Privacy Policy

This Privacy Policy includes important information about your personal data and it will be great if you read it carefully.

At MavinS (“we”, “us”, “our”), accessible through www.mavins.eu, we take care to ensure a high level of protection of the privacy of the processed personal data. In this document we gathered the most important information on how we collect, process and secure your personal data, and what are your rights and obligations in this regard.

In legal terms: we process your personal data according to the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (in short: GDPR).

Please keep in mind that due to Brexit, from 1 January 2021 the GDPR is incorporated into the British legal system through the update to the Data Protection Act 2018 called the Data Protection, Privacy and Electronic Communications (Amendments etc) (EU Exit) Regulations 2019 (in short: UK GDPR).

Administrator of your personal data

The administrators of the personal data are:

Patrycja Milczanowska, who runs the business under the name of Patrycja Milczanowska, Hallera square 6a/23, 03-464 Warszawa.
Małgorzata Sroka, who runs the business under the name of MEDLEX Małgorzata Sroka, Przemysława II 16 street, 31-710 Kraków.

In case you have additional questions or require more information about our Privacy Policy, you can contact us via email: contact@mavins.eu

Purpose of collecting your personal data

We collect and process User’s personal data in the scope of our legitimate interest:

initial analysis and advice on applying our services to User’s request,
undertaking actions necessary in order to perform the contract to which User is a party,
maintaining contact with User,
selling services and processing payments,
promoting our services and activities,
processing claims, complaints and investigations,
accounting and tax related activities.

In specific cases, the legal basis of processing personal data are the following:

Art. 6 par. 1 lit. b GDPR (processing is necessary for the performance of a contract with the party to which the data refer, or to take action at the request of that party prior to entering into a contract);
Art. 6 par. 1 lit. c GDPR (the processing is necessary for the fulfillment of a legal obligation incumbent on the controller);
Art. 6 par. 1 lit. f. GDPR (processing is necessary for the purposes arising from the legitimate interests pursued by the controller or by a third party).

We process User’s personal data until the fulfillment of processing purposes, expiry of the limitation period for possible claims and expiry of the legal obligation to store data.

Personal data we collect and process

We collect User’s personal data through the following sources:

contact forms and surveys via our website;
email communication;
communication channels and social network: Whatsapp, Instagram, Facebook, LinkedIn;
personal meetings, phone and online calls.

We process the following personal data of User or User’s relatives, which are necessary in order to perform our business activities, provide services and fulfill contract to which User is a party:

name and surname
place of residence
e-mail address
phone number
date and place of birth
marital status
gender
citizenship
emigration
confession
military service
employment
detention or repression
passport number and country of issuance

Providing personal data by User is a necessary condition for the performance of a contract. However, such activity is fully voluntary and we process User’s personal data only with their prior consent which is expressed by sharing the mentioned data with us through available communication channels (such as contact forms, emails, phone calls, online meetings, social network etc.).

Processing information regarding minors

As for the Art. 8 GDPR, we process the information of minors (below the age of 13 years) only with the consent and authorization by the holder of parental responsibility over the child. We do not knowingly collect any personal identifiable data from minors.

Cookies and log files

We use cookies and other tracking technologies to collect and process information regarding User’s preferences and usage of the website. This information is used to improve User’s browsing experience on our website, tailor our content to User’s preferences and analyze traffic to our website.

MavinS follows a standard procedure of using log files. These files log visitors when they visit our website. The information collected by log files include internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks. These are not linked to any information that is personally identifiable. The purpose of the information is for analyzing trends, administering the site, tracking users’ movement on the website, and gathering demographic information.

Third parties and other entities

To perform our business activities we use applications and tools that may require sharing User’s personal data with third party businesses, such as:

Protonmail, Route de la Galaise 321228 Plan-les-OuatesGeneva, Switzerland (email services)
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for analytical and statistical (Google Analytics) and advertising (Google Ads Pixel) purposes
Google Cloud Poland spółka z o.o., Emilii Plater 53, 00-113 Warszawa, Poland (cloud services)
Mega Europe SARL, 202, Z.A.E. Wolser F, L-3290 Bettembourg, Luxembourg (cloud storage)
SeoHost, PERSKIMEDIA, Janiny Omańkowskiej 58, 60-465 Poznań (server)
Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, California, 94080, USA (payment processing)
Wise, 6th Floor, TEA Building, London, United Kingdom (payment processing)
PayPal, Inc., P.O. Box 45950, Omaha, NE 68145-0950, USA (payment processing)
Aut O’Mattic A8C Ireland Ltd., Grand Canal Dock, 25 Herbert Pl, Dublin, D02 AY86, Ireland (our website’s template)
WPForms LLC, 7732 Maywood Crest Dr., West Palm Beach, FL 33412, USA (contact form on our website)
EngageBay Inc., 1007 North Orange Street 4th Floor #180 Wilmington, DE 19801, USA (project management)

Some of our business operations involve the transfer of User’s data to the so-called third countries (outside the European Economic Area) where the GDPR does not apply. However, this is always based on the legal instruments provided for in the GDPR. More details can be found in the respective privacy policies of third party providers mentioned above.

We may also entrust User’s personal data to provincial and central authorities of the Republic of Poland and the EU, as well as to other entities which are authorized to obtain information on the basis of legal regulations. User’s personal data may be also transferred to the translation services, postal/courier services, legal advisory services, banking services, accounting services, hosting services and IT services. Actions mentioned above are performed only if it is required by law or if it is necessary to perform the contract to which User is a party, and are always performed in a way that ensures an adequate level of protection.

User’s rights

As a User you have the following rights in regards to the personal data we collect and process:

The right to request information about the scope of processing of personal data;
The right to access, update, correct (rectify), transfer, limit (restrict) or delete (erase) your personal data;
The right to object to the processing of personal data;
The right to withdraw consent to the processing of personal data;
The right to lodge a complaint to the supervisory institution.

The supervisory institution for personal data in Poland is currently the President of the Office for Personal Data Protection.

Consent

By using our website, you hereby consent to our Privacy Policy and agree to its terms.

Last update: 17.04.2023