This Privacy Statement is provided by MakoLab S.A, also referred to in this document as ‘MakoLab’, ‘we’, ‘us’ and ‘our’. It sets out the rules for downloading, processing and protecting the personal data collected from you while you are using the content and functions of any MakoLab website.
Data processing in relation to products or services purchased from MakoLab S.A. is regulated by separate procedures and agreements.
We declare that we make every effort to ensure the proper security for the data we collect and we undertake measures to prevent third parties from interfering with personal data and the privacy of the people the data pertains to. The personal data you transmit to us will be used for the purposes set out in this document.
We ask you to read this Privacy Statement carefully before using our websites and before providing any data. Any visitor who does not consent to the collection, use and disclosure of their data as set out in this statement and in any generally applicable legal provisions is requested to stop using MakoLab S.A.’s websites.
You can contact us directly by email or via our websites in order to obtain information about our company and services and to listen to or view specific information without needing to provide any personal data. Irrespective of this, circumstances may arise where your personal data will be essential to the provision of the service or process required. In such cases, you will be notified of the need to provide the relevant data and of the way they will be used and, at the same time, you will be able to decide whether to provide them or refuse to do so.
You may be required to provide your personal information:
You may then be asked to complete and send a form or questionnaire where the kind of personal data being collected will be clearly indicated. The form will also inform you as to whether your personal data will be disclosed to third parties collaborating with MakoLab S.A.
In a situation where the data you provide on a form or questionnaire is disclosed to a third party collaborating with us and you were previously notified of this, MakoLab S.A. considers you to have granted the relevant permission to disclose the data to the party in question.
The data you provide in this way are used by us solely for the purpose of performing a service, carrying out a process or arranging your participation in an event, as requested.
For the purposes of this statement, the following definitions shall apply:
1. ‘MakoLab’s’, ‘a MakoLab’ or ‘our’ website(s): a website or websites run by MakoLab S.A. or on behalf of MakoLab and our units around the world;
2. Data Controller, also referred to in this statement as ‘the controller’: as defined in the General Data Protection Regulation (GDPR; see definition 4 below), the person who determines the purposes for which, and the means by which, personal data is processed;
3. Cookies: small text files which are placed on your computer hard drive or your mobile device when you visit a MakoLab website;
4. Google Analytics: software making it possible to track traffic on a website and monitor marketing activities;
5. GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation), Official Journal of the European Union, L119, volume 59, 4 May 2016;
6. Data subject: a person whose personal data is collected, processed and stored.
2. Our Personal Data Controller
The controller of the personal data we collect is MakoLab S.A. The company’s registered office address is ulica Ogrodowa 8, 91-062 Łódź and it is entered into the National Court Register administered by the 20th Department of the National Court Register, the District Court for Łódź-Śródmieście, under the number KRS 0000289179.
For matters concerning the protection of your personal data and in order to exercise your rights, you can contact us by e-mail at firstname.lastname@example.org or by writing to us at our registered office.
3. Why we process your personal data and the legal basis for doing so
In order to provide services in line with our business profile, we process your personal data for various purposes, but always lawfully. Below are the details of why we process your data, which data we process and the legal basis in each case:
3.1 In order to send you our commercial, marketing and promotional materials, we process the following personal data:
We do not send unsolicited information. The abovementioned materials are only sent to recipients who have expressed their interest in receiving them.
The legal basis for this processing is Article 6, item 1(a) of the GDPR, which permits the processing of personal data if the data subject has given their consent.
3.2 In order to enable you to repost an article published on one of our websites on a social media account which you run, we process the following personal data:
The legal basis for this processing is Article 6, item 1(a) of the GDPR, which permits the processing of personal data if the data subject has given their consent. In this case, when you repost an article published on our website, we simultaneously accept this as your consent to the processing of your personal data.
