Privacy and Cookies Policy
1. General information
This Privacy and Cookies Policy sets out the rules for the processing of personal data and the use of cookies on the website available at: metib.co/uk
The controller of personal data is:
METIB Sp. z o.o.
ul. Ślężna 148
53-111 Wrocław
Poland
e-mail: info@metib.co
Hereinafter referred to as the Controller or the Operator.
The Controller processes personal data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council, known as the GDPR.
You can contact the Controller regarding personal data protection matters at: info@metib.co.
2. What data may be processed
In connection with the use of the Website, the Controller may process the following data:
- data provided voluntarily by the user, in particular:
- first and last name,
- e-mail address,
- phone number,
- company name,
- message content,
- other data voluntarily provided in the contact form or by e-mail;
- technical data related to the use of the Website, in particular:
- IP address,
- date and time of visit,
- device type,
- browser type and version,
- operating system,
- visited subpages,
- source of entry to the Website,
- data stored in cookies.
3. Purposes and legal bases of data processing
Users’ personal data may be processed for the following purposes:
3.1. Handling enquiries submitted via the contact form or e-mail
Data is processed in order to respond to an enquiry, conduct correspondence and provide information regarding the Controller’s activities or offer.
The legal basis for processing is the legitimate interest of the Controller, pursuant to Article 6(1)(f) GDPR, consisting in handling enquiries and communicating with persons interested in the Controller’s activities.
If the contact is aimed at concluding a contract or relates to the performance of a contract, the legal basis for processing may also be Article 6(1)(b) GDPR.
3.2. Presentation of the Controller’s offer and business information
Data may be processed in order to present information about the Controller’s services, projects, completed works, events or business activities.
The legal basis for processing is the legitimate interest of the Controller, pursuant to Article 6(1)(f) GDPR.
3.3. Web analytics
The Controller uses Google Analytics to compile statistics, analyse website traffic, check traffic sources, evaluate the effectiveness of published content and improve the operation of the Website.
The legal basis for processing data in the scope of analytical cookies is the user’s consent, pursuant to Article 6(1)(a) GDPR.
The user may change or withdraw consent to the use of analytical cookies at any time.
3.4. Ensuring the security and proper operation of the Website
Technical data, including server logs, may be processed to ensure the security of the Website, detect misuse, diagnose technical errors and ensure the proper operation of the Website.
The legal basis for processing is the legitimate interest of the Controller, pursuant to Article 6(1)(f) GDPR.
3.5. Establishing, pursuing or defending claims
Data may be processed in order to establish, pursue or defend potential claims.
The legal basis for processing is the legitimate interest of the Controller, pursuant to Article 6(1)(f) GDPR.
4. Contact forms
The Website may allow users to contact the Controller using contact forms.
Data provided in a form is processed only to the extent necessary to handle the enquiry, prepare a response, conduct further correspondence or fulfil the purpose indicated next to the relevant form.
Providing data is voluntary, but it may be necessary to receive a response or use a given Website functionality.
The Controller may record technical information related to submitting a form, such as the date and time of sending the message, IP address and browser information, in order to ensure security and protect against misuse.
5. Newsletter
If the user subscribes to the newsletter, their data will be processed in order to send information, updates, expert materials or communications related to the Controller’s activities.
The legal basis for processing is the user’s consent, pursuant to Article 6(1)(a) GDPR.
The user may withdraw consent to receive the newsletter at any time by using the unsubscribe link included in the message or by contacting the Controller at: info@metib.co.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
6. Hosting and server logs
The Website is hosted on servers provided by: cyberFolks.pl.
The hosting provider may process technical data related to the operation of the Website, in particular server logs.
The logs may include, among others:
- user’s IP address,
- date and time of the request,
- URL of the visited page or resource,
- browser and operating system information,
- URL of the page from which the user accessed the Website,
- information about technical errors,
- diagnostic information related to the operation of the Website.
This data is used to administer the Website, ensure its security, diagnose errors and protect against misuse.
7. Google Analytics
The Website uses Google Analytics, provided by Google Ireland Limited.
Google Analytics helps the Controller analyse how users use the Website, measure website traffic, check traffic sources, analyse the popularity of content and improve website functionality.
In connection with the use of Google Analytics, information concerning the user’s activity on the Website may be processed, in particular:
- visited subpages,
- time spent on the Website,
- source of entry to the Website,
- device type,
- browser type,
- approximate location,
- online identifiers,
- data stored in cookies.
Google Analytics may use cookies or similar technologies. Analytical cookies are used only after obtaining the user’s consent, where such consent is required by applicable law.
The user may change or withdraw consent to the use of analytical cookies at any time in the cookie settings available on the Website.
More information about Google’s data processing rules can be found in Google’s Privacy Policy.
