Merizon

Privacy Policy

⚠ DRAFT — REQUIRES LEGAL REVIEW BEFORE PUBLICATION

The text below is a preliminary draft prepared based on the actual scope of data processing on the merizon.eu website. Before publication it requires: (1) review by legal counsel, (2) completion of the company registration data marked “[TO BE COMPLETED]”, (3) removal of this notice.

1. Data controller

The controller of personal data processed in connection with the use of this website (merizon.eu) is Merizon Sp. z o.o., [TO BE COMPLETED: registered office address per KRS], VAT/NIP: [TO BE COMPLETED], REGON: [TO BE COMPLETED], KRS: [TO BE COMPLETED] (“Controller”, “Merizon”, “we”).

You can contact the Controller:

  • by e-mail: office@merizon.eu,
  • by phone: Cracow Branch +48 692 782 472, Warsaw Branch +48 530 692 748,
  • by post: Cracow Branch, ul. Reformacka 15B, 32-020 Wieliczka, Poland; Warsaw Branch, ul. Ogrodowa 8G/119, 05-509 Józefosław near Warsaw, Poland.

2. What data we process

In its current version, merizon.eu does not include a contact form or any other mechanism for automatically collecting data from visitors. We process your personal data (such as name, e-mail address, phone number, and the content of correspondence) only when you contact us by e-mail or phone, on your own initiative, using the contact details provided on the website.

3. Purposes and legal bases for processing

  • responding to inquiries and conducting business correspondence — Art. 6(1)(b) GDPR (steps taken towards concluding a contract) or Art. 6(1)(f) GDPR (Controller's legitimate interest in handling inquiries),
  • where a contract is concluded — its performance, including settlements as well as warranty and service support — Art. 6(1)(b) GDPR,
  • the possible establishment, exercise, or defence of legal claims — Art. 6(1)(f) GDPR,
  • compliance with legal obligations, e.g. tax and accounting obligations — Art. 6(1)(c) GDPR.

4. Data retention period

We retain data for the duration of the correspondence or cooperation, and afterwards for the period necessary to secure any potential claims (as a rule, no longer than the applicable limitation period), as well as for the period required by tax and accounting regulations in respect of settlement documents.

5. Recipients of data

Data may be entrusted to entities supporting our business activities, in particular the provider of hosting and IT infrastructure on which the website operates ([TO BE COMPLETED: hosting/server provider name]), as well as entities providing accounting or legal services — solely under data processing agreements concluded with them, in accordance with Art. 28 GDPR. We do not sell your data or share it with third parties for marketing purposes.

6. Transfers of data outside the EEA

We do not currently transfer personal data outside the European Economic Area. [TO BE COMPLETED if the hosting or e-mail provider is located outside the EEA].

7. Cookies and tracking technologies

The public part of merizon.eu does not use cookies for analytical, statistical, or marketing purposes — we do not use, among others, Google Analytics, Meta Pixel, or similar tools. The fonts used on the website (Google Fonts) are hosted locally on our server and do not cause any data to be sent to Google's servers. The map of our office locations is not automatically embedded on the website — the “Show on map” link (Google Maps) opens in a new tab only after your conscious click, without automatically sending any data to Google merely by visiting the page.

The content management system's administrative panel uses an essential session cookie, used solely to keep authorised Merizon employees logged in — this does not apply to visitors of the public part of the website.

If we implement analytical or marketing tools requiring consent in the future, we will inform you via a cookie consent banner, and this policy will be updated accordingly.

8. Rights of data subjects

You have the right to: access your data, rectify your data, erase your data, restrict processing, data portability, and object to processing based on Art. 6(1)(f) GDPR, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that the processing violates GDPR. To exercise the above rights, please contact us at office@merizon.eu.

9. Voluntary provision of data

Providing personal data is voluntary, but necessary to respond to an inquiry or to conclude and perform a contract.

10. Data security

We apply appropriate technical and organisational measures to ensure the security of processed data, adequate to the identified risk, including an encrypted connection (HTTPS) and restricted access to the administrative panel limited to authorised persons.

11. Changes to this privacy policy

We reserve the right to make changes to this Privacy Policy, in particular in connection with changes to the website's functionality or applicable law. The current version of the policy is always available at merizon.eu/en/privacy-policy/.

Last updated: [TO BE COMPLETED upon publication]