MCB Privacy Policy

1. Data controller

The controller of personal data processed in connection with the use of mcbworks.pl is MCB Maciej Cybula, tax ID (NIP): 5911731320, business registry number (REGON): 545583519.

For matters relating to personal data, contact the Controller at: kontakt@mcbworks.pl.

2. What data we process

When you contact us via the form, email, or phone, we may process data you provide, such as your name, company name, email address, phone number, and message content.

When you use the website, technical data may also be processed, in particular IP address, date and time of connection, browser and device information, and data necessary for the operation and security of the service.

If you run a free website audit, the website address you provide and data needed to perform the analysis and display or generate a report are processed.

3. Purposes and legal bases of processing

We process data for the following purposes:

• handling your inquiry and preparing an offer — under Art. 6(1)(b) GDPR when we take steps prior to entering into a contract at your request, or Art. 6(1)(f) GDPR when contact is made on behalf of a company or concerns ordinary correspondence;
• concluding and performing a contract — under Art. 6(1)(b) GDPR;
• performing a requested website audit — under Art. 6(1)(b) GDPR, to the extent necessary to provide that service;
• maintaining accounting records and fulfilling legal obligations — under Art. 6(1)(c) GDPR;
• ensuring website security, limiting spam and abuse, and establishing, pursuing, or defending against claims — under Art. 6(1)(f) GDPR, i.e. the Controller’s legitimate interest.

Submitting an inquiry alone does not mean consent to a newsletter or later marketing messages.

4. Data recipients

To the extent necessary for the website to operate and inquiries to be handled, data may be shared with hosting and infrastructure providers, form and email delivery providers, IT service providers, tools used to perform audits, and accounting or legal advisers when required.

If use of a given provider involves transferring data outside the European Economic Area, this is done using mechanisms provided for by the GDPR, in particular standard contractual clauses. Information about safeguards applied can be obtained by writing to the email address above.

5. How long we keep data

Data related to a routine inquiry is kept for as long as needed to handle it, and no longer than 12 months from the end of correspondence, unless further retention is justified by ongoing cooperation or the need to establish, pursue, or defend against claims.

Data related to a contract is kept for the duration of performance and then for the period required by applicable law or limitation periods. Accounting documents are kept for the period required by law.

Technical data and security logs are kept for as long as necessary to maintain service security and investigate incidents.

Data related to a free website audit is kept for as long as necessary to perform the analysis, display the result, and allow report download if applicable.

6. Your rights

Where provided for by the GDPR, you may request access, rectification, erasure, restriction of processing, or data portability. You may also object to processing based on the Controller’s legitimate interest. Where processing is based on consent, you may withdraw it at any time.

To exercise these rights, write to kontakt@mcbworks.pl. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.

Exercising GDPR rights is generally free of charge. If a request is manifestly unfounded or excessive, in particular because of its repetitive character, the Controller may — under Art. 12(5) GDPR — charge a reasonable fee or refuse to act. It is for the Controller to demonstrate that grounds for such a decision exist.

7. Cookies and analytics tools

The website uses technical mechanisms necessary for proper and secure operation.

Analytics or marketing tools that require consent to store or read information on your device are only activated after you make an appropriate choice. By default, such mechanisms remain disabled.

Your cookie choice may be stored in the browser until you change it or clear browser storage. Preferences can be changed in the cookie banner or via the “Cookies” link in the footer.

8. Voluntary data provision and automated decisions

Providing data in the form is voluntary, but without a way to contact you we may be unable to reply, prepare an offer, or conclude a contract. Providing data required by law for contract settlement is an obligation arising from those provisions.

The Controller does not make decisions about users based solely on automated processing that produce legal effects or similarly significantly affect them. Automatic calculation of technical website audit results is not used to profile the person using the tool.

9. Security and policy changes

The Controller applies technical and organizational measures appropriate to protect processed data. This policy may be updated when the way the website operates, services used, or applicable law changes. The current version is published on mcbworks.pl.