Privacy Policy

1. General information

 

This Privacy Policy sets out the rules for the processing of personal data of users of the websites operating at the following addresses: www.marolex.eu, www.marolex.ru and www.marolexgarten.de, www.marolex.es (hereinafter collectively referred to as the “Websites”), as well as of users who interact with content, including online campaigns published by the Controller on social media services belonging to Meta Platforms Inc., in particular Facebook and Instagram.

 

The controller of personal data is:
MAROLEX Sp. z o.o.
ul. Gdańska 35, 05-152 Łomna
NIP: 1180020506
REGON: 008050820
KRS: 0000048330

 

Contact with the Controller regarding matters related to personal data protection is possible via e-mail at: bok@marolex.pl.

 

The Controller processes personal data of Website users only to the extent necessary to achieve the purposes specified in this Privacy Policy, in accordance with applicable legal provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR) and the Act of 12 July 2024 – Electronic Communications Law.

 

The Controller has not appointed a Data Protection Officer, as it is not required to do so pursuant to Article 37 of the GDPR.

 

 

2. Scope of processed data

 

Depending on how the Website is used, the Controller may process the following categories of personal data:

• first and last name,
• e-mail address,
• telephone number,
• IP address of the end device,
• data contained in the contact form,
• data contained in correspondence conducted via e-mail,
• data relating to the user’s activity on the Website, including statistical data and information stored in cookies.

 

Providing personal data is voluntary in each case; however, in certain situations it may be necessary in order to use selected Website functionalities.

 

 

3. Purposes and legal bases for data processing

 

3.1. Newsletter

 

Users’ personal data are processed for the purpose of sending a newsletter containing commercial and marketing information as well as information about products, services and events related to the business activity of MAROLEX Sp. z o.o.

 

The legal basis for the processing of personal data in this respect is:

• Article 6(1)(a) GDPR, i.e. the consent of the data subject,
• Article 398 of the Electronic Communications Law.

 

Personal data are processed for the duration of the consent, i.e. until it is withdrawn by the user. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

 

Providing personal data for the purpose of receiving the newsletter is voluntary; however, it is necessary to use this service.

 

3.2. Contact form

 

Personal data are processed for the purpose of:

• responding to enquiries submitted via the contact form available on the Website,
• conducting ongoing commercial and informational correspondence.

 

The legal basis for the processing of personal data is:

• Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest consisting in ensuring communication with Website users,
• Article 6(1)(a) GDPR, i.e. consent – if the user expresses a wish to receive marketing information.

 

Personal data are processed for the period necessary to respond to the submitted enquiry and subsequently for the period of limitation of any claims arising from the correspondence.

 

Providing personal data is voluntary; however, it is necessary in order to obtain a response to the submitted enquiry.

 

3.3. User account / forum

 

Personal data are processed for the purpose of:

• enabling the creation and operation of a user account on the Website,
• enabling the publication of content within the forum or other Website functionalities,
• ensuring the security of the Website and protection against abuse.

 

The legal basis for the processing of personal data is:

• Article 6(1)(b) GDPR, i.e. performance of a contract for the provision of electronic services,
• Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest consisting in ensuring the proper functioning of the Website.

 

Personal data are processed for the period during which the user account remains active and, after its deletion, for the period resulting from applicable legal provisions and the limitation period for potential claims.

 

3.4. Marketing and statistics

 

Personal data are processed for the purpose of:

• conducting statistical analyses regarding the manner in which the Website is used,
• improving the quality and functionality of the Website,
• carrying out the Controller’s own marketing activities.

 

The legal basis for the processing of personal data is:

• Article 6(1)(a) GDPR – user consent with regard to analytical and marketing cookies,
• Article 6(1)(f) GDPR – the Controller’s legitimate interest consisting in conducting technical statistics.

 

3.5. Presentation of the product offer

 

Personal data of Website users may be processed for the purpose of presenting the Controller’s own product and service offer, as well as for providing commercial information relating to the activity of Marolex Sp. z o.o., in particular information about current promotions, new products, special campaigns, industry events and other initiatives related to the conducted business activity.

 

Processing of data for the above purpose includes in particular adjusting the content presented on the Website to user preferences, analysing the manner of using the Website and displaying informational and promotional content corresponding to the user’s interests.

 

The legal basis for the processing of personal data in this respect is:

• Article 6(1)(f) GDPR, i.e. the Controller’s legitimate interest consisting in conducting informational and marketing activities concerning its own products and services and in presenting the current commercial offer.

 

 

4. Data recipients

 

Personal data may be disclosed to the following categories of recipients:

• the entity providing hosting services for the Website,
• suppliers of IT systems and IT services,
• entities providing marketing and advertising services,
• operators of analytical and advertising tools, in particular Google and Meta Platforms.

 

These entities process personal data on the basis of data processing agreements concluded with the Controller or as separate data controllers.

 

 

5. Transfer of data outside the European Union

 

In connection with the use of tools provided by entities having their registered offices outside the European Union, personal data may be transferred to third countries, in particular to the United States of America.

 

This applies in particular to the use of:

• Google Analytics (Google LLC),
• advertising tools of Meta Platforms (Facebook, Instagram).

 

Transfers of data to third countries are carried out on the basis of:

• the European Commission’s decision recognising an adequate level of protection of personal data under the EU–US Data Privacy Framework,
• standard contractual clauses approved by the European Commission.

 

 

6. Data retention period

 

Personal data are stored:

• until consent is withdrawn – in the case of data processed for newsletter and marketing purposes,
• until correspondence is completed – in the case of data processed in connection with the contact form,
• until the user account is deleted – in the case of data related to the user account,
• for the period required by applicable law – in particular tax and accounting regulations – with regard to data processed for archival and accounting purposes.

 

 

7. Rights of the data subject

 

The data subject has the right to:

• access their personal data,
• request rectification of their data,
• request erasure of their data,
• request restriction of processing,
• data portability,
• withdraw consent at any time,
• object to the processing of data,
• lodge a complaint with the President of the Personal Data Protection Office (Poland).

 

 

8. Profiling

 

Users’ personal data may be used for profiling for marketing purposes, consisting in adjusting advertising content to the user’s activity on the Website. Such profiling does not produce legal effects concerning the user nor does it significantly affect their situation.

 

 

9. Cookies

 

The Website uses cookies for the purpose of:

• ensuring the proper functioning of the Website,
• conducting statistical analyses,
• conducting marketing activities.

 

The user may change cookie settings at any time via the cookie banner available on the Website or through the relevant settings of their web browser.

 

 

10. Server logs

 

Using the Website involves sending requests to the server on which the Website is hosted. Information contained in server logs may include in particular:

• the user’s IP address,
• the date and time of the request,
• information about the web browser.

 

These data are used exclusively for administrative purposes and in order to ensure the security of the Website.

 

 

11. Changes to the Privacy Policy

The Controller reserves the right to amend this Privacy Policy in the event of changes in legal regulations, changes in the manner of operation of the Website or expansion of its functionalities. The current version of the Privacy Policy is published on the Website each time.