Mikulski & Partners Limited Partnership, the owner of the en.mikulski.krakow.pl website, makes every effort to ensure that your privacy is properly protected. In order to ensure lawful, transparent, and secure processing of your personal data, we adopt this Privacy Policy, which is effective from May 25, 2018.

This Privacy Policy refers to the GDPR, i.e., the Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). This document specifies which data we process, on what basis, and how we protect your data and your rights.

1.Data Controller

The controller of your personal data is Mikulski & Partners Limited Partnership, based at ul. Kielecka 19, 31-523 Krakow, Poland; VAT: 6751309971; Regon: 356834420.

2. Contact Information

If you have any questions regarding the processing of your personal data and your rights, please contact us via email at kancelaria@mikulski.krakow.pl.

3. Scope, Purpose, and Legal Basis for Data Processing

Through the en.mikulski.krakow.pl website, we enable you to submit inquiries and contact us on various matters. We process your personal data for different purposes, to different extents, and on different legal bases. To provide precise information about the processing of your personal data, we have grouped them according to the purpose of data processing.

a. Presentation of our service offer

Data Scope: To prepare and present our service offer, we process the personal data sent via the contact form: name, email address, phone number, message content.

Legal Basis: Processing is necessary to take steps at the request of the data subject before entering into a contract.

b. Handling other inquiries from the contact form

Data Scope: To respond to inquiries sent via the contact form, we process the data sent through the form: name, email address, phone number, message content.

Legal Basis: Our legitimate interest (processing at the request of the data subject).

c. Sending a company newsletter

Data Scope: To send our company newsletter, we process the personal data sent via the newsletter subscription form: name, email address.

Legal Basis: Our legitimate interest (processing at the request of the data subject).

In the case of personal data obtained in ways other than through the mikulski.krakow.pl website (e.g., by phone, email, etc.), we also process them solely for the purpose for which they were provided and for as long as necessary to fulfill that purpose. In case of a planned change in the processing purpose, we always ask the data subject for consent and inform them of the changing conditions of data processing.

4. Cookies

We use cookies to ensure the proper functioning of the website, particularly to tailor the website content to user preferences and to optimize the use of the website. Specifically, these files allow us to recognize the basic parameters of the user’s device (such as device type, screen resolution, country of access) and thus properly display the website tailored to their needs. We also use cookies to collect general and anonymous statistical data via analytical and marketing tools:

• Google Analytics (cookies administrator: Google Inc., based in the USA),
• Google AdWords (cookies administrator: Google Inc., based in the USA),
• Google Search Console (cookies administrator: Google Inc., based in the USA),
• Facebook (cookies administrator: Facebook Ireland Ltd., based in Ireland).

You can independently and at any time change the settings for cookies, specifying the conditions for storing and accessing cookies on your device. Changes to the settings can be made using your web browser settings. These settings can be changed in such a way as to block the automatic handling of cookies or to inform you each time cookies are placed on your device. Detailed information on the possibility and methods of handling cookies is available in your web browser settings.

You can delete cookies at any time using the available functions in your web browser. Restricting the use of cookies may affect some functionalities available on the website.

5. Transfer of Personal Data

We transfer your personal data to service providers we use in running the website. The service providers to whom we transfer your personal data, depending on the situation, are processors or controllers. You will find the list of providers we use at the end of this Policy. We use providers who process your personal data only on our instructions. They provide us with hosting services, online marketing systems, email messaging systems, and traffic analysis on the website. We use providers who do not operate solely on our instructions and determine the purposes and ways of using your personal data. They provide us with advertising campaign services. Our providers are mainly based in Poland and other European Economic Area (EEA) countries, e.g., Ireland. Some of them are based outside the EEA. In connection with the transfer of your data outside the EEA, we ensure that our providers guarantee a high level of personal data protection. These guarantees arise, in particular, from the obligation to use standard contractual clauses approved by the European Commission or participation in the EU-U.S. Privacy Shield program.

a. State Authorities We provide your personal data if requested by authorized state authorities. The administrator stores users’ personal data for no longer than necessary to prepare a personalized offer/process your order/respond to other inquiries and to enable the administrator to fulfill its obligations. We remind you that users can delete data at any time.

6. Your Rights Related to Personal Data Processing

You have the right to:

a. access your personal data,
b. rectify your personal data,
c. delete your personal data,
d. restrict the processing of your personal data,
e. data portability,
f. object to the processing of your personal data,
g. withdraw previously given consent for personal data processing.

To exercise your rights, please contact us at the email address: kancelaria@mikulski.krakow.pl.

If you submit a request related to the exercise of the above rights, we will respond to it promptly, no later than within one month of receiving it. However, if – due to the complex nature of the request or the number of requests – we cannot fulfill your request within a month, we will fulfill it within the next two months, informing you of the extension beforehand.

7. Data Security

As the data controller, we make every effort to ensure the security of your data. We commit to:

• securing the data against unauthorized access, unauthorized modification, damage, or destruction,
• allowing data processing only by persons authorized by us,
• ensuring control over the correctness of personal data processing,
• maintaining a record of persons authorized to process personal data and ensuring that authorized persons keep them confidential even after the end of the service,
• maintaining required documentation describing the method of processing the entrusted personal data and technical and organizational measures ensuring data protection,
• ensuring that devices and IT and telecommunications systems used for personal data processing comply with the requirements of the Regulation of the Ministry of Internal Affairs and Administration of April 29, 2004, on personal data processing documentation and technical and organizational conditions.

8. List of External Service Providers and Data Shared:

• Monstero – administration and security of the website, stores all service data.
• KEI.PL – web hosting service, stores all service data.
• Google Analytics – IP address, browser data, location data, website navigation history.
• Google AdWords – IP address, browser data, location data, website navigation history.