PRIVACY AND GDPR
Privacy policy
This policy explains how MN Projects Sp. z o.o. processes the personal data of website users and people who contact the company.
Last updated: 27 July 2026
1. Data controller
The controller is MN Projects Sp. z o.o., 15 Prezydenta RP Ignacego Mościckiego Street, 26-110 Skarżysko-Kamienna, Poland, VAT ID 6631881007, REGON 386948790, KRS 0000858478.
Privacy contact: info@mnprojects.pl, tel. +48 786 869 480.
2. Data we process
- Contact form: first and last name, company name (optional), email address, telephone number and message.
- Correspondence: data contained in emails and subsequent communication.
- Technical data: IP address, request date and time, requested URL, browser and device data and diagnostic server logs.
- Privacy preferences: the optional technology choice stored locally in the user’s browser.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Handling an enquiry and taking steps prior to entering into a contract | Article 6(1)(b) GDPR |
| Correspondence, continuity of contact and the establishment, exercise or defence of legal claims | Article 6(1)(f) GDPR – the controller’s legitimate interests |
| Accounting, tax and other statutory obligations | Article 6(1)(c) GDPR |
| Website operation, security and diagnostics | Article 6(1)(f) GDPR – website security and reliability |
| Loading optional external content such as Google Maps | Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Law – consent |
Consent may be withdrawn at any time through the “Cookie settings” button. Withdrawal does not affect the lawfulness of processing carried out before it.
4. Recipients and service providers
- hosting, infrastructure and security providers, including Vercel and Cloudflare/OpenAI Sites, depending on the website address used,
- FormSubmit, which forwards contact form submissions to the controller’s mailbox; according to its documentation, submission copies may be retained for up to 30 days,
- email, IT, legal and accounting service providers,
- Google, only after the user agrees to load the embedded map,
- authorised public bodies where disclosure is required by law.
5. Transfers outside the EEA
Some technology providers may process data outside the European Economic Area. In such cases, transfers use a mechanism under Chapter V GDPR, such as an adequacy decision, the EU–US Data Privacy Framework where the recipient participates in it, or Standard Contractual Clauses used by the provider.
6. Retention
- enquiry data – for the time needed to handle the matter and then until the relevant limitation period expires,
- records required by law – for the statutory period,
- technical logs – for the period needed for security, diagnostics and accountability, in line with infrastructure provider settings,
- cookie preferences – for no more than 180 days, after which the website asks again,
- FormSubmit copies – for up to 30 days according to the service documentation.
7. Your rights
Where provided by the GDPR, you have the right of access, rectification, erasure, restriction, data portability, objection and withdrawal of consent. Requests can be sent to info@mnprojects.pl.
You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office.
8. Voluntary provision and automated decisions
Providing data is voluntary, but fields marked as required are necessary for a response. The website does not make decisions based solely on automated processing and does not profile users.
9. Security and updates
The controller applies appropriate organisational and technical safeguards, including encrypted transmission. This policy may be updated when the law, providers or website functions change. The current version date appears above.
10. Related information
Details about technologies stored on a user’s device are available in the Cookie policy.