Privacy policy

1. The controller of personal data contained in the Website is MT-PROJEKT Spółka z ograniczoną odpowiedzialnością (a limited liability company) with its registered office in Grójec, ul. Józefa Piłsudskiego 42A, 05-600 Grójec, Poland, entered into the register of entrepreneurs of the National Court Register kept by Sąd Rejonowy Lublin-Wschód w Lublinie z siedzibą w Świdniku, VI Wydział Gospodarczy Krajowego Rejestru Sądowego (District Court Lublin-Wschód in Lublin, seated in Świdnik, 6th Commercial Division of the National Court Register), under KRS number 0000764092, tax identification number (NIP) 7972068087, statistical number (REGON) 382132889, with share capital of PLN 100,000.00.
2. In order to safeguard the data entrusted to us, we have developed internal procedures and guidelines intended to prevent the disclosure of data to unauthorised persons. We monitor their implementation and continuously verify their compliance with the relevant legal acts – the Personal Data Protection Act, the Act on Providing Services by Electronic Means, as well as all implementing acts and acts of Community law.
3. Personal data is processed on the basis of consent given by the User/Client and in cases where the law authorises the Controller to process personal data, pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), hereinafter referred to as the "GDPR". In particular, the factual basis for processing personal data is:
   1. the provision of design and engineering services, including correspondence to the telephone number or e-mail address indicated by the Client for the purpose of agreeing the scope, terms and course of performance of the commission (Art. 6(1)(b) GDPR);
   2. responding to enquiries sent via the contact form or by e-mail (Art. 6(1)(a) and (f) GDPR);
   3. conducting recruitment processes for positions offered by the Controller, including the review of application documents submitted on the candidate’s own initiative (Art. 6(1)(a) and (b) GDPR and Art. 22(1) of the Polish Labour Code);
   4. the need to fulfil tax and accounting requirements, including the retention of invoices and other accounting documents (the Accounting Act of 29 September 1994 and Art. 6(1)(c) GDPR);
   5. the need to examine and forward complaints and notifications submitted by Clients (Art. 6(1)(c) and (f) GDPR);
   6. the need to examine claims brought by Clients against the Controller and the pursuit by the Controller of claims against Clients (Art. 6(1)(c) and (f) GDPR).
4. The Website processes personal data in the following ways:
   1. through personal data voluntarily entered in the contact form, i.e. name and surname, e-mail address and the content of the message;
   2. through personal data voluntarily provided in correspondence sent to the Controller’s e-mail addresses, including application documents submitted in connection with job offers;
   3. through information stored in the local storage of the User’s browser, to the extent necessary for the correct display of the Website.
5. The Website collects only information voluntarily provided by the User.
6. The data provided is processed for the purpose arising from the function of the particular form, i.e. handling informational contact, preparing and presenting an offer, concluding and performing a design services contract, conducting recruitment processes, examining complaints, pursuing claims between the parties and maintaining accounting records.
7. In connection with the processing of personal data by the Controller, data subjects have the right of access to their data pursuant to Art. 15 GDPR, the right to rectification pursuant to Art. 16 GDPR, the right to erasure pursuant to Art. 17 GDPR, the right to restriction of processing pursuant to Art. 18 GDPR, the right to data portability pursuant to Art. 20 GDPR and the right to object to processing pursuant to Art. 21 GDPR. To the extent that processing is based on consent, the data subject also has the right to withdraw it at any time, without affecting the lawfulness of processing carried out before the withdrawal.
8. Data subjects have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
9. Personal data will be retained as follows: for the purpose of responding to an enquiry sent via the contact form or by e-mail – for a period of 12 months from the end of the correspondence; for the purpose of conducting a recruitment process – until its completion and, where separate consent to participate in future recruitment processes has been given, for a period of 12 months from the end of the recruitment process, but no longer than until the consent is withdrawn; for the purpose of retaining accounting records – for a period of 5 years from the end of the calendar year in which the tax obligation arose; for the purpose of pursuing claims between the parties – for the limitation period applicable to such claims.
10. Data provided by Clients may be disclosed to the following third parties:
    1. entities operating and maintaining the Controller’s IT systems, in particular the Website hosting provider and the provider of the Website content management system;
    2. the e-mail service provider through which the Controller conducts correspondence;
    3. entities cooperating with the Controller in the performance of design work and other services provided;
    4. entities cooperating with us in accounting, tax and legal matters – to the extent that they become controllers of the data;
    5. entities providing postal or courier services;
    6. courts or other state authorities on the basis of a court order, a request from law enforcement authorities or another binding legal basis.
11. Data provided by the Client will not be subject to profiling or automated decision-making.
12. The Controller’s use of IT infrastructure providers, in particular the Website hosting provider, may involve the transfer of personal data to a third country, in particular to the territory of the United States. In such a case, the transfer takes place solely on the basis of the mechanisms provided for in Chapter V of the GDPR, i.e. an adequacy decision of the European Commission, including under the EU-US Data Privacy Framework, or Standard Contractual Clauses adopted by the European Commission.
13. Furthermore, subject to obtaining the Client’s consent in this respect, their personal data may be used, with all their rights preserved, for the purpose of informing the Client by e-mail or by telephone about the services provided by MT-Projekt Sp. z o.o. and about its offers.
14. In connection with the right to access, rectify and erase personal data, as well as the possibility to object to its processing, the Client may exercise these rights at any time by contacting us:
    1. by post, to the address: MT-PROJEKT Sp. z o.o., ul. Józefa Piłsudskiego 42A, 05-600 Grójec, Poland;
    2. by telephone on working days between 8:00 and 16:00 (Polish time), on +48 732 707 800;
    3. by writing to the e-mail address: biuro@mt-p.pl;
    4. to the electronic delivery address: AE:PL-12056-90342-WDIAT-06.
15. We reserve the right to amend the Website privacy policy, which may be affected by developments in internet technology, possible changes in personal data protection law and the development of our website. We will communicate any changes in a visible and comprehensible manner.
16. The Website may contain links to other websites. Such websites operate independently of the Website and are in no way supervised by www.mt-p.pl. These websites may have their own privacy policies and terms of use, which we recommend reviewing.
17. The Website does not use cookies for analytical or marketing purposes, nor to track User activity. The Controller does not use analytics tools or social media tracking pixels. Only information about the dismissal of the privacy notice is stored in the local storage of the User’s browser, in order to avoid displaying it again on subsequent visits; this information is not transmitted to the Controller and remains solely on the User’s device. The User may delete this data at any time in their browser settings. Should analytical or marketing tools be implemented in the future, this Policy will be updated and their activation will be preceded by obtaining the User’s consent.
18. Any questions relating to our processing of personal data may be directed in the manner set out in point 14 of this Privacy Policy.

This is a translation of the Polish original. In the event of any discrepancy between the Polish and English versions, the Polish version shall prevail.