Privacy policy

PRIVACY POLICY   MATBUD MACIEJ MATRACKI

 

 

1. What this Policy is about and how to understand the terms used

This Privacy Policy explains how MATBUD Maciej Matracki processes the personal data of individuals who use the matbudhale.pl website, the contact form, the ‘Get a quote for a hall’ configurator, the CallPage tool, email, telephone and — where applicable — Facebook/Instagram Lead Ads forms.

The policy also includes basic information on the use of cookies, Google Analytics, Google Ads, Google Tag Manager, CookieYes, Microsoft Clarity and Meta tools such as Facebook, Instagram, Messenger and Lead Ads forms.

In this Policy, we use the following terms:

GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.

Electronic Communications Act — the Act of 12 July 2024 – Electronic Communications Act, in particular with regard to the rules governing the use of cookies and similar technologies.

EEA — the European Economic Area.

Personal data — any information relating to an identified or identifiable natural person, e.g. first name and surname, email address, telephone number, details provided in a form, enquiry details, details of a planned investment, IP address or online identifiers.

Cookies — small files or similar technologies stored on, or read from, a user’s device whilst they are using a website.

Administrator — MATBUD Maciej Matracki, i.e. the entity responsible for determining the purposes and means of processing personal data as described in this Policy.

 

 

2. Who is the data controller and how can you contact us?

The data controller is:

MATBUD Maciej Matracki
Młodocin Mniejszy 45C
26-624 Kowala-Stępocina

 

The Controller’s contact details:

email: biuro@matbudhale.pl,

Telephone: 517 777 712 / 780 770 705

For matters relating to the protection of personal data, you may contact the Data Controller by email, telephone or in writing at the address given above.

The Controller has not appointed a Data Protection Officer. For matters relating to personal data, please contact the Controller directly.

 

 

3. What data can we process?

Depending on how you contact us or use the website, we may process:

• identification and contact details, e.g. full name, email address, telephone number, company details or preferred method of contact;
• the content of messages, enquiries, conversations and correspondence;
• information regarding the planned investment or facility, e.g. location, floor area, intended use or technical specifications;
• technical and analytical data relating to the use of the website, e.g. IP address, cookie identifiers, data about the device, browser, clicks or the source of the visit to the website.
  
  
  

4. In what situations do we collect data

We collect data primarily when the user:

• use the contact form on the website;
• Use the „Estimate hall” configurator;
• leaves phone number on CallPage;
• contacting us via email or telephone;
• contacts you via Facebook, Instagram, Messenger, or Instagram Direct;
• fills out Facebook/Instagram Lead Ads forms;
• uses the website and consents to cookies or uses functions that require the processing of technical data.

Some data, e.g. IP address, cookie identifiers, device data or source of entry to the website, may be generated automatically during use of the website.

5. For what purposes, on what legal basis, and for how long do we process data

Below we describe the main purposes of data processing, legal bases, and retention periods. If a matter progresses from the inquiry stage to the offer stage, and then to the contract stage, the data retention period may be longer, in accordance with the description specific to the contract, settlement, complaint, warranty, or claims.

