Privacy policy and GDPR information notice

1. Who is the data controller

The controller of your personal data is Mirand Project Management Sp. z o.o. with its registered office at ul. Teofila Firlika 31/LB2, 71-637 Szczecin, Poland, entered in the National Court Register under KRS number 0000271903, VAT ID (NIP) 955-218-41-55, REGON 320295000. Mirand CNC is the CNC cutting division of this company, operated at the workshop at ul. Antosiewicza 1 in Szczecin.

Contact for personal data matters: +48 667 765 355 or t.kaczmarczyk@mirand.szczecin.pl.

We have not appointed a data protection officer. For matters concerning data processing, please use the contact details above.

2. What data we collect

Providing data is voluntary, but without a phone number or e-mail address we will not be able to send a quote or reply to a message.

3. Why we process data and on what basis

We do not process data for marketing purposes, we do not build customer profiles and we do not make automated decisions.

4. How long we keep data

• Enquiries that did not result in an order — up to 12 months from the last contact, after which we delete them together with the submitted files.
• Data related to a completed order — for the limitation period for claims under the Polish Civil Code.
• Accounting documents — 5 years from the end of the tax year to which they relate.
• Server logs — in accordance with the hosting provider's policy, usually up to a dozen or so months.

5. Who we share data with

We do not sell data and we do not share it for marketing purposes. Recipients may only be entities that provide us with technical or organisational support:

• the hosting and e-mail provider on whose servers the website and the company mailbox operate
• the accounting office and legal service providers — to the extent necessary to settle an order
• Google Ireland Limited — the provider of Google Analytics 4, only after you have given consent (section 6)
• public authorities, where the obligation to disclose data arises from the law

These entities process data under data processing agreements concluded with us and only to the extent necessary to perform the tasks entrusted to them.

6. Cookies and statistics

The website does not use advertising systems, does not embed social media plugins or video players, and does not load fonts from external servers. We use two tools to measure visits:

We remember your choice in your browser storage for 12 months. You can withdraw or change your consent at any time — click here to open the notice again. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.

7. Transfer of data outside the European Economic Area

Matomo runs on a server in Poland and does not transfer data outside the European Economic Area. In the case of Google Analytics — only after consent has been given — data may be processed by Google LLC on servers in the United States. The legal basis for this transfer is the European Commission decision of 10 July 2023 on the EU-US Data Privacy Framework, to which Google LLC has certified, together with standard contractual clauses.

8. What rights you have

In connection with the processing of your data, you have the right to:

• access your data and obtain a copy of it
• rectify inaccurate data and complete incomplete data
• have your data erased and restrict its processing
• port the data you have provided to us under a contract
• object to processing based on our legitimate interest
• lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw, Poland

A request can be made by phone or by e-mail to the address given in section 1. We reply without undue delay, at the latest within one month.

9. Security of submitted drawings

We treat files submitted for quotation as your company's technical documentation. We do not share them with other customers, do not use them for our own purposes and do not publish them — including in the projects section — without your express consent.

10. Changes to this document

We update this policy whenever the way the website operates or the scope of processed data changes. The effective date is shown at the beginning of the document.