Dear Sir or Madam,
Please be informed that when contacting us by phone or electronically, including via the contact form, any data you provide may be processed. Below you will find detailed information regarding the processing of your personal data.

1. General Information

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR), we inform you that the controller of your personal data is
ME Polska Sp. z o.o., with its registered office in Kraków, entered into the Register of Entrepreneurs maintained by the District Court for Kraków-Śródmieście in Kraków, 11th Commercial Division of the National Court Register under KRS number: 0000044716, NIP: 6781006376, REGON: 350774561.
You can contact the controller at the following email address: me@me.com.pl.

2. Purposes and Legal Bases for Personal Data Processing

Personal data will be processed for the following purposes:

• to respond to inquiries and conduct correspondence – Article 6(1)(f) GDPR;

• to conclude and perform a contract – Article 6(1)(b) GDPR;

• to fulfill legal obligations – Article 6(1)(c) GDPR;

• for the establishment, exercise, or defense of legal claims and archiving – Article 6(1)(f) GDPR;

• on the basis of consent – Article 6(1)(a) GDPR.

3. Recipients of Personal Data

Data may be transferred to entities processing it on behalf of the controller, such as IT service providers, courier companies, postal operators, technical equipment suppliers, and service subcontractors.

4. Source of Data

In the case of representatives, employees, and associates of clients, personal data may be obtained from the employer or principal who is a party to the contract with the controller.

5. Data Retention Period

Personal data will be retained for the period necessary to achieve the purposes of the processing, no longer than required by law, and in the case of processing based on consent – until consent is withdrawn.
Video surveillance data is stored for up to 15 days, unless it constitutes evidence in legal proceedings.

6. Rights of Data Subjects

You have the right to: access your data, rectify it, erase it, restrict its processing, transfer your data, object to processing, and lodge a complaint with the President of the Personal Data Protection Office.

7. Obligation to Provide Personal Data

Providing personal data may be necessary to conclude or perform a contract or to respond to an inquiry. In other cases, providing data is voluntary but may be required to use certain services.

8. Automated Decision-Making

Personal data will not be used for automated decision-making, including profiling.

9. Processing of Client Representatives’, Employees’ and Associates’ Data

The personal data of client representatives, employees, and associates is processed in connection with the conclusion or performance of a contract with the client. This data includes name, surname, job title, and contact details provided by the employer or principal who is a party to the contract with the controller.
The legal basis for data processing is the legitimate interest of the controller and the client (Article 6(1)(f) GDPR), which is the performance of the contract and professional communication related to its execution.
Providing data is required for the proper performance of the contract. Data will be processed for the duration of the contract and the limitation period for claims.
Data may be shared with entities providing services to the controller, such as IT service providers, courier companies, and other service providers involved in the performance of the contract.

10. Processing of Visitors’ Personal Data

In the case of visits to the premises of ME Polska Sp. z o.o., visitors’ personal data, including identification data and image recorded by the video surveillance system, is processed to ensure security, protect property, and verify individuals entering the premises.
Processing is based on Article 6(1)(f) GDPR – the legitimate interest of the controller.
Surveillance recordings are stored for 15 days unless they serve as evidence in legal proceedings. Data may be shared with technical and security service providers.
Providing such data is voluntary, but necessary to enter the company’s premises.