Purpose of data processing	Legal basis	Data retention period
Using the website, ensuring its proper functioning, handling basic functions, website security, and preventing abuse	Art. 6(1)(f) GDPR - the Controller's legitimate interest in operating and securing the website	for the period required to ensure the functioning and security of the site, incident analysis, and system protection
Contact form, email, telephone and general enquiries support	Article 6(1)(f) GDPR – the legitimate interests of the Controller in responding to inquiries and conducting correspondence; if the inquiry leads to an offer or agreement – also Article 6(1)(b) GDPR	for the duration of query handling, and then for a maximum of 24 months from the last contact, if no agreement has been concluded, unless longer retention is required for protection against claims
Preparing a valuation or quote, including via the „Quote a hall” configurator”	art. 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract; additionally art. 6(1)(f) GDPR regarding the archiving of agreements and protection against claims	for the time taken to prepare and handle a valuation or offer, and if no agreement is reached – for a maximum of 24 months from the last contact, unless longer storage is necessary for protection against claims
Contact via CallPage and callback to the user	Art. 6(1)(f) GDPR – the Data Controller's legitimate interest in enabling quick contact with the person interested in the offer; if the conversation leads to an offer or agreement – also Art. 6(1)(b) GDPR	for the time needed to handle the contact, and then for a maximum of 24 months from the last contact, if no agreement was reached
Communication via Facebook, Instagram, Messenger, or Instagram Direct	Art. 6(1)(f) GDPR – the Controller's legitimate interest in communicating with persons contacting MATBUD; if the contact concerns an offer or an agreement – also Art. 6(1)(b) GDPR	for the duration of case handling and communication, and then for a maximum of 24 months from the last contact if no agreement was reached; notwithstanding this, data may be stored by Meta in accordance with its service policies
Handling queries from Facebook/Instagram Lead Ads forms, if such forms are active	Article 6(1)(b) GDPR - taking steps prior to entering into a contract, if the form is used to obtain contact details, a quote, or an offer; additionally, Article 6(1)(f) GDPR regarding correspondence and protection against claims	for the duration of the query processing and preparation of the response or offer, and then for a maximum of 24 months from the last contact, if no agreement was reached
Further contact with the person who made the enquiry or received an offer, e.g. to ask if the matter is still current.	Art. 6(1)(f) GDPR — the Controller's legitimate interest in maintaining a business relationship and verifying the currency of an inquiry or offer	until objection is raised, but no longer than 24 months from the last contact, if no agreement has been concluded
Conclusion and performance of the contract	Article 6(1)(b) GDPR — conclusion and performance of a contract	for the duration of the agreement, and thereafter for the period required for settlements, documentation, warranty claims, guarantees, and the statute of limitations for claims
Settlements, accounting, taxes, invoices, and accounting documents	Art. 6(1)(c) GDPR — Legal obligation incumbent on the Controller	for the period required by tax and accounting regulations; as a rule, for 5 years, calculated in accordance with the relevant tax regulations
Handling of complaints, warranty claims, guarantees, technical documentation, disputes, and the pursuit or defence of claims	Art. 6(1)(f) GDPR – the Controller’s legitimate interest consisting in protecting the Controller’s rights	for the period necessary to handle the case and until the expiry of the limitation periods for claims, and in the event of proceedings, for the duration of such proceedings and until the outcome is documented
Website analytics, conversion measurement, and evaluation of advertising campaign effectiveness, including Google Analytics, Google Ads, and Microsoft Clarity	art. 6(1)(a) GDPR – user consent, if data is collected using analytical, performance, advertising or similar cookies	until consent is withdrawn or for the duration of the relevant cookie or identifier, whichever comes first
Using essential cookies and remembering user choices in CookieYes	Article 6(1)(f) GDPR – the Administrator's legitimate interest in ensuring the website functions and remembering user preferences regarding consents	for the period necessary to ensure the website's operation or for the duration of the given cookie
Processing of data based on consent in other cases, if such consent is given	Art. 6(1)(a) GDPR – consent of the data subject	until the withdrawal of consent, unless there is another legal basis for further processing
Sending newsletters or marketing offers electronically, if the user has consented to this.	Art. 6(1)(a) GDPR — user consent; for the use of an electronic communication channel, also consent required by the provisions of the Electronic Communications Law	until withdrawal of consent

If the basis for processing is Article 6(1)(f) of the GDPR, the user may object to the processing of data. If the basis for processing is consent, the user may withdraw it at any time. This applies in particular to consent for non-essential cookies and consent to receive newsletters or marketing offers electronically. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

 

 

6. Using the website, cookies and consent

The website uses cookies and similar technologies. These are used to ensure the proper functioning of the website, remember user settings, analyse traffic, improve website performance, and conduct advertising activities and measure campaign effectiveness.

The following categories of cookies may be used on the website: essential, functional, analytical, performance, and advertising.

Essential cookies are needed for the basic functionality of the website and are always active. Other cookie categories are activated after the user has given their consent.

Cookie consent, including analytical cookies used by Microsoft Clarity, is managed by CookieYes. Users can accept all cookies, reject non-essential cookies, or save their own preferences in the consent panel. Users can also change cookie settings in their browser.

 

 

7. Google Analytics, Google Ads, Google Tag Manager i Microsoft Clarity

The website uses Google Analytics, Google Ads, and Google Tag Manager. These tools may be used to analyse website traffic, measure the effectiveness of advertisements, and check whether a user has performed a specific action on the website, such as submitting a form or using the „Quote a hall” configurator.

Google Tag Manager is used to manage tags and events on a website. The „Quotation Hall” configurator uses events that can be passed via Google Tag Manager to Google Ads and Google Analytics for ad performance measurement and configurator usage analysis.

If Google tools use analytical or marketing cookies, they should only be activated after obtaining user consent. Information on how Google uses data in advertising services is available at: https://business.safety.google/privacy/.

Strona korzysta także z Microsoft Clarity w celu analizy sposobu korzystania ze strony, w tym kliknięć, przewijania oraz poruszania się użytkowników pomiędzy jej elementami. Narzędzie może tworzyć zbiorcze mapy aktywności oraz nagrania przebiegu sesji, przy czym dane wpisywane w formularzach oraz treści mogące zawierać dane osobowe są maskowane. Informacje o zasadach przetwarzania danych przez Microsoft są dostępne na stronie: https://privacy.microsoft.com/privacystatement.

 

 

8. Facebook, Instagram, Messenger and Lead Ads forms

If a user contacts MATBUD via Facebook, Instagram, Messenger, or Instagram Direct, MATBUD processes the data provided in this communication, e.g., profile name, message content, contact details, and information concerning the matter.

