Transparency & Security

Privacy Policy

GDPR-compliant document  ·  Updated: 16.06.2026

This Privacy Policy describes the principles of collecting, processing, and protecting personal data of users of the mastermedia.net.pl website, operated by MasterMedia IT. This document was prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

01

Personal Data Controller

The personal data controller is:

CompanyMasterMedia IT
Addressul. Przykładowa 1, 00-000 Warszawa

For matters related to personal data protection, you may contact us directly at the email address above.

02

What Data We Collect

We only collect data necessary for the provision of services and customer support. Depending on how you use the website, this may include:

  • Contact data — name, surname, email address, phone number (voluntarily provided via the contact form).
  • Company data — company name, tax number, registered address (for quote enquiries).
  • Technical data — IP address, browser type, operating system, visit time, pages viewed (automatically collected by the server and analytics tools).
  • Cookies — session identifiers and user preferences (see section 7).

We do not collect sensitive data (Art. 9 GDPR) or data of children under 16.

03

Purposes and Legal Bases for Processing

Purpose of processing Legal basis (GDPR)
Responding to a contact enquiryArt. 6(1)(b) — performance of a contract / steps prior to entering into a contract
Performing an IT services contractArt. 6(1)(b) — performance of a contract
Issuing invoices and accounting documentationArt. 6(1)(c) — legal obligation
Marketing of own services (with consent)Art. 6(1)(a) — consent
Traffic analysis and website optimisationArt. 6(1)(f) — legitimate interest
Pursuing or defending legal claimsArt. 6(1)(f) — legitimate interest
04

Data Retention Period

  • Contact form data — for the time necessary to handle the enquiry, then until the limitation period for any claims expires (max. 3 years).
  • Contractual and invoice data — for 5 years from the end of the tax year in which the tax obligation arose (as required by tax law).
  • Marketing data — until consent is withdrawn or an objection is filed.
  • Analytical data / server logs — for 12 months from the date the event was recorded.
05

Recipients of Data

Personal data may be transferred only to trusted processors with whom the Controller has concluded appropriate data processing agreements (Art. 28 GDPR), including:

  • Hosting and server infrastructure providers.
  • Email and CRM software providers.
  • Accounting firm (in the scope of invoice data).
  • Internet analytics tools (e.g. Google Analytics — anonymised data).

We do not sell or share personal data with third parties for marketing purposes without the user's express consent. Data is not transferred to third countries outside the EEA, except for tools that apply standard contractual clauses approved by the European Commission.

06

User Rights

Under the GDPR, you have the following rights:

Right of access — you may request information about what data we process.
Right to rectification — you may request correction of inaccurate or incomplete data.
Right to erasure — you may request deletion of data ("right to be forgotten") when there is no basis for further processing.
Right to restriction of processing — you may request suspension of processing in certain cases.
Right to data portability — you may receive your data in a machine-readable format.
Right to object — you may object to processing based on legitimate interest, including direct marketing.
Right to withdraw consent — if processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
Right to lodge a complaint — you have the right to lodge a complaint with the supervisory authority — President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

To exercise any of the above rights, please contact us at: kontakt@mastermedia.net.pl. We will respond to your request within 30 days.

07

Cookies

The website uses cookies — small text files stored on the user's device. We use the following cookie categories:

Category Description Duration
EssentialEnsure correct website operation (session, theme preferences). No consent required.Session / 1 year
AnalyticsGoogle Analytics — anonymous traffic analysis to improve website quality.Up to 2 years
FunctionalRemembering user choices (e.g. dark/light mode).1 year

You can control cookies through your browser settings. Disabling essential cookies may affect website functionality. More information on managing cookies can be found in your browser's help section.

08

Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction. Security measures in place include:

  • Data transmission encryption using TLS/SSL (HTTPS) protocol.
  • Access control to personal data processing systems — principle of least privilege.
  • Regular data backups.
  • Monitoring and security auditing of IT infrastructure.
  • Staff training in personal data protection.

In the event of a data breach that could result in a risk to the rights or freedoms of individuals, the Controller will notify the relevant supervisory authority within 72 hours (Art. 33 GDPR), and if the risk is high — will also inform the data subjects (Art. 34 GDPR).

09

Links to External Websites

The website may contain links to external websites. MasterMedia IT is not responsible for the privacy policies or content of those websites. We recommend reviewing the privacy policy of each external website you visit.

10

Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy. Users will be informed of material changes by publishing the updated document on the website along with a new update date. Continued use of the website after the publication of changes constitutes acceptance thereof.

The current version of this Privacy Policy has been in effect since 16.06.2026.

Have questions about personal data protection?

Write to us