA CONTROLLER

MG Sp. z o.o. Sp. K

Address: ul. Wiśniewskiego 13, 81-335 Gdynia, Poland

NIP: 958-170-92-58, REGON: 386449436

Contact email: biuro@mg-cat.pl

 

PURPOSES, LEGAL BASIS, AND RETENTION PERIOD

Processed data includes: name, phone number, email address, residence/correspondence address, education, employment history, and professional qualifications.

  • Current recruitment process:
    • Legal obligation (Article 6(1)(c) GDPR) for data listed in Article 221 of the Polish Labor Code, retained until the recruitment process ends.
    • Consent (Article 6(1)(a) GDPR) for additional data provided by the candidate, retained until consent withdrawal or recruitment process completion.
    • Explicit consent (Article 9(2)(a) GDPR) for special categories of data (e.g., health data), retained until consent withdrawal or recruitment process completion.
  • Future recruitment processes: Based on consent (Article 6(1)(a) GDPR), retained for up to 12 months or until consent withdrawal.

 

DATA RECIPIENTS

Recipients include:

  • IT service providers (e.g., email hosting).
  • Recruitment agencies supporting the controller.
  • Legal advisors and other authorized entities under the law.

 

YOUR RIGHTS

You have the right to:

  • Request access, correction, deletion, or restriction of your data.
  • Transfer your data to another controller (for data processed based on consent).
  • Withdraw consent at any time without affecting prior processing based on consent.

 

RIGHT TO OBJECT

You may object to data processing in situations specified in Article 21 GDPR.

 

DATA PROVISION REQUIREMENTS

Providing data specified in Article 221 of the Polish Labor Code is mandatory; providing additional data is voluntary but essential for participation in recruitment.