1. Data Controller:

The controller of your data is M8 Marcin Kocan, ul. Opolska 39, 49-100 Niemodlin, NIP: 9910306574; REGON: 160360220.

To contact us, you can:

• Send an email to: info@jastrych.pl;
• Send a letter to: ul. Opolska 39, Room 218, 49-100 Niemodlin;
• Call us at: +48 505 810 901.

As the data controller, we are responsible for your data and have an obligation to provide you with the following information.

2. Purposes of Data Processing:

We process your personal data for the following purposes:

Processing in connection with concluding a sales contract with you:

If you enter into a sales contract with us, we process your data to execute this contract. We may also process your personal data at your request before concluding a contract to take steps leading to its conclusion. The legal basis for data processing in this regard is Article 6(1)(b) of the GDPR, which refers to the necessity of processing for the performance of a contract or taking steps at the request of the data subject before entering into a contract. Additionally, since concluding a contract imposes further obligations on us (e.g., tax-related obligations), the legal basis for data processing is also Article 6(1)(c) of the GDPR, which refers to the necessity of compliance with a legal obligation.

We process your data based on Article 6(1)(f) of the GDPR, i.e., for the realization of our legitimate interests—if you file a complaint or a dispute arises between us regarding contract performance, we may process your data to handle the complaint or to establish, assert, or defend claims.

Processing in connection with concluding another contract with you:

If you are our collaborator or contractor, we process your data to execute the contract concluded with you. We may also process your personal data at your request before concluding a contract to take steps leading to its conclusion. The legal basis for data processing in this regard is Article 6(1)(b) of the GDPR. Additionally, since concluding a contract imposes further obligations on us (e.g., tax-related obligations), the legal basis for data processing is also Article 6(1)(c) of the GDPR.

If you have given us consent to process your data, we will process it for the purposes specified in the consent. In such a case, the legal basis for processing is Article 6(1)(a) of the GDPR—your consent.

We may also process your data to inform about our established cooperation (if allowed by our agreement). In this case, the legal basis for processing will be Article 6(1)(f) of the GDPR—our legitimate interest.

Processing of employees and other personnel of our clients or contractors:

If you are an employee or a member of the personnel of our client or contractor, we may process your data to execute contracts concluded with that client or contractor. The legal basis for this is Article 6(1)(f) of the GDPR—our legitimate interest.

Processing in connection with email correspondence:

If you contact us via email, we may process your data to correspond with you. The legal basis for processing will be Article 6(1)(f) of the GDPR—our legitimate interest.

Processing in connection with marketing and newsletter distribution:

If you have expressed your willingness to receive our newsletter or other commercial information via email or phone, the legal basis for processing your data is Article 6(1)(a) of the GDPR—your consent.

We may also process your personal data for direct marketing of our products and services via traditional mail. The legal basis for processing in such a case is Article 6(1)(f) of the GDPR—our legitimate interests.

Processing in connection with website operation:

If a contact form is available on the website, we will process data to enable contact. The legal basis for processing is Article 6(1)(f) of the GDPR—our legitimate interests.

To ensure the proper functioning of the website, its administration, and security, we may process data collected during visits. These data will not be used to identify specific users. The legal basis for processing is Article 6(1)(f) of the GDPR—our legitimate interests.

Processing in connection with social media profiles:

Due to our legitimate interests, we may process your data collected on social media platforms such as Facebook and Instagram to ensure the operation of our profile (in particular, to inform users about our products and services, events we participate in, as well as people we collaborate with) and to interact with users. The legal basis for processing is Article 6(1)(f) of the GDPR—our legitimate interests.

3. Obligation to Provide Data:

Providing your personal data is voluntary, with the following exceptions:

• If you enter into a contract with us, providing your data is necessary for us to execute and settle it. This includes your name, address, tax identification number, email, and phone number. Similarly, if you file a complaint, we need your data to process it;
• If you are an employee or a member of the personnel of our client or contractor, data processing may be necessary for contract execution;
• If you contact us via email, processing your data, such as your email address, name, and any information in your message, is necessary for correspondence;
• Your name and address may be processed for sending marketing information via traditional mail;
• If you consent, your email and phone number may be processed for sending you marketing information electronically;
• If you use our website, we collect your data, including your IP address, to enable proper site functionality and security;
• If you visit our social media profiles, processing your data, such as name and image, is necessary for using the services offered by the platform.

4. Data Retention Period:

We will retain your data for the following periods:

• Data necessary for contract execution and legal obligations—until the limitation period for claims arising from the contract or related tax obligations expires;
• Data processed based on consent—until consent is withdrawn;
• Data processed based on legitimate interests—until the processing purpose is achieved, except when an objection is raised.

5. Your Rights:

You have the following rights:

• Right to access data;
• Right to rectify data;
• Right to delete data;
• Right to restrict data processing;
• Right to data portability;
• Right to withdraw consent (without affecting prior lawful processing);
• Right to lodge a complaint with the data protection authority;
• Right to object to processing based on legitimate interests.

6. Automated Decision-Making:

We do not engage in automated decision-making or profiling based on your data.

7. Cookies:

We use cookies on our website to analyze traffic, improve functionality, and enhance user experience. You can manage cookie settings in your browser.

8. Sharing of Personal Data:

We may share your data with hosting providers, administrative and accounting service providers, IT service providers, marketing service providers, and couriers. Data transfers outside the EU may occur in limited cases (e.g., Google LLC services).