Privacy Policy

Last updated: October 20, 2024

1. General Provisions

This Privacy Policy outlines the rules for processing and protecting personal data provided by Users in connection with their use of the mgsupport.pl website (hereinafter: "Service").

We care about your privacy and security. This document informs you about the legal bases for processing, the methods of collecting and using personal data, and your related rights, in accordance with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (hereinafter: "GDPR").

2. Personal Data Administrator

The administrator of your personal data (hereinafter: "Administrator") is:

MGSupport Michał Grycz

with its registered office in Wólka-Wojciechówek, ul. Brzozowa 14, 07-207 Rząśnik, Poland

NIP: 7622026496

Contact with the Administrator is possible via:

3. Purposes, Legal Bases, and Scope of Data Processing

We process your data for the following purposes:

a) Handling inquiries via the contact form

  • Purpose: To respond to inquiries sent via the contact form available on the Service.
  • Legal Basis: Art. 6(1)(f) GDPR (Administrator's legitimate interest, which is communication with the User) or Art. 6(1)(b) GDPR (taking action at the request of the data subject before concluding a contract).
  • Scope of data: Name, email address, message content, and any other data voluntarily provided in the form.

b) Analytical and statistical purposes

  • Purpose: To conduct statistical analyses of Service traffic, how Users use it, and to improve its functionality and optimization.
  • Legal Basis: Art. 6(1)(a) GDPR (Your voluntary consent expressed via the cookie banner).
  • Scope of data: IP address (often anonymized), location data, browser type, operating system, visited subpages, time spent on the Service, source of visit (data collected via cookies).

c) Marketing purposes

  • Purpose: To tailor content and advertisements (including remarketing) on the Service and in partner networks (e.g., Google, Facebook).
  • Legal Basis: Art. 6(1)(a) GDPR (Your voluntary consent expressed via the cookie banner).
  • Scope of data: Data on activity in the Service, demographic data, cookie identifiers used for ad personalization.

d) Server administration

  • Purpose: To ensure the security of the Service and servers, diagnostics of technical problems.
  • Legal Basis: Art. 6(1)(f) GDPR (Administrator's legitimate interest).
  • Scope of data: Server logs (IP address, date and time, browser and operating system information).

4. Cookies

The Service uses cookies. These are small text files sent by the web server and stored by the browser's software.

During your first visit to the Service, a banner is displayed through which you can consent to the installation of analytical and marketing cookies or reject this consent. You also have the option to customize your consents.

We use the following types of cookies in the Service:

  • Necessary: Required for the proper functioning of the Service, e.g., session maintenance. Your consent is not required for their operation.
  • Analytics: Help us understand how you use the Service, allowing us to improve it. They are installed only with your consent.
  • Marketing: Used for personalizing ads and remarketing activities. They are installed only with your consent.

You can change your cookie preferences or withdraw your consent at any time by clicking the "Manage Consents" button (cookie icon) available in the corner of the screen.

More information on managing cookies can be found in your web browser's settings.

5. Your Rights (under GDPR)

In connection with the processing of your personal data, you have the following rights:

  • Right of access to data (Art. 15 GDPR): You can request information about what data we process.
  • Right to rectification (Art. 16 GDPR): You can request correction of incorrect or completion of incomplete data.
  • Right to erasure ("right to be forgotten", Art. 17 GDPR): You can request the deletion of your data if it is no longer necessary for the purposes for which it was collected or you have withdrawn your consent.
  • Right to restriction of processing (Art. 18 GDPR): You can request the restriction of processing in specific cases.
  • Right to data portability (Art. 20 GDPR): You can receive your data in a structured format and request its transfer to another administrator (applies to data processed based on consent or contract).
  • Right to object (Art. 21 GDPR): You can object to the processing of your data based on the Administrator's legitimate interest.
  • Right to withdraw consent (Art. 7(3) GDPR): You can withdraw your consent for data processing (e.g., analytics, marketing cookies) at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
  • Right to lodge a complaint with a supervisory authority: If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Warsaw, Poland.

To exercise your rights, please contact us using the details provided in section 2 of this Policy.

6. Data Recipients and Transfer to Third Countries

Your personal data may be entrusted for processing to third parties (our partners and subcontractors) who support us in our operations. These include:

  • Hosting and IT infrastructure service providers.
  • Analytics tool providers (e.g., Google Analytics).
  • Marketing systems and advertising network providers (e.g., Google, Facebook).
  • CDN (Content Delivery Network) providers, e.g., Cloudflare.
  • Web font providers (e.g., Google Fonts).

All our subcontractors process data based on data processing agreements and are obliged to ensure an appropriate level of security.

In connection with the use of tools such as Google Analytics, your data may be transferred outside the European Economic Area (EEA), i.e., to the USA. This transfer is based on Standard Contractual Clauses (SCCs) approved by the European Commission, which aim to ensure an adequate level of protection for your data.

7. Data Retention Period

We store your data for the period necessary to achieve the purposes for which it was collected:

  • Data from the contact form – until the correspondence is completed or until any potential claims are time-barred.
  • Data from cookies (analytics, marketing) – in accordance with the time specified in the cookie settings or until you withdraw your consent.
  • Data from server logs – typically for 30 days for security purposes.

8. Final Provisions

We reserve the right to make changes to the Privacy Policy. We will inform about any changes by publishing the new version of the Privacy Policy on the Service.

In matters not regulated by this Privacy Policy, the relevant provisions of the GDPR and Polish law shall apply.