8. No remarketing tools
The Controller does not currently use remarketing tools such as Meta Pixel, LinkedIn Insight Tag or Google Ads remarketing.
The Website does not currently use marketing cookies intended to target ads at users who have previously visited the Website.
If the Controller decides to implement advertising or remarketing tools in the future, this Privacy Policy will be updated accordingly, and the user will be given the option to give or refuse consent to such activities, where consent is required by applicable law.
9. Cookies
The Website uses cookies.
Cookies are small text files stored on the user’s end device, such as a computer, tablet or phone. Cookies may contain information necessary for the proper operation of the Website, remembering user preferences, compiling statistics or performing other Website functions.
Cookies may be placed on the user’s device and accessed by the Controller or an external provider of an analytical tool, in particular Google Ireland Limited in connection with the use of Google Analytics.
10. Types of cookies used on the Website
The Website may use the following types of cookies:
10.1. Necessary cookies
Necessary cookies are required for the proper operation of the Website, ensuring security, handling forms, remembering privacy settings or maintaining basic website functions.
These cookies may be used without the user’s consent, as they are necessary to provide the electronic service.
10.2. Analytical cookies
Analytical cookies make it possible to analyse how the Website is used, measure the number of visits, check traffic sources and improve the operation of the Website.
Analytical cookies are used after obtaining the user’s consent.
On the Website, analytical cookies may be used in connection with Google Analytics.
11. Managing cookie consents
During the first visit to the Website, the user may see a cookie banner allowing them to manage consents.
The user may:
- accept analytical cookies,
- reject analytical cookies,
- change cookie settings.
Consent to analytical cookies is voluntary. Lack of consent does not prevent the use of the basic functions of the Website.
The user may also manage cookies through the settings of their web browser. Limiting or disabling cookies may affect the operation of some Website functions.
12. Data retention period
Personal data is stored for the period necessary to fulfil the purpose for which it was collected.
In particular:
- data submitted via the contact form is stored for the period necessary to handle the enquiry and conduct correspondence, and then for the period necessary to secure potential claims;
- data processed on the basis of consent is stored until the consent is withdrawn, unless further storage is required or justified by another legal basis;
- technical data and server logs are stored for the period necessary to ensure the security and proper operation of the Website;
- data related to establishing, pursuing or defending claims may be stored until the limitation period for such claims expires.
Data processed by Google Analytics is stored in accordance with the settings configured in Google Analytics and Google’s data processing rules.
13. Data recipients
Users’ personal data may be transferred to entities that support the Controller in operating the Website and conducting business activity.
Data recipients may include in particular:
- hosting provider,
- IT service providers,
- e-mail system providers,
- analytical tool providers, in particular Google Ireland Limited,
- providers of tools used to handle forms,
- entities providing advisory, legal, accounting or administrative services,
- authorised employees and associates of the Controller.
Data is transferred only to the extent necessary to achieve specific processing purposes.
14. Transfer of data outside the European Economic Area
In connection with the use of Google Analytics, users’ data may be transferred outside the European Economic Area, in particular to the United States.
In such cases, the transfer of data takes place using appropriate mechanisms provided for in personal data protection regulations, in particular adequacy decisions, standard contractual clauses or other appropriate safeguards.
15. User rights
The user has the following rights related to the processing of personal data:
- the right of access to data,
- the right to receive a copy of data,
- the right to rectify data,
- the right to erase data,
- the right to restrict processing,
- the right to data portability,
- the right to object to data processing,
- the right to withdraw consent at any time, where data is processed on the basis of consent.
Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise these rights, the user may contact the Controller at: info@metib.co.
The user also has the right to lodge a complaint with the President of the Personal Data Protection Office.
16. Voluntary provision of data
Providing personal data is voluntary, but it may be necessary to use certain Website functions, in particular to submit a contact form, receive a response or subscribe to the newsletter.
Failure to provide data may make it impossible to fulfil a given purpose.
17. Profiling and automated decision-making
The Controller does not make decisions concerning users based solely on automated processing that would produce legal effects concerning them or similarly significantly affect them.
The Controller does not currently conduct remarketing activities or marketing profiling using advertising tools such as Meta Pixel, LinkedIn Insight Tag or Google Ads remarketing.
18. Data protection measures
The Controller applies technical and organisational measures aimed at protecting personal data against loss, unauthorised access, disclosure, alteration or destruction.
In particular, the Controller may use:
- data transmission encryption using an SSL certificate,
- access protection for administrative systems,
- regular software updates,
- backups,
- limiting access to data only to authorised persons,
- solutions increasing the security of the Website.
19. Changes to the Privacy Policy
The Controller may update this Privacy and Cookies Policy, in particular in the event of changes in law, technological changes, changes to tools used on the Website or changes in the manner of data processing.
The current version of the Policy is always available on the Website.