MAJ CENTRUM Privacy Policy
The purpose of this Privacy Policy is to explain the principles on which MAJ CENTRUM, headquartered in Warsaw, collects, uses and protects your personal data, and to set out the rights you have in connection with its processing by the Data Controller. Please read the information below.
1. Data Controller
The controller of personal data obtained through the website available at www.majcentrum.pl is:
MAJ A. Kubasiewicz, M. Kubasiewicz, J. Oppeln-Bronikowska Spółka Jawna ul. Słoneczna 42a, Stara Iwiczna, 05-500 Piaseczno NIP: 123 00 20 030 | REGON: 010387333 | KRS: 0000080425
MAJ Sp. z o.o. ul. Nowa 23, Stara Iwiczna, 05-500 Piaseczno NIP: 123 09 46 649 | REGON: 017387891 | KRS: 000047800
(hereinafter: ‘the Controller’)
The Controller exercises due diligence in selecting and applying appropriate technical and organisational measures to protect the processed personal data, including safeguarding data against unauthorised access, loss, destruction or unauthorised modification. For questions regarding the processing of personal data, please contact us at: maj@majcentrum.pl (please include ‘GDPR’ in the subject line).
2. Purpose and Legal Basis for Processing
We collect personal data in the following cases:
Contact Form
The purpose of processing data (email address) is to respond to your enquiry electronically or by telephone. Legal basis: Art. 6(1)(b) GDPR – processing necessary to take steps at the request of the data subject prior to entering into a contract.
Marketing
The purpose of processing data (e.g. email address) is to send commercial and marketing information. Legal basis: Art. 6(1)(a) GDPR – consent of the user; Art. 10 of the Act on the Provision of Electronic Services – consent to receive commercial information by electronic means.
Profiling and Creation of Advertising Groups
The purpose of processing data (e.g. email address) is to analyse user activity in order to tailor marketing content, create personalised audience groups in advertising systems (such as Google Ads), and conduct remarketing activities. Legal basis: Art. 6(1)(a) GDPR – consent to the processing of data for advertising profiling purposes.
Fulfilment of the Controller’s Legal Obligations
The purpose of processing is to fulfil legal obligations arising from, among others, tax, accounting and GDPR regulations. Legal basis: Art. 6(1)(c) GDPR.
Legitimate Interests of the Controller
The purpose of processing data is to ensure IT and network security, to fulfil statistical and analytical objectives (e.g. aggregated visit reports), and to establish, pursue and defend against claims. Legal basis: Art. 6(1)(f) GDPR.
Analytics and Statistics (e.g. Google Analytics)
The purpose of processing data collected automatically when using the website (e.g. via cookies and other tracking technologies) is to analyse traffic and user behaviour in order to improve the operation of the website and to produce statistics. These tools may collect data such as IP address, device type, operating system, pages visited, and time of visit. Legal basis: Art. 6(1)(a) GDPR – voluntary consent in respect of analytical and marketing tools (e.g. Google Analytics cookies); Art. 6(1)(f) GDPR – legitimate interests of the Controller in respect of necessary technical data and cookies required for the operation of the website.
Data from Partially Completed Forms
We process data from partially completed forms for the purposes of: improving the functionality of the website and user experience, preventing loss of data entered by users, analysing the usability and functionality of forms on the website, and optimising enquiry and application submission processes. Legal basis: Art. 6(1)(f) GDPR – for basic data (message content); Art. 6(1)(a) GDPR – for sensitive data (email address). We collect data entered in contact, registration and other forms, including data from partially completed forms, such as: email address, message content or enquiry, and other data voluntarily provided by the user.
3. Data Retention Period
Personal data may be processed for the following periods:
Contact form – for the period required by applicable law.
Marketing – until consent is withdrawn or for the period required by applicable law.
Profiling – until consent is withdrawn or for the period required by applicable law.
Legal obligations – for the period required by applicable law.
Legitimate interests – for the period required by applicable law.
Analytics – until consent is withdrawn or according to cookie settings; technical data until the end of the session.
Partially completed forms – for the period required by applicable law. Upon expiry of the indicated periods, data will be deleted or anonymised.
4. Data Security
All sensitive data collected via forms (including email addresses) is encrypted both during transmission (SSL/TLS protocol) and during storage in systems (AES-256 standard). Access to data is restricted exclusively to authorised personnel.
5. Your Rights
You have the following rights: right of access to your data, right to rectification of data, right to erasure of data, right to restriction of processing, right to data portability, right to object to processing, including profiling, right to withdraw consent at any time (without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal), right to lodge a complaint with a supervisory authority. Consent may be withdrawn by changing your browser settings (for cookies), contacting the Controller by email, or through other available mechanisms. Please note that providing personal data is voluntary, but is required to fulfil the stated processing purposes. Without it, we will be unable to carry out the above purposes.
6. Recipients of Data
Recipients of personal data may include: authorised employees of the Controller, entities providing legal services, external IT service providers, entities providing accounting and tax services, other entities processing data on behalf of the Controller under a data processing agreement, entities authorised under applicable law (in particular, courts and public authorities). The Controller may use the services of Google, which maintains servers worldwide; accordingly, personal data may be processed on servers located outside the European Economic Area. Google applies security mechanisms provided for under the GDPR. Detailed information about data processing by Google is available in the privacy policy of Google LLC: https://policies.google.com/privacy?hl=en
7. Profiling
The Controller does not make decisions that have a legal effect or that similarly affect you. Your personal data may be processed in the form of profiling for the purpose of carrying out marketing activities by the Controller. Automated data processing allows for the assessment of selected behaviours, the creation of forecasts of future behaviour, and the display of marketing content. You have the right to object to profiling if it were to have a negative impact on your rights and obligations.
8. Cookie Policy
Cookies are data files, in particular small text files, sent by the visited website to the user’s device. This means that when using the website available at https://www.majcentrum.pl, cookies will be saved on the user’s end device. Cookies are used for the purposes of: enabling the use of services available within the website (e.g. authentication cookies), generating statistics that help understand how the website is used, remembering settings selected by the user and personalising the interface, collecting information about the manner of using the website (including Google Analytics), delivering advertising content tailored to the user’s interests.
Types of Cookies
The website uses two main types of cookies: session cookies – temporary files deleted when the browser is closed – and persistent cookies – stored for a specified period or until manually deleted by the user. The following categories of cookies are used on the website: necessary – enabling the use of the basic services of the website, security – used to detect abuse, performance – collecting information about the manner of using the pages, functional – enabling the user’s settings to be remembered, advertising – enabling the delivery of personalised advertising content. Form cookies: We use cookies to temporarily store data entered in forms in order to prevent data loss and improve website functionality. Data is stored locally in the browser and on servers for the period required by applicable law. The storage of sensitive data (email addresses) requires the expression of consent.
Managing Cookies
The user may reject all or some cookies, and may change browser settings relating to cookies at any time. Detailed information about the options and methods for handling cookies is available in the browser’s settings. Please note that restricting or disabling the use of cookies may affect certain features of the website.
9. Changes to the Privacy Policy
The Controller reserves the right to amend this Privacy Policy if required by applicable law, if the technological conditions of the website’s operation change, or if the amendment introduces a standard higher than the minimum required by law.
Last updated: June 2026