3.3 In order to establish the price of a service or services and in order to carry the service/services out, we process the following data:
The legal basis for this processing is Article 6, item 1(b) of the GDPR, which permits the processing of personal data if it “is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”. If you also decide to provide your own data, then we consider you to have given your consent to the processing of that, as well. The basis for that processing is Article 6, item 1(a) of the GDPR, which permits the processing of personal data if the data subject has given their consent. Moreover, inasmuch as we are obliged to comply with the tax laws, the legal basis for this processing is also Article 6, item 1(c) of the GDPR, which permits the processing of personal data if it “is necessary for compliance with a legal obligation to which the controller is subject”.
3.4 For analytical purposes, in other words, studying and analysing activity on a website belonging to MakoLab, we process the following data:
The legal basis for this processing is Article 6, item 1(f) of the GDPR, which permits the processing of personal data if it “is necessary for the purposes of legitimate interests pursued by the controller”. Here, it is in MakoLab’s interests to study client and other visitor activity on our websites. Additionally, in accordance with this document, by using our website you consent to the processing by MakoLab S.A. data entered into this website by the mere fact of using it. Therefore, the legal basis for this processing is also Article 6, item 1(a) of the GDPR, which permits the processing of personal data if the data subject has given their consent.
3.6 In order to administer our websites, we process the following personal data:
These data are automatically registered in the server logs every time one of our websites is used. It would be impossible to administer the websites without using a server and without this automatic registration. The legal basis for this processing is Article 6, item 1(f) of the GDPR, which permits the processing of personal data if it “is necessary for the purposes of legitimate interests pursued by the controller”. Here, it is in MakoLab’s interests to administer our websites.
3.7 In order to create registers and records relating to the GDPR, including registers of clients who have lodged objections, as provided for by the regulation, we process the following data:
We do this for two reasons. First, the provisions of the GDPR impose specific documentary obligations in order for us to be able to demonstrate our conformity and accountability. Second, if you, for instance, refuse to accept the processing of your data for marketing purposes, we need to know that we should not use direct marketing in your case because you do not wish us to. The legal basis for this processing is twofold. First, there is Article 6, item 1(c) of the GDPR, which permits the processing of personal data if it “is necessary for compliance [with] a legal obligation to which the controller is subject”. Second, there is Article 6, item 1(f) of the GDPR, which permits the processing of personal data if it “is necessary for the purposes of legitimate interests pursued by the controller”. In this case, it is in MakoLab’s interests to know about people who are exercising their rights as provided for in the GDPR.
We use the following types of cookie on our websites:
Cookies are not used to process or store personal data. They cannot help anyone to identify you directly and they make no changes to the configurations of browsers, computers and mobile devices.
You can opt out of cookies by installing the following plug-in:
Cookies do not modify the other data on your computer hard drive or mobile device in any way whatsoever and they have no effect on the proper functioning of your operating system.
5. The right to withdraw your consent
5.1 Just as the processing of your personal data occurs on the basis of your consent, so you can withdraw that consent at any time.
5.2 If you wish to withdraw your consent to the processing of your data, then all you need do is send an e-mail to us directly at email@example.com.
5.3 If your personal data has been processed on the basis of your consent, then the withdrawal of that consent does not mean that the processing of your personal data prior to that has been illegal. In other words, we have the right to process your data until you withdraw your consent and its revocation has no effect on the lawfulness of the processing before that time.
6. Essential provision of personal data
6.1 The provision of any personal data whatsoever is voluntary and depends on your decision to do so. However, in some cases, it is essential that you provide specific personal data in order for us to meet your expectations when you use our services.
6.2 In order for a contract to be fulfilled, you need to provide all the data required by the contract laws and tax laws, which is to say, your given name and surname or the company name, your address or the company's registered address and the relevant tax ID or VAT number. Without this information, we will not be able to fulfil a contract.
6.3 In order for us to be able to contact you about matters connected with performing a service, it is essential that you provide us with the necessary contact data.
7. Automated decision-making and profiling
We are pleased to inform you that we do not use automated decision-making or profiling.
