PRIVACY POLICY

With a view to ensure transparency in the scope of collected, processed and used Personal Data,
MPED Sp. z o.o. has prepared this Privacy Policy as a tool aimed at answering the most important
questions regarding the processing of Personal Data.
Having regard to the fact that this Privacy Policy is an integral part of the Terms and Conditions of
operation and use of the Website, the terms used in the Terms and Conditions of operation and use
of the Website shall prevail

Who is the controller of your personal data?

The controller of your personal data is:

MPED Sp. z o.o.
ul. Stara 125a
05-270 Wołomin
NIP (Tax ID No.): 1251611581
KRS: 00000398156

entered into the National Court Register kept by the District Court for the capital city of Warsaw in
Warsaw, 13th Commercial Division of the National Court Register, hereinafter referred to as: the
Company.

As part of individual services provided by the Company, your Personal Data may be processed by the
Partners, i.e. entities with whom the Company cooperates in order to perform the agreement and
ensure the operation of the Website.

In what manner and for what purposes does the Company process Personal Data and where are they stored? Legal basis for the processing of Personal Data Personal data processed by the Company are collected through the website at: www.mped.pl. Personal data are processed on the basis of Article 6(1)(a), (b) or (f) of the GDPR, while the legitimate interest of the Company is to create a circle of customers and potential customers, as well as establishing and maintaining business relations. The collected Personal Data are processed for the following purposes: a) to respond to inquiries sent via a contact form; b) to perform the agreement; c) for marketing purposes if you have given a separate consent; d) for statistical purposes. Personal Data collected by the Company will be stored in the European Economic Area (EEA). Personal Data may also be sent to and processed by a country outside the Area. In such situations, the Company applies appropriate safeguards, in accordance with applicable laws, in particular with regard to countries which, as stated by the European Commission, have an inadequate level of data protection. If the Personal Data is transferred to the USA, this will respect the principles resulting from the EU-US Privacy Shield (more information in this respect can be found here: https://www.privacyshield.gov/welcome).

What types of Personal Data does the Company process?
In connection with the performance of the agreement and the operation of the website, the
Company obtains various types of Personal Data. The type and scope of Personal Data depends on
the purpose of obtaining them. The Company obtains the following types of Personal Data:
a) first name and surname;
b) e-mail address;
c) telephone number;
d) IP;
e) user login statistics.

What is the duration of Data processing?
The Company will process Personal Data for the entire duration of the agreement. After its
termination, regardless of the reason for its termination, the Company will make anonymisation of
the content that it has developed with the use of Personal Data (e.g. statistics) and will store it as
historical material and as its business acquis. The anonymisation of Personal Data shall be
understood as removing all personal information allowing for identification from the content
generated with the use of Personal Data.
In the case of Personal Data acquired as a result of the message being sent by the person concerned
via the contact form, the Company will keep the data for a period of 2 years.
In cases provided for by applicable laws, the Company has the right to store Personal Data for a
period resulting from such provision (e.g. for the period of limitation of claims). In the case of log
files, the Company will store these data for an indefinite period of time.

Who has access to Personal Data?
The Company and persons closely connected with it will have access to Personal Data in connection
with the performance of the agreement or ensuring the operation of the website.
If necessary and justified by law, the Company will provide the Data to relevant offices in order to
perform obligations resulting from legal regulations (e.g. tax offices). The Company does not provide
Personal Data to third parties, does not sell them or exchange them for marketing purposes. Personal
Data transferred to external entities are used only for the proper performance of the agreement by
the Company.
The Company may entrust Personal Data to the following Partners:
a) Microsoft – in the scope of Microsoft Azure service.

What rights do you have in connection with the processing of Personal Data by the Company?

The right to access your Personal Data:
You may at any time request information from the Company if and what kind of your Personal Data is
processed. To do this, you should contact the Company by sending a message to the following e-mail
address: politykaprywatnosci@mped.pl
The right to transfer your Personal Data:
If the Company processes your personal data by automated means, on the basis of the prior consent
or agreement, you have the right to receive a copy of your Personal Data in a structured, commonly
used and readable format. This copy may be sent directly to you or to another entity that has been
designated to the Company.
The right to correct your Personal Data:
You have the right to request that the Company corrects your Personal Data if they are incorrect and
to complete the Data that are incomplete. To this end, a message should be sent to the following
address: politykaprywatnosci@mped.pl
The right to erase your Personal Data:
You may at any time request your data to be deleted. If processing of such Data is still important and
necessary for the Company (e.g. in order to perform an agreement), the Company may object to this
request. The deletion of Personal Data shall not affect the legality and extent of their processing by
the Company until they are removed.
The right to restrict the processing of your Personal Data:
You have the right to request that the Company restricts the processing of your Personal Data.
The right not to consent to direct marketing:
Giving a consent to receive marketing materials is voluntary. You may at any time submit an
instruction to withdraw such consent. To this end, such message shall be sent to the following
address: politykaprywatnosci@mped.pl
The right to file a complaint with the supervisory authority
If you believe that the Company processes your Personal Data improperly, you may file a complaint
with the supervisory authority, i.e. the President of the Personal Data Protection Office.
Automated processing of Data
Information collected by the Company may be processed in an automated manner (including
profiling) but it will not have any legal effect to you. The Company indicates that it profiles the Data
for marketing purposes, i.e. adjusting the marketing offer to your preferences.
Cookie files
Our website uses cookies that aim to adjust the website content to your preferences, optimise the
use of the website, in particular by identifying the end device, creating statistics and maintaining the
session. At any time you may resign from saving cookies on your device by changing the settings in
the currently used web browser. These settings, depending on the type of browser or your
preferences, may be changed, e.g. in such a way as to block the automatic settings of cookies or
inform each time they are placed in the terminal device. Detailed information in this respect is
available in the instructions and settings of a given browser. Changing your browser settings means
not giving consent to the use of cookies and will prevent us from storing data in the terminal device
in the future. Cookies that are stored in your terminal device do not cause configuration changes.
However, changing your browser settings may cause difficulties in the operation of the website, for
which the Company is not liable.
Log files
The Company collects and stores user logs, which are stored for an indefinite period of time by the
Company as auxiliary material for the administration of the service and ensuring the performance of
the agreement. Information contained therein are only disclosed to the Company and are not
disclosed to any entity.
Based on log files, statistics that provide assistance in administering the website and/or application
can be generated. Summary reports in the form of such statistics do not contain any features that
identify visitors to the website.
Contact
Any questions should be addressed to the following address: politykaprywatnosci@mped.pl
Updates of the Privacy Policy
In connection with the development of technology or any change of law, the Company does exclude
that it may be necessary to update the Privacy Policy in the future. However, the latest and up-todate version of the Privacy Policy will always be available on the website.
Date of implementation of the Privacy Policy: 1 July 2020