I General Provisions

1. This Privacy Policy specifies the method of collecting, processing and storing personal data necessary to provide services electronically via the website in the domain www.mayeryn.com (hereinafter: Website).
2. The administrator of the Users’ personal data is Mayeryn spółka z ograniczoną odpowiedzialnością with its registered office in Gdańsk at Aleja Grunwaldzka 309 (postal code 80-309) (hereinafter: Administrator).
3. Personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter: GDPR).
4. The data collected by the Administrator will be:

• processed in accordance with the law,
• processed for clearly defined purposes and not subject to further processing incompatible with these purposes,
• substantively correct and adequate in relation to the purposes for which they are processed,
• stored no longer than necessary to achieve the purpose of processing.

II. Purpose and legal basis of data processing

1. The Administrator processes personal data necessary to provide and develop the offered services available through the Service and its individual functionalities.
2. Personal data will be processed for the following purposes:
   a. account registration, verification of the User’s identity and performance of the agreement on the provision of services by electronic means in accordance with the Act of 18 July 2002 on the provision of services by electronic means, including in particular by ensuring the possibility of using the User’s account – based on acceptance of the terms of the Regulations (Article 6, paragraph 1, letter b of the GDPR);
   b. communication with the User in order to provide him/her with the necessary information and build positive and reliable relations with him/her, which constitutes the legitimate interest of the Administrator (Article 6, paragraph 1, letter f of the GDPR);
   c. promotion by the Administrator of its own products and/or services and those of its Partners by sending electronic Marketing Information (newsletter) if the User has agreed to receive such notifications via e-mail (Article 6, paragraph 1, letter a of the GDPR);
   d. granting access to information on news from the industry directly related to the Administrator’s activity, if the User has agreed to receive such notifications via e-mail (Article 6, paragraph 1, letter a of the GDPR),
   e. for analytical and statistical purposes based on the legitimate interest of the Administrator consisting in conducting verification of Users’ activity and their preferences in order to optimize services and products and the functionalities of the Service used
   (Article 6, paragraph 1, letter f of the GDPR);
   f. possible determination, pursuit of claims or defense against them based on the legitimate interest of the Administrator consisting in the protection of its rights (Article 6, paragraph 1, letter f of the GDPR).
3. In each of the above-mentioned cases (paragraph 2), providing data is voluntary, but necessary to conclude a contract or use other functionalities of the Service.

III. Period of personal data processing

1. Personal data will be processed for the period in which the person remains an active User of the Service (has a User account), and after that time for the period necessary to comply with the provisions of the law, pursue or defend against possible claims, but no longer than 3 years counted from the date of termination of the agreement on the provision of services by electronic means.
2. Data processed on the basis of consent will be processed until the consent is withdrawn, provided that the withdrawal of this consent does not affect the compliance of the data processing that was carried out before such withdrawal.

IV. Information on processing

1. Personal data, depending on the purpose of processing, may be disclosed to:
   a. entities related to the Administrator
   b. entities cooperating with the Administrator,
   c. subcontractors, in particular entities providing and servicing selected IT systems and solutions,
   d. entities servicing online payments,
   e. entities providing courier and postal services,
   f. law firms.
2. Personal data processed by the Administrator will not be transferred outside the European Economic Area or to international organizations.

V. Rights of data subjects

1. The User of the Service has the right to:

• access the content of their personal data
• rectify the data
• delete the data
• limit the processing of data
• transfer the data
• object to the processing based on the legally justified interest of the administrator
• withdraw the consent at any time without affecting the lawfulness of the processing carried out on the basis of this consent before its withdrawal

1. The User has the right to lodge a complaint with the President of the Personal Data Protection Office in a situation where they consider that the processing violates their rights and freedoms.
2. In the process of data processing, there is no automated decision-making, including profiling.

VI. Final provisions

1. The Administrator reserves the right to introduce changes to this Privacy Policy, at the same time ensuring that the rights of Users resulting from this document will not be limited.
2. The User will be informed of any changes to the Privacy Policy via a message available on the Service.