Privacy policy

mbmnest.co.uk

This Privacy Policy is intended to provide you with information on how your personal data is processed when you visit our website, as well as when you contact our company or use our services. It serves to provide you with the information referred to in Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("RODO"). The privacy policy is for information purposes only and does not imply any obligations for you (it is not terms and conditions or a contract). Who is the controller of your personal data?

1. The administrator of your personal data is MBM Nest Properties Sp. z o.o., NIP: 679-331-09-50, ul. Rymanowska 3, 30-698 Kraków.
2. For all data protection issues, you can contact us by email at: [email protected], by letter to: ul. Rymanowska 3, 30-698 Kraków.

How do we keep your personal data secure?

1. Your personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC ("RODO") and other currently applicable data protection laws.
2. We use the technical and organisational measures required by national and EU law to ensure the protection of the personal data we process and to safeguard the personal data against unauthorised access, acquisition by unauthorised persons, processing in breach of the law, and alteration, loss or destruction.
3. The provision of personal data is voluntary, but necessary for the use of the required website functionalities, as well as for the conclusion of a contract related to the use of our services and the issuing of accounting documents related to the contract concluded.
4. Where processing of personal data is based on consent, failure to do so will prevent us from taking the action to which that consent relates. You can withdraw your consent at any time, but this will not affect the lawfulness of our processing of your personal data that we have carried out on the basis of consent before withdrawal.

For what purpose and on what basis do we process your personal data and how long will we keep it?  In particular, we process your personal data in order to provide the services we offer and to perform the contracts thus concluded, as well as to take steps prior to concluding them. We also process your personal data in order to provide services electronically in connection with your use of our website. Your personal data may be processed by us for:  

1. Provision of services

Your personal data provided by you in connection with the use of our company's services (in particular: first and last name, address [street, building number, premises number, town, country], e-mail address, telephone number and, in the case of entrepreneurs, also the company name and address and VAT number), are or may be processed by us for the following purposes and on the following legal bases:

1. the provision of the service and the performance of the contract thus concluded, as well as to take action, at your request, prior to the conclusion of the contract (Article 6(1)(b) RODO),
2. the possible establishment, investigation or defence of claims that may arise in connection with your use of our services, as well as other purposes (e.g. archiving for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO),
3. issuing and storing accounting documents and processing any complaints, in accordance with the applicable legislation (Article 6(c) of the DPA).

We will process your personal data for the duration of the performance of the contract, unless further retention of the data is required by generally applicable law (e.g. tax, accounting regulations) or is justified by the limitation period for claims or is justified by our overriding interest resulting from the pursuit of legitimate interests. In any case, the longer term of storage of personal data shall be decisive.  

2. Services provided by electronic means

Your personal data provided by you or other data collected in connection with your use of our website (such as, in particular: Your IP address, request URL, device identifier, amount of time spent on individual pages, browser type, browser language, date and time of use of the website, screen resolution, operating system type and version), are or may be processed by us for the following purposes and on the following legal bases:

1. the provision of electronic services, on the basis of a contract for the provision of electronic services, as well as to take action, at your request, prior to the conclusion of the aforementioned contract (Article 6(1)(b) of the DPA),
2. the possible establishment, investigation or defence of claims that may arise in connection with your use of our website, as well as other purposes (e.g. archiving for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data for the duration of the provision of the electronic services, unless further storage is justified by the statute of limitations for claims or by generally applicable law or is justified by our overriding interest arising from the pursuit of legitimate interests. In any case, the longer storage period for personal data shall be decisive.

3. Marketing and service analytics

Your personal data provided by you, or other data collected in connection with your use of our website, is or may be processed by us for the following purposes and on the following legal bases:

1. marketing of our services, which is our legitimate interest to carry out marketing activities (Art. 6(1)(f) RODO), with the proviso that our sending of commercial information or direct marketing by means of telecommunications terminal equipment and automatic calling systems is only possible with your prior consent (the granting of this consent is voluntary, but necessary for the sending of commercial information), in which case your consent may also be the basis for the processing of your personal data (Art. 6(1)(a) RODO)
2. the creation of compilations, analyses and statistics, including reporting, service development planning, development work, the creation of statistical models, which is our legitimate interest to improve and develop the website (Art. 6(1)(f) RODO),
3. the possible establishment, investigation or defence of claims that may arise in connection with your use of our website, as well as other purposes (e.g. archiving for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

