Privacy Policy

Data controller

The controller of personal data is MOVGRANTO sp. z o.o., with its registered office in Szczecin, ul. Władysława Łokietka 5/2, 70-254 Szczecin, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under number 0000767899, VAT ID (NIP) 5993238990, REGON 382452281 (the “Controller” or “we”). For all matters relating to the processing of personal data and the exercise of your rights, you can contact us by e-mail at kontakt@busikm.pl, by phone at 690 250 957, or by post at our registered office. We have not appointed a data protection officer - data matters are handled by the Controller.

What data we process

The scope of the data we process depends on how you use the website:

• Contact form data: your name, e-mail address and message.
• Call booking data from the Calendly calendar: your name, e-mail address, the selected time slot and any information you provide in the booking form.
• Newsletter sign-up data: e-mail address, selected language version, date of sign-up and confirmation, and information about opens of and clicks in our e-mails.
• Submission date: the timestamp of the form submission and the language version of the site it was sent from.
• Statistical data (only with your consent): pages visited, traffic source, visit duration and path, approximate location (country, city), device, operating system and browser type, and Google Analytics cookie identifiers.
• Technical data: IP address, browser and device information, and server logs recorded automatically by the hosting infrastructure to ensure the security and correct operation of the site.
• NEXT_LOCALE cookie and browser local storage (localStorage): remembering the language version you selected and your cookie choice.

Purposes and legal bases

We process your data for the following purposes and on the following legal bases under the GDPR:

• Handling an enquiry sent through the contact form - taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Scheduling and holding an online call booked in the Calendly calendar (Google Meet) - taking steps at your request prior to entering into a contract (Art. 6(1)(b) GDPR).
• Contacting you by e-mail or phone in response to your enquiry - our legitimate interest in communicating with a person interested in our services (Art. 6(1)(f) GDPR).
• Visit statistics and analysis of how the website is used (Google Analytics) - your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via the “Cookie settings” link in the footer.
• Sending the newsletter with content from the MOVGRANTO blog - your consent given when signing up and confirmed by clicking the link in the confirmation e-mail (Art. 6(1)(a) GDPR), which you can withdraw at any time.
• Establishing, pursuing or defending against claims - our legitimate interest (Art. 6(1)(f) GDPR).
• Meeting legal obligations, including accounting and tax obligations, if a contract is concluded - compliance with a legal obligation of the Controller (Art. 6(1)(c) GDPR).
• Ensuring the security and correct operation of the website - our legitimate interest (Art. 6(1)(f) GDPR).

Retention period

We keep data no longer than necessary for the purposes for which it was collected:

• Data from enquiries that did not result in a contract - until the enquiry is handled, and then until any claims become time-barred.
• Data related to a concluded contract - for the duration of its performance and for the period required by law, including tax and accounting rules.
• Technical data and logs - for the period resulting from the configuration of our infrastructure providers, as necessary for security and diagnostics.
• Statistical data in Google Analytics - for 14 months from collection; Google Analytics cookies expire after 2 years at most, and we remove them from your browser when you withdraw consent.
• Newsletter subscriber data - until you unsubscribe or withdraw your consent, and afterwards for the period necessary to demonstrate that consent was given (e.g. in case of claims).

Recipients and processors

We do not sell your data. We entrust it only to trusted providers who process it on our behalf under data processing agreements, to the extent necessary to deliver their services:

• Google Ireland Ltd. / Google LLC - the Firebase (Firestore) service, where form submissions are stored.
• Google Ireland Ltd. / Google LLC - the Google Analytics 4 service (visit statistics), only with your consent.
• Resend (Plink SaaS, Inc.) - the e-mail delivery service used to notify us of a new submission.
• Sendinblue SAS (Brevo), France - newsletter delivery and subscriber list management.
• Calendly LLC - the meeting scheduling tool embedded in the contact section of the website.
• Google Ireland Ltd. / Google LLC - the Google Meet service used to hold booked calls.
• Vercel Inc. - the hosting and infrastructure provider on which the website runs.
• E-mail and office tool providers - for correspondence and handling of enquiries.
• Competent public authorities - only where disclosure is required by applicable law.

Transfers outside the EEA

Some of our providers (including Vercel, Resend, Google and Calendly) may process data on servers located outside the European Economic Area, including in the United States. In such cases, the transfer takes place on the basis of appropriate safeguards provided for in the GDPR - Standard Contractual Clauses approved by the European Commission (Art. 46 GDPR) or an adequacy decision, including the EU-US Data Privacy Framework. You can obtain a copy of the safeguards by contacting us.

Your rights

In connection with the processing of your data, you have the following rights. To exercise them, contact us at kontakt@busikm.pl.

• the right to access your data and obtain a copy of it,
• the right to rectify (correct) your data,
• the right to erasure (“the right to be forgotten”),
• the right to restrict processing,
• the right to data portability,
• the right to object to processing based on our legitimate interest,
• the right to withdraw consent at any time - without affecting the lawfulness of processing carried out before its withdrawal,
• the right to unsubscribe from the newsletter at any time - via the “Unsubscribe” link in the footer of every e-mail or by writing to kontakt@busikm.pl,
• the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).

Voluntary provision of data

Providing data is voluntary; however, providing your name, e-mail address and message is necessary to respond to your enquiry. Failure to provide this data will make it impossible for us to handle your request.

Automated decisions and profiling

Your data is not used for automated decision-making, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

Cookies

The website limits the use of cookies and similar technologies to the necessary minimum:

• Essential (technical) - enable the website to work correctly; among other things, we store the NEXT_LOCALE cookie with your selected language and your cookie choice (localStorage).
• Analytics (Google Analytics: _ga, _ga_<identifier>) - set only after you click “Accept” in the banner, valid for up to 2 years. You can change your choice at any time via the “Cookie settings” link in the footer; when you withdraw consent, we remove these cookies.
• Calendly cookies - set by the embedded booking calendar (calendly.com domain) according to the choice you make in the Calendly banner shown inside the calendar.
• Embedded YouTube videos - on blog pages the player is loaded from the youtube-nocookie.com domain; Google (YouTube) may set its own cookies in line with its privacy policy.
• Marketing and advertising - we do not use them.

Data security

We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or destruction - including encryption of transmission (HTTPS), restricted access to data, and the use of reputable providers offering a high level of security. Only authorised persons have access to submissions.

Changes to this policy

This policy may be updated periodically, e.g. in connection with the development of the website or changes in the law. The current version is always available on this page, and the date of the last update is shown at the top.