Privacy Policy
Information clauses under the GDPR, the cookie policy and information on the processing of personal data at MIKO GROUP Sp. z o.o. The document contains 6 clauses for different groups of people, plus the website privacy policy.
MIKO GROUP Sp. z o.o.
The controller of your personal data within the meaning of the GDPR is MIKO GROUP. For all clauses and matters relating to personal data protection, you can contact us through the channels below.
05-510 Konstancin-Jeziorna, Poland
Six clauses for different groups of people
Each clause describes the purpose of processing, the legal basis, the retention period, the recipients of the data, your rights under the GDPR and whether providing data is mandatory. Click a section to expand the details.
Purposes of processing and legal bases
Your personal data is processed for the following purposes:
- Establishing business contacts — including submitting offers and requests for proposals, requests for an order estimate, a service quote and other activities aimed at establishing business cooperation. Legal basis: Art. 6(1)(f) GDPR (the controller's legitimate interest — selecting the most favourable offer and safeguarding the company's finances).
- Defence against and pursuit of claims — Art. 6(1)(f) GDPR (the controller's legitimate interest).
Recipients of data
Postal and courier service providers, providers of IT software supporting business management, e-mail hosting providers, an accounting firm.
Retention period
- Purpose of establishing business contacts — until the business contacts end
- Defence against claims — 6 years from the end of the process of establishing the relationship
Your rights
- the right to request access to your personal data
- the right to request rectification of your personal data
- the right to request erasure or restriction of processing of your data
- the right to object to the processing of your data
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Providing personal data is voluntary, but necessary in order to establish a business relationship. Failure to provide data will make it impossible to establish business cooperation.
Purposes of processing and legal bases
- Concluding and performing a contract for the purchase/supply of services or goods — Art. 6(1)(b) GDPR (processing necessary for the performance of a contract).
- Keeping accounting and tax records — Art. 6(1)(c) GDPR (a legal obligation of the controller) — in connection with the Accounting Act, the VAT Act and tax regulations.
- Defence against claims — Art. 6(1)(f) GDPR.
- Complaints, grievances and requests relating to the cooperation — Art. 6(1)(f) GDPR.
Recipients of data
Postal and courier service providers, IT software providers, e-mail hosting providers, legal service providers, banks and financial institutions (for the purpose of processing payments), an accounting firm.
Retention period
- Performance of the contract — until the contract ends
- Accounting and tax records — 5 years from the end of the year in which the tax obligation arose
- Defence against claims — 6 years from the end of the contract
- Complaints and grievances — 1 year from receipt of the submission
Your rights
- the right of access, rectification, erasure or restriction of processing of data
- the right to data portability — for data processed on the basis of a contract (Art. 6(1)(b) GDPR)
- the right to object to processing (Art. 6(1)(f) GDPR)
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Providing data is voluntary, but necessary to conclude and perform the contract. Without the data, it will not be possible to perform the provisions of the contract.
Purposes of processing and legal bases
- Concluding and performing a contract for the provision of services/supply of goods — Art. 6(1)(b) GDPR.
- Keeping accounting and tax records — Art. 6(1)(c) GDPR.
- Defence against and pursuit of claims — Art. 6(1)(f) GDPR.
- Handling complaints, grievances and requests — Art. 6(1)(f) GDPR.
- Debt collection — Art. 6(1)(f) GDPR (safeguarding the company's finances).
Recipients of data
Postal and courier service providers, IT software providers, e-mail hosting providers, legal service providers, banks and financial institutions, an accounting firm.
Retention period
- Performance of the contract — until the contract ends
- Accounting and tax records — 5 years from the end of the year of the tax obligation
- Defence against claims — 6 years from the end of the contract
- Complaints and grievances — 1 year from receipt of the submission
- Debt collection — until payment is settled in full
Your rights
- the right of access, rectification, erasure or restriction of processing of data
- the right to data portability (for Art. 6(1)(b) GDPR)
- the right to object to processing (for Art. 6(1)(f) GDPR)
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Voluntary, but necessary to conclude and perform the contract.
Purposes of processing and legal bases
- Taking the steps necessary to perform the contract — Art. 6(1)(f) GDPR.
- Keeping accounting and tax records — Art. 6(1)(c) GDPR.
- Defence against claims — Art. 6(1)(f) GDPR.
- Complaints, grievances and requests — Art. 6(1)(f) GDPR.
- Debt collection — Art. 6(1)(f) GDPR.
Recipients of data
Postal and courier service providers, IT software providers, e-mail hosting providers, legal service providers, an accounting firm.
Retention period
- Performance of the contract — until the contract ends or an effective objection is lodged
- Accounting and tax records — 5 years from the end of the year of the tax obligation
- Defence against claims — 6 years from the end of the contract
- Complaints and grievances — 1 year from receipt of the submission
- Debt collection — until payment is settled in full
Your rights
- the right of access, rectification, erasure or restriction of processing
- the right to object to processing (for Art. 6(1)(f) GDPR)
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Voluntary, but necessary to establish cooperation and perform the contract.
Purposes of processing and legal bases
- Recording correspondence and replying to it — Art. 6(1)(f) GDPR (the controller's legitimate interest — ensuring the quality of cooperation and replying to enquiries).
- Defence against and pursuit of claims — Art. 6(1)(f) GDPR.
Recipients of data
Postal and courier service providers, IT software providers, e-mail hosting providers, legal service providers.
Retention period
- Recording correspondence and replying to it — until the correspondence ends
- Defence against claims — 6 years from the end of the cooperation
Your rights
- the right of access, rectification, erasure or restriction of processing
- the right to object to processing (Art. 6(1)(f) GDPR)
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Voluntary, but necessary to record the correspondence and reply to it.
Purposes of processing and legal bases
- Operating the website and ensuring its security — Art. 6(1)(f) GDPR.
- Defence against claims — Art. 6(1)(f) GDPR.
- Analysing the behaviour and preferences of website visitors in order to improve the quality of our services — Art. 6(1)(a) GDPR (consent given through the cookie settings in the browser).
Recipients of data
IT service providers handling the operation and hosting of the website.
Retention period
Your personal data will be processed for a period of 2 years from your last visit to the website or until an effective objection is lodged. Data processed on the basis of consent — until the consent is withdrawn.
Your rights
- the right of access, rectification, erasure or restriction of processing
- the right to object to the processing of data
- the right to withdraw consent to the processing of personal data
- the right to lodge a complaint with the President of the Personal Data Protection Office (UODO)
Obligation to provide data
Providing data is voluntary.
Cookie and privacy policy
The use of cookies and the technical data collected during a visit to www.reklamowetorby.com.
Legal basis: all of the above clauses refer to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter: GDPR).