Our marketing activities may involve presenting you with offers and advertisements that are tailored to you based on profiling (e.g. based on your activity on our website), so that we can better tailor offers to specific groups of our customers as well as your preferences. However, you are not materially affected by our marketing activities, and in our view, displaying personalised advertising is more beneficial than presenting an offer with no connection to your needs. In the case of marketing activities carried out on the basis of consent, we will process your personal data until the consent is withdrawn, and in the case of marketing activities carried out on the basis of a legitimate interest premise until you object, unless further storage (in both cases) of the data is justified by the limitation period for claims or results from generally applicable laws or is justified by an overriding interest of the Administrator resulting from the implementation of legitimate interests.

4. Newsletter

Your personal data provided by you in connection with your subscription to the Newsletter, is or may be processed by us for the following purposes and on the following legal grounds:

1. the provision of a Newsletter service on the basis of the Terms and Conditions, consisting of sending commercial information to the e-mail address you have provided (Art. 6(1)(b) RODO),
2. the possible establishment, investigation or defence of claims that may arise in connection with your use of the Website, as well as other purposes (e.g. archiving for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data for the duration of your subscription to the Newsletter, unless further storage is justified by the period of limitation of claims or pursuant to generally applicable law or justified by our overriding interest resulting from the pursuit of legitimate interests. In each case, the longer retention period of the personal data shall be decisive.

5. Contact by e-mail or telephone

Your personal data provided by you in connection with your email or telephone contact (i.e. the data necessary to establish and maintain contact), as well as those collected in the course of further communication, are or may be processed by us for the following purposes and on the following legal grounds:

1. to respond to an email or telephone contact, which is our legitimate interest (Article 6(1)(f) of the DPA),
2. to take pre-contractual action at your request, if this is what the communication will be about (Article 6(1)(b) RODO),
3. the possible establishment, investigation or defence of claims that may arise in connection with your use of the Website, as well as other purposes (e.g. archiving for the purpose of proving facts), which constitute our legitimate interest (Article 6(1)(f) RODO).

We will process your personal data until correspondence has been conducted, unless further retention is justified by the limitation period for claims or pursuant to generally applicable law or is justified by an overriding interest of the Administrator arising from the pursuit of legitimate interests. In any case, the longer retention period of the personal data shall be decisive. What are cookies?

