Merizon

Privacy Policy

1. Data controller

The controller of personal data processed in connection with the use of this website (merizon.eu) is MERIZON spółka z ograniczoną odpowiedzialnością (limited liability company), registered office: ul. Reformacka 15B, 32-020 Wieliczka, Poland, entered in the Register of Entrepreneurs of the National Court Register kept by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register, under KRS number 0000540776, tax ID (NIP) 6793107516, REGON 360642076, share capital PLN 50,000 (“Controller”, “Merizon”, “we”).

You can contact the Controller:

  • by e-mail: office@merizon.eu,
  • by phone: Cracow Branch +48 692 782 472, Warsaw Branch +48 530 692 748,
  • by post: Cracow Branch, ul. Reformacka 15B, 32-020 Wieliczka, Poland; Warsaw Branch, ul. Ogrodowa 8G/119, 05-509 Józefosław near Warsaw, Poland.

2. What data we process

In its current version, merizon.eu does not include a contact form or any other mechanism for automatically collecting data from visitors. We process your personal data (such as name, e-mail address, phone number, and the content of correspondence) only when you contact us by e-mail or phone, on your own initiative, using the contact details provided on the website.

In the event of connection errors, the server may record basic information about the request in a technical log, including the IP address, date and time, and the address of the subpage — solely to ensure security and diagnose faults (Art. 6(1)(f) GDPR). The logs are automatically overwritten and kept for a short time, as a rule no longer than a few weeks; they are not used to identify or profile visitors.

3. Purposes and legal bases for processing

  • responding to inquiries and conducting business correspondence — Art. 6(1)(b) GDPR (steps taken towards concluding a contract) or Art. 6(1)(f) GDPR (Controller's legitimate interest in handling inquiries),
  • where a contract is concluded — its performance, including settlements as well as warranty and service support — Art. 6(1)(b) GDPR,
  • the possible establishment, exercise, or defence of legal claims — Art. 6(1)(f) GDPR,
  • compliance with legal obligations, e.g. tax and accounting obligations — Art. 6(1)(c) GDPR.

4. Data retention period

We retain data for the duration of the correspondence or cooperation, and afterwards for the period necessary to secure any potential claims (as a rule, no longer than the applicable limitation period), as well as for the period required by tax and accounting regulations in respect of settlement documents.

5. Recipients of data

Data may be entrusted to entities supporting our business activities, in particular the provider of hosting and IT infrastructure on which the website operates (Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — servers in the European Union), the provider of the e-mail service we use for correspondence (Microsoft Ireland Operations Limited, Dublin, Ireland — Microsoft 365), as well as entities providing accounting or legal services — solely under data processing agreements concluded with them, in accordance with Art. 28 GDPR. We do not sell your data or share it with third parties for marketing purposes.

6. Transfers of data outside the EEA

The website runs on servers in Germany, in the European Union. E-mail correspondence is handled in Microsoft 365 — Microsoft may also process data outside the European Economic Area, including in the United States; this takes place on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission (Art. 45 and 46 GDPR). The project map background is downloaded from the servers of the OpenStreetMap Foundation in the United Kingdom, for which the European Commission has adopted an adequacy decision (Art. 45 GDPR) — see section 7 for details. Apart from that, we do not transfer personal data outside the EEA.

7. Cookies and tracking technologies

The public part of merizon.eu does not use cookies for analytical, statistical, or marketing purposes — we do not use, among others, Google Analytics, Meta Pixel, or similar tools. The fonts used on the website (Google Fonts) are hosted locally on our server and do not cause any data to be sent to Google's servers. The map of our office locations is not automatically embedded on the website — the “Show on map” link (Google Maps) opens in a new tab only after your conscious click, without automatically sending any data to Google merely by visiting the page.

Some subpages may contain YouTube videos. The player does not load automatically — until you click, we only display a thumbnail served from our own server. Only after you click “Play” does the video load from YouTube in privacy-enhanced mode (youtube-nocookie.com); from that moment Google Ireland Limited may process data, including setting cookies, in accordance with its own privacy policy (policies.google.com/privacy).

On the home page and on the “Projects” subpage we display a map showing the properties where we have carried out projects. The map loads only when you scroll down to it. The map background (tiles) is then downloaded directly from the servers of the OpenStreetMap Foundation (St John’s Innovation Centre, Cowley Road, Cambridge, CB4 0WS, United Kingdom), so your browser sends them your IP address and standard browser information. The map does not set any cookies. The legal basis is our legitimate interest in presenting our projects (Art. 6(1)(f) GDPR); the OpenStreetMap Foundation processes this data in accordance with its own privacy policy (osmfoundation.org/wiki/Privacy_Policy).

The content management system's administrative panel uses an essential session cookie, used solely to keep authorised Merizon employees logged in — this does not apply to visitors of the public part of the website.

If we implement analytical or marketing tools requiring consent in the future, we will inform you via a cookie consent banner, and this policy will be updated accordingly.

8. Rights of data subjects

You have the right to: access your data, rectify your data, erase your data, restrict processing, data portability, and object to processing based on Art. 6(1)(f) GDPR, as well as the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that the processing violates GDPR. To exercise the above rights, please contact us at office@merizon.eu.

9. Voluntary provision of data

Providing personal data is voluntary, but necessary to respond to an inquiry or to conclude and perform a contract.

10. Data security

We apply appropriate technical and organisational measures to ensure the security of processed data, adequate to the identified risk, including an encrypted connection (HTTPS) and restricted access to the administrative panel limited to authorised persons.

11. Changes to this privacy policy

We reserve the right to make changes to this Privacy Policy, in particular in connection with changes to the website's functionality or applicable law. The current version of the policy is always available at merizon.eu/en/privacy-policy/.

Last updated: 24 October 2026