Privacy Policy
1. General information
This privacy policy applies to the website available at marand.pl.
The data controller is:
Marand Mariola Mantusz, 10 Burtowa Street, 93-478 Łódź, tel. 729 000 65 39
Contact email address: biuro@marand.pl
The Controller processes personal data provided voluntarily by the user whilst using the Website’s features, in particular when subscribing to the newsletter.
The Website does not provide contact forms. Personal data may only be processed if the user independently decides to contact the Controller via the specified email address, telephone number or newsletter subscription form.
The Website may process personal data solely for the purpose of:
- running the newsletter and sending commercial information (following the user’s voluntary subscription).
User data may be obtained through:
- voluntary entry of data when subscribing to the newsletter,
- the storage of technical cookies necessary for the website to function.
2. Security measures applied by the Controller
The Controller applies organisational and technical measures to ensure data protection in accordance with the GDPR, including:
- encryption of data transmission using an SSL certificate,
- regular updates of the Website’s software and components,
- proper management of administrative access.
3. Hosting
The Website is hosted on the servers of the hosting provider cyberFolks.pl.
The hosting provider may collect technical server logs including, amongst other things:
- IP address,
- date and time of connection,
- information about requested resources (URL),
- server error data,
- information about the browser and operating system.
These logs are used solely to ensure the security and proper functioning of the Website.
4. Data processing by MailerLite (newsletter)
The newsletter is operated by an external provider:
MailerLite – a mailing system operator acting as a data processor on the basis of a data processing agreement concluded with the Controller.
When subscribing to the newsletter, the user provides data such as:
- email address,
- optionally, first name (if the form collects it).
The data is processed solely for the purpose of sending the newsletter and managing the subscription.
MailerLite may process data on servers located within or outside the EU. Processing outside the EU is carried out in accordance with the GDPR, based on appropriate legal safeguards, e.g. Standard Contractual Clauses (SCCs).
You may unsubscribe from the newsletter at any time by using the unsubscribe link available in the footer of each message.
5. Your rights
You have the right to:
- access their data,
- rectify their data,
- erase their data,
- restrict processing,
- data portability,
- object to processing based on a legitimate interest (where applicable),
- withdrawal of consent to data processing at any time, without affecting the lawfulness of processing prior to withdrawal.
A complaint regarding the Controller’s activities may be lodged with the President of the Office for Personal Data Protection.
Providing data for the purpose of subscribing to the newsletter is voluntary, but necessary to receive it.
The Controller does not use profiling or automated decision-making.
6. Contact form
The Data Controller enables contact via the contact form available on the website. If you use the contact form, the Data Controller processes the personal data provided by you, such as your first name and surname, email address, telephone number (if provided) and the content of your message.
Personal data is processed for the following purposes:
to respond to the enquiry submitted,
to conduct correspondence relating to the enquiry,
to take action at the request of the data subject prior to the possible conclusion of a contract.
The legal basis for the processing of personal data is:
Article 6(1)(b) of the GDPR – processing is necessary for taking steps at the request of the data subject prior to entering into a contract,
Article 6(1)(f) of the GDPR – the Controller’s legitimate interest in communicating with persons contacting us via the form.
The provision of personal data is voluntary, but necessary to process enquiries submitted via the contact form.
Personal data provided via the contact form will be stored for the period necessary to fulfil the purpose for which it was collected, and subsequently for the period required by law or until any potential claims become time-barred.
Personal data will not be disclosed to other recipients, with the exception of entities providing technical and administrative services to the Controller in connection with the operation of the website, which process data on the basis of relevant data processing agreements.
Rights of data subjects
The data subject has the right to:
access their personal data,
rectify it,
erase the data (‘right to be forgotten’),
restrict processing,
data portability,
object to the processing of personal data,
lodge a complaint with the President of the Personal Data Protection Office.
Data controller
The data controller is:
Marand Mariola Mantusz
ul. Burtowa 10
93-478 Łódź
tel. 729 000 65 39
e-mail: biuro@marand.pl
7. Administrator logs
Anonymous data regarding the use of the Website may be recorded on the Website for the purposes of administering the Website and ensuring its security.
8. Cookies
The Website uses only essential technical cookies.
Cookies used on the Website:
- pll_language – a technical cookie generated by the Polylang plugin, which remembers the user’s language preferences. This cookie is necessary for the website to function properly and does not require the user’s consent.
The Website does not use:
- analytical cookies,
- marketing cookies,
- any traffic tracking tools,
- third-party services such as Google Analytics, Facebook, Twitter, etc.
You can manage cookies via your browser. Disabling technical cookies may affect the correct display of language versions.
9. Managing cookies
You can delete or block cookies in your web browser settings. Instructions can be found in your browser’s documentation.