§ 1 GENERAL PROVISIONS
1. This Privacy Policy is addressed to individuals visiting the website (hereinafter referred to as: Users) at https://www.moxbee.pl/ (hereinafter referred to as: Service) and defines the rules for collecting and processing personal data.
2. In accordance with the General Data Protection Regulation (hereinafter: GDPR), the Data Controller of the personal data contained in the service is Moxbee sp. z o.o. headquartered in Łochowice at ul. Botaniczna 25 (hereinafter: the Controller).
3. To obtain information regarding this Privacy Policy or matters related to the processing of the User’s personal data, contact with the Controller is possible using the following contact details: email address: kontakt@moxbee.pl or phone number: +48 571 511 957.
4. The content of the Service is the property of the Data Controller and is legally protected.
5. If necessary, the provisions of this Policy may be amended.
§ 2 PERSONAL DATA
1. Personal data refers to information about an identified or identifiable natural person through one or more specific factors determining physical, physiological, genetic, mental, economic, cultural, or social identity, including device IP, location data, internet identifier, and information collected via cookies and other similar technologies.
2. The Controller undertakes all possible actions to protect the interests of individuals whose personal data is processed.
3. The Controller collects and processes personal data:
a) in accordance with applicable laws;
b) for the specific purposes outlined in the Privacy Policy;
c) in a manner appropriate to the purposes and obligations;
in accordance with applicable data retention periods;
e) in accordance with applicable data processing security standards, particularly to ensure protection against unauthorized or unlawful processing and accidental loss or destruction.
§ 3 PURPOSES AND LEGAL BASIS FOR PROCESSING PERSONAL DATA
1. The personal data of service users are processed, in particular, for the purpose of:
a) Providing electronic services, including access to the content offered on the website, which is necessary to perform the contract with the user, based on Article 6(1)(b) of the GDPR;
b) Responding to inquiries left on the website via the contact form, based on Article 6(1)(b) of the GDPR;
c) Sending commercial information using electronic communication means to the email address provided through newsletter subscription, based on Article 6(1)(b) of the GDPR;
d) Enabling the determination, enforcement, or defense against claims, which constitutes the legitimate interest of the Controller aimed at protecting its rights, based on Article 6(1)(f) of the GDPR.
§ 4 DATA RETENTION PERIOD
1. Generally, the data processing period by the Controller is the duration of the service.
2. In cases of data processing based on the legitimate interest of the Controller, data is processed for the period necessary to achieve that interest or until a valid objection to data processing is raised.
3. If processing is based on consent, data is processed until the consent is withdrawn.
4. The data processing period may be extended if necessary to establish, pursue, or defend against potential claims. After this period, data will be processed solely to the extent required by applicable law.
5. After the processing period ends, data is permanently deleted or anonymized.
§ 5 RIGHTS OF SERVICE USERS REGARDING DATA PROCESSING
1. We commit to respecting the confidentiality of Users’ personal data within this Service and to ensuring the ability to exercise their rights. Users can exercise their rights at no cost by sending us an email or contacting us in another manner.
2. In cases and under the conditions specified in data protection regulations, a Service User has:
a) The right to access data (Article 15 GDPR);
b) The right to rectify data (Article 16 GDPR);
c) The right to erase data (Article 17 GDPR);
d) The right to restrict the processing of personal data (Article 18 GDPR);
e) The right to data portability (Article 20 GDPR);
f) The right to object to processing (Article 21(1) GDPR);
g) The right to withdraw consent (Article 7 GDPR);
h) The right to lodge a complaint with a supervisory authority (Article 77 GDPR).
3. A User wishing to exercise their rights should, as much as possible, precisely indicate what the request concerns, particularly:
a) which right they wish to exercise;
b) which data processing activities or purposes the request pertains to.
4. The Controller reserves the right to recontact the applicant to obtain more information if it is unable to determine the content of the request or identify the person making the request.
5. The Controller responds to requests within 30 days of receipt. If it is necessary to extend this period, the Controller will inform the applicant of the reasons for the extension. The response is provided to the email address from which the request was sent, and in the case of mail requests – by ordinary mail to the address specified by the applicant.
§ 6 SHARING OF PERSONAL DATA
1. The Data Controller ensures that all collected personal data are used to fulfill obligations to Users and will not be shared with third parties, except in specified situations.
2. The User’s personal data may be shared:
a) with employees, management team members, suppliers, subcontractors as necessary to fulfill the contract;
b) with authorities authorized by law, in particular: Offices (e.g., Tax Office in the case of a tax audit), Police, Courts, and others, when required by law.
§ 7 ADDITIONAL INFORMATION FOR NEWSLETTER SUBSCRIBERS
1. A Service User who has subscribed to the newsletter will receive marketing information regarding our products and/or services.
2. A Service User has the right to unsubscribe at any time by clicking the link provided in the newsletter or by contacting the Controller.
3. The Controller does not use the User’s data to make decisions based on automated data processing that could affect their legal situation or have similarly significant effects.
§ 8 SOCIAL MEDIA
1. To provide Users of the Service with access to current information about products and/or services, the Controller disseminates information via social media platforms (Facebook, Instagram).
2. The Controller processes the Personal Data of Users of social media platforms in connection with managing its profile on each respective platform.
3. Information about data processing in social media is available at:
a) Facebook – https://www.facebook.com/policy.php
b) Instagram – https://www.facebook.com/help/instagram/155833707900388
§ 9 COOKIES
1. In accordance with telecommunications law, the Controller informs that the Service uses cookies.
2. “Cookies” are understood as IT data, particularly text files, stored on the User’s end device and intended for use with the Service’s websites. “Cookies” include, in particular, the domain name of the website from which they originate, the storage time on the end device, and a unique number used to identify the browser from which the connection to the website is made.
3. Our Service collects:
a) Technical (necessary) Cookies – ensuring the proper functioning of the website. These files do not store any information that could constitute the User’s personal data and are not used to determine the User’s identity.
b) Marketing Cookies – We use marketing tools available within the Facebook service (Facebook Pixel). They are used for targeting ads on Facebook and enabling the measurement of advertising campaign effectiveness. Information collected via Facebook Pixel is anonymous (does not allow for User identification). We perform these activities based on the consent given by the User of our Service.
English 
Polish