GDPR Information Notice
Information obligation under Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
1. Data controller
The controller of your personal data is:
mDiv.pl - Mirosław Parcz
Pl. Konstytucji 3 Maja 3/55, 32-300 Olkusz
NIP: PL6371987110, REGON: 120989179
Email: biuro@mdiv.pl
Tel.: +48 696 464 735
The controller has not appointed a Data Protection Officer. On any matters concerning the processing of personal data, the controller can be contacted directly by email or by post.
2. Purposes, legal bases and data retention periods
Your personal data is processed for the following purposes:
| Processing purpose | Legal basis | Retention period |
|---|---|---|
| Responding to enquiries from the contact or quotation form | Article 6(1)(f) GDPR (legitimate interest of the controller) | Up to 12 months from the last contact |
| Conclusion and performance of a service agreement (hosting, care, development) | Article 6(1)(b) GDPR (performance of a contract) | For the duration of the contract and the limitation period for claims |
| Registration and maintenance of the Client Area account (moje.mdiv.pl) | Article 6(1)(b) GDPR (performance of a contract) | Until the account is deleted or the last service expires |
| Issuing invoices and maintaining accounting records | Article 6(1)(c) GDPR (legal obligation) | 5 years from the end of the tax year in which the tax obligation arose |
| Registration and maintenance of internet domains | Article 6(1)(b) GDPR (performance of a contract) | For the duration the domain is maintained and the period required by the Registrar |
| Pursuing or defending against claims | Article 6(1)(f) GDPR (legitimate interest) | Until the limitation period for claims expires (generally 3 or 6 years) |
| Handling of complaints | Article 6(1)(b) and (c) GDPR (performance of a contract, legal obligation) | For the duration the complaint is being considered and the period required by law |
3. Categories of data processed
Depending on the processing purpose, the controller may process the following categories of data:
- identification data (first name, last name, company name, tax ID),
- contact data (email address, phone number, correspondence address),
- data relating to orders and services (type of service, subscription period, payment history),
- technical data (IP address, information about the browser and device — collected automatically).
4. Data recipients
Your data may be transferred to the following categories of recipients:
- electronic payment operators (Krajowy Integrator Płatności S.A. / tPay.com, ING Bank Śląski S.A. / iMoje),
- the domain registrar (Consulting Service Sp. z o.o. / HRD.pl) and NASK — for domain registration,
- providers of accounting services and accounting software,
- providers of hosting services and server infrastructure,
- entities authorised on the basis of applicable law.
The controller does not sell personal data or share it with third parties for marketing purposes.
5. Transfer of data to third countries
As a rule, the controller does not transfer personal data outside the European Economic Area (EEA). Where tools from providers based outside the EEA are used, data may be transferred only on the basis of appropriate legal safeguards, such as standard contractual clauses approved by the European Commission or a decision confirming an adequate level of data protection.
6. Rights of data subjects
In connection with the processing of personal data, you have the following rights:
Right of access to data (Article 15 GDPR)
The right to obtain information about whether data is being processed, and to receive a copy of it.
Right to rectification of data (Article 16 GDPR)
The right to request correction of inaccurate data or completion of incomplete data.
Right to erasure of data (Article 17 GDPR)
The right to request the deletion of data (the "right to be forgotten") when there is no basis for its further processing.
Right to restriction of processing (Article 18 GDPR)
The right to request restriction of processing in specific situations (e.g. when contesting the accuracy of the data).
Right to data portability (Article 20 GDPR)
The right to receive data in a structured format and to transmit it to another controller.
Right to object (Article 21 GDPR)
The right to object to processing based on the controller's legitimate interest.
Right to withdraw consent
Where processing is based on consent — the right to withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal.
To exercise these rights, please contact the controller by email at biuro@mdiv.pl or in writing at the registered address.
7. Right to lodge a complaint with the supervisory authority
If you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority:
President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
Website: uodo.gov.pl
8. Voluntary nature of providing data
Providing personal data is voluntary, but necessary to achieve the stated purposes. Failure to provide the data may prevent:
- responding to an enquiry submitted via the contact form,
- concluding and performing a service agreement,
- registering an account in the Client Area,
- issuing a VAT invoice.
9. Automated decision-making and profiling
The controller does not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning the data subject or similarly significantly affect them.
10. Data security
The controller applies appropriate technical and organisational measures to ensure the security of personal data processed, including protection against unauthorised access, loss, destruction or damage.
11. Out-of-court dispute resolution
Consumers have the option of using out-of-court methods for handling complaints and pursuing claims. Detailed information is available on the website of the Polish Office of Competition and Consumer Protection: uokik.gov.pl.
The Online Dispute Resolution (ODR) platform is available at: ec.europa.eu/consumers/odr.
12. Related documents
Further information on the processing of personal data is also available in:
- the Privacy Policy — details on cookies, technical safeguards and policy changes,
- the Terms of Service — conditions for using the services, payments, complaints.
This is an English translation provided for convenience. The Polish version is the legally authoritative one.