1. The website uses cookie technology as well as functionalities similar to it. Cookie files are saved on the final device of the person visiting the Website. Each person visiting the Website has the possibility to choose the scope of application of cookies and then give their consent within the so-called cookie banner displayed during their first visit to the Website.
2. Cookies are IT data, in particular text files, which are stored in the final device of a person visiting the Website and are intended for the use of the Website. Cookies usually contain the name of the Website from which they originate, the time they are stored on the end device and a unique number.
3. Cookies are primarily used to ensure the proper functioning of the Website. Depending on the visitor's choice of the extent to which cookies are used, cookies may also be used for other purposes, such as the creation of statistics which help to understand how Users use the Website, which makes it possible to improve its structure and content, as well as for marketing purposes consisting, among others, in reaching visitors who have previously visited the Website with an advertising message when they use other websites or social networking sites (in this respect, cookies of third parties, i.e. providers of tools used by the Administrator for this purpose, may also be used).
4. Depending on the choice of the extent to which cookies are used, they collect various types of information which, in principle, do not constitute personal data. However, some of the information collected in this manner, depending on the type of cookies, may contain information allowing to identify the visitor to the Website, in particular when linked to other data. This applies in particular to cookies, the use of which requires the consent of the visitor to the Website. Other provisions of the Privacy Policy shall apply to such information, including in particular the rights of the data subject.
5. Detailed information on the scope and types of cookies used within the Website can be found within the cookie banner displayed when visiting the Website for the first time, as well as by clicking on the button with the "overbite cookie with the letter Y" icon in the bottom left-hand corner of the website. In the same way, the visitor to the Website may change his or her preferences regarding the use of cookies at any time, including the withdrawal of previously granted consents, without affecting the legality of the acts performed on the basis of consent before its withdrawal.
6. In terms of ensuring proper operation of the Website, cookies are used on the basis of Article 173(3)(2) of the Telecommunications Law. In the remaining scope, obtaining and storing information with the use of cookies takes place on the basis of the consent of the person visiting the Website, expressed within the framework of the cookie banner displayed during the first visit to the Website or as a result of changing the settings after clicking on the "Cookies settings" button. This consent also includes the transmission of the data collected in this way to providers of marketing and analytical tools.
7. To the extent that cookies may contain information constituting personal data, the basis for their processing is the Administrator's legitimate interest (Article 6(1)(f) RODO) in the form of, among other things, researching and analysing website traffic for statistical purposes, as well as conducting marketing activities by the Administrator or third parties. To the extent that these third parties will have direct access to such information, then the legal basis for such processing will be the legitimate interest of these third parties or a separate consent given by the visitor (e.g. within the privacy settings of a social networking site). To the extent that the information collected through cookies is necessary for the proper provision of electronic services on the Website, the basis for processing such information is Article 6(1)(b) of the DPA.
8. Depending on the purposes and legal basis for the processing of personal data, the information collected by cookies may be stored for different periods of time. Information on the storage period of the information collected by individual cookies can be found within the cookie banner displayed when you first visit the Website, as well as at any time by clicking on the "Cookies settings" button. In the event that the information collected by cookies constitutes personal data, it will be stored in principle until you object. Personal data may also be stored until the statute of limitations for claims or for the time required by law. In each case, the longer period for storing personal data shall be decisive.
9. The Website uses marketing and analytical tools of other providers who use cookies (third-party cookies) on the Website. The providers of these tools are the entities listed in the section below. For more information on the cookies of these entities, please refer to their privacy policies In the final device of the person visiting the Website, cookies from these third parties may be stored, who may be their own administrators or act as joint administrators with the Administrator.
10. The website uses marketing and analytical tools provided by the following entities, which use external cookies and similar technologies:
    • Google Ireland Limited (Google Ads, Google Analytics, Google Tag Manager, Google Merchant Center, reCaptcha, etc.). - https://business.safety.google/privacy/,
    • CookieYes - https://www.cookieyes.com/privacy-policy/,

11. Some of the above-mentioned providers may store your data outside the European Economic Area. In such situations, your data will only be transferred to countries that provide an adequate level of protection and to countries that do not provide an adequate level of protection only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.
12. The website also uses additional functions of Google Analytics (Google Analytics Advertising Functions). You can change this through the relevant settings of your browser, but also through your Google Ads preference settings.
13. The website uses Google Consent Mode in the Advanced version, so that anonymous data of website users (without cookies) is used for conversion modelling.

What rights do you have? You have a number of rights in relation to our processing of your personal data. You can exercise each of your rights by contacting us by email or letter at the address indicated in section 2 of the "Who is the controller of your personal data?" section. You are entitled to:

1. access to your personal data and the right to request rectification, erasure and restriction of processing. To the extent that the processing is based on the premise of our legitimate interest, you have the right to object to the processing of your personal data,
2. to the extent that the processing of your personal data is based on consent, you have the right to withdraw consent. The withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent prior to its withdrawal,
3. to the extent that the processing of your personal data is based on consent or contract, you also have the right to data portability, i.e. a request to receive your personal data from us, in a structured, commonly used format,
4. lodge a complaint with the President of the Office for the Protection of Personal Data (ul. Stawki 2, 00-193 Warsaw), whenever you consider that the processing of your personal data infringes your rights.

With whom do we share your personal data? Your personal data may be provided to entities entitled to obtain personal data on the basis of legal regulations, as well as to entities to whom we entrust data on the basis of contracts concerning the provision of services related to the operation of our website, e.g. hosting services, marketing services and supply of IT systems, and in the event that the processing of your data is related to the conclusion of a contract also to entities providing software for issuing accounting documents and to an accounting office. We may also transfer your personal data to providers of tools for: conducting analytical research, creating statistics, tracking traffic on our website, marketing automation. In certain cases within our website, we use Google reCAPTCHA to avoid the use of text fields by automated bots. For this reason, Google Ireland Limited may obtain information about your IP address. Some providers of services to us may store your data outside the European Economic Area. In such situations, your data will only be transferred to countries that provide an adequate level of protection and to countries that do not provide an adequate level of protection only if adequate safeguards are provided, including but not limited to standard contractual clauses adopted by the European Commission.