8. Personal data recipients
8.1 Like most businesses, we avail ourselves of assistance from other companies. On many occasions, this involves the necessity of transmitting personal data to them. In this respect, as and when required, we transmit your personal data to companies providing accountancy or legal support, marketing, web hosting, IT support and website analysis services.
8.2 In addition, it may happen that, on the basis of the applicable laws or a decision made by the competent authorities, it will be necessary for us to transmit your personal data to other organisations, public or private, as well. It is therefore extremely difficult for us to foresee who might require personal data to be made available to them. Nonetheless, we give you our assurance that, on our part, we analyse every single request of that kind very carefully and very thoroughly in order to avoid unintentionally transmitting any information to an unauthorised person.
9. Transmitting personal data to third countries
9.1 We are one of the many businesses who use a range of the popular services and technologies offered by companies like Facebook, Microsoft and Google, which have their registered offices outside the European Union. As such, they are considered to be third countries under the provisions of the GDPR.
9.2 The GDPR introduces certain limitations to the onward transmission of personal data to third countries because, given that the principles of the European regulations are not applicable there, the protection of European citizens’ personal data may, unfortunately, be insufficient. The controller is therefore obliged to establish the legal basis for any such transmission.
9.3 For our part, we give you our assurance that, when we use services and technologies of this kind, we only transmit personal data to organisations in the European Economic Community.
9.4 Should you be concerned about the onward transmission of your personal data, we will provide you with additional explanations and details at any time.
9.5 You have the right to receive a copy of any of your personal data which has been transmitted to a third country.
10. Personal data processing period
10.1 In accordance with the law, we do not process your data for ‘all eternity’, but only for the period when they are necessary to achieve a defined purpose. After that, they are irreversibly deleted or destroyed.
10.2 The specific periods for processing your personal data are as follows:
10.3 In order to streamline the process of deleting or destroying personal data, we calculate the yearly periods from the end of the year in which we began processing the data. Calculating the time periods on the basis of each separate contract we enter into would involve not only significant organisational and technical difficulties, but also considerable financial outlay. Establishing one date for deleting or destroying personal data enables us to manage the process effectively. However, should you wish to exercise your right to be forgotten, then we will, of course, consider the situation on an individual basis.
10.4 The ‘plus one year’ for the processing of personal data collected for the purpose of fulfilling a contract is dictated by the fact that you might, hypothetically, lodge a claim directly before the expiry date and it might be delivered after a considerable delay or you could make a mistake concerning the expiry date.
11. The rights of data subjects
11.1 You have the following rights:
11.2 We respect your rights, as enshrined in the regulations on personal data protection and we make every effort to implement them to the greatest possible extent.
11.3 We would like to point out that the rights in question are not absolute and we may thus legally refuse to fulfil them in certain situations. However, if we do deny your request, it will only be after thorough analysis and in circumstances where our refusal is necessary.
11.4 We would like to make it clear that you have the right to object, at any time and in respect of your personal situation, to the processing of your personal data on the basis of legitimate interests pursued by the controller. However, please remember that, in accordance with the regulations, we can reject your objection if we can demonstrate that:
11.5 In addition, you can object to the processing of your personal data for marketing purposes at any time. If you do, then once we receive your objection, we will stop the processing for that purpose.
11.6 You can exercise your rights by sending an e-mail to us directly at firstname.lastname@example.org.
12. The right to lodge a complaint
If you believe that your personal data are not being processed lawfully, you can lodge a complaint with the President of the Personal Data Protection Office (PDPO). To find out more about the PDPO, please see https://uodo.gov.pl/en.
13. Links to the websites of other companies and organisations.
Our websites may contain links to the websites of other businesses or organisations. MakoLab S.A. shall not be liable for the procedures and mechanisms used in those businesses and/or organisations for the protection of personal data and the content of their websites.
14. Final provisions
As the owner of this privacy statement, MakoLab S.A. reserves the right to change it entirely or partially. New provisions come into force as soon as the statement is published on MakoLab S.A.’s websites. The consent given by you, the user, in accordance with the content of this document, constitutes consent given to MakoLab S.A.