If the user completes a Facebook/Instagram Lead Ad form, MATBUD will use the data provided in the form to make contact, handle enquiries, and prepare an offer.

Meta Platforms Ireland Limited, as the operator of Facebook, Instagram and Messenger, also processes user data as a separate controller, in accordance with its own privacy policy: https://www.facebook.com/privacy/policy/.

In relation to certain features provided by Meta, in particular statistics regarding the use of MATBUD profiles or pages on Meta services, MATBUD and Meta Platforms Ireland Limited may act as joint data controllers to the extent specified in Meta's documents, including the Page Controller Addendum: https://www.facebook.com/legal/terms/page_controller_addendum.

 

 

9. Who can we pass data to

Personal data may be transferred to organisations that assist MATBUD in conducting its business, website management, communications, advertising, analytics, technical support, IT, accounting or legal protection.

The recipients of the data may include, in particular:

• IT infrastructure and hosting providers,
• email providers,
• entities supporting the website, forms, configurator and website database,
• marketing or advertising agencies,
• entities supporting online campaigns, analytics, and tags,
• Google Analytics, Google Ads, Google Tag Manager, Microsoft Clarity, CookieYes and CallPage tool providers,
• operators of Facebook and Instagram, if the user uses these channels or Lead Ads forms,
• accounting office, tax advisors, lawyers or other advisors,
• Banks and payment operators,
• public authorities, courts or offices, where the obligation to transfer data arises from legal provisions.

If these entities process data on behalf of MATBUD, this is done on the basis of appropriate data processing agreements, insofar as such agreements are required by the GDPR regulations.

 

 

10. Transferring data outside the European Economic Area

W związku z korzystaniem z narzędzi zewnętrznych, w szczególności Google, Meta, Microsoft Clarity oraz CallPage, dane osobowe użytkowników mogą być przekazywane poza EOG.

Może to dotyczyć zwłaszcza korzystania z Google Analytics, Google Ads, Google Tag Manager, Microsoft Clarity, Facebooka, Instagrama, Messengera, formularzy Facebook/Instagram Lead Ads oraz narzędzia CallPage.

If the use of such tools results in data being transferred outside the EEA, the transfer takes place on the terms applied by the respective provider and using mechanisms provided for by the GDPR, such as a European Commission decision establishing an adequate level of protection, the EU-US Data Privacy Framework, standard contractual clauses, or other legally permissible transfer mechanisms.

 

 

11. Is providing data mandatory?

Providing data is voluntary, but may be necessary to process your query, prepare a quote, make contact by phone, or use the „Quote a hall” configurator. Failure to provide data marked as required may prevent us from responding to your query, preparing a quote, or continuing our correspondence.

 

 

12. What rights does the user have

The data subject has rights under GDPR, in particular:

• Data access law,
• The right to receive a copy of the data,
• right of rectification,
• the right to erasure,
• the right to restriction of processing,
• right to data portability,
• right to object to processing of personal data,
• the right to withdraw consent at any time if the data is processed on the basis of consent.

Requests concerning personal data can be sent to the e-mail address: biuro@matbudhale.pl.

The administrator may request additional information needed to confirm the identity of the person making the request, if this is necessary for the protection of personal data.

 

 

13. Objection and withdrawal of consent

If data is processed on the basis of the Controller's legitimate interests, the user may object to such processing. This applies, for example, to further contact after an enquiry has been made or to direct marketing of the Controller's own services.

If data is processed based on consent, the user may withdraw their consent at any time. This applies in particular to consent for analytical and marketing cookies, and consent to receive newsletters or marketing offers electronically. Withdrawal of consent for newsletters or marketing offers can be reported to: biuro@matbudhale.pl. Withdrawal of consent does not affect the lawfulness of prior processing.

Cookie consents can be changed in the cookie preferences panel available on the website.

 

 

14. Complaint to the President of UODO

If a user believes their personal data is being processed unlawfully, they have the right to lodge a complaint with the President of the Personal Data Protection Office.

 

 

15. Automated decisions and profiling

MATBUD does not make decisions about users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.

 

 

16. Data security

The Administrator shall implement organisational and technical measures aimed at protecting personal data against unauthorised access, loss, destruction, alteration, or disclosure.

The scope of the measures applied depends on the type of data, the purpose of processing, and the risk associated with the given process.

The Administrator restricts access to data to individuals and entities who require such access for the purpose of handling inquiries, preparing offers, conducting advertising activities, technical support, IT, billing, or protecting the Administrator's rights.

 

 

17. Privacy Policy Changes

The privacy policy may be updated, particularly in the event of changes to the Administrator's data, the launch of new forms or lead generation channels, changes to tool providers, changes to the operation of cookies, tags or advertising tools, changes to legal regulations, or the need to clarify data retention rules.

The current version of the Privacy Policy is available on the website matbudhale.pl.