Privacy Policy

1. Who we are - Masiyo is the data controller for personal data collected through this website.

The data controller is Masiyo, operating from Michała Bałuckiego 10, Wrocław, Poland. Contact email for data protection matters: [email protected]. Contact phone: +48 71 780 46 22.

Masiyo operates masiyo.info as an informational editorial portal. No commercial transactions take place on this website. No products or services are sold.

2. What data we collect - We collect only data you voluntarily provide and basic technical data from your browser.

We may collect the following categories of personal data:

Data you provide directly: When you use the contact form on this website, you may submit your name, email address, phone number, and the content of your message. This data is transmitted via your email client to [email protected] and is not stored in a database on our servers.

Technical data collected automatically: When you visit masiyo.info, your browser may transmit technical information including your IP address, browser type and version, operating system, referring URL, pages visited, and time and date of visit. This data is processed by any analytics tools we operate (subject to your cookie consent) and by our web hosting provider as part of standard server log processing.

Cookie data: Cookies may be set on your device as described in our Cookie Policy. The data stored in cookies depends on which categories of cookies you consent to.

We do not collect sensitive personal data (special categories of data under Article 9 GDPR) and we do not knowingly collect data from individuals under the age of 16.

3. Legal basis for processing - We process data only when we have a valid legal basis under GDPR Article 6.

The legal bases on which we process personal data are:

Article 6(1)(a) GDPR - Consent: Where you have given explicit consent, such as accepting non-essential cookies through our cookie consent tool, or submitting the contact form after ticking the privacy consent checkbox.

Article 6(1)(b) GDPR - Contractual necessity: Not applicable as no contracts are formed on this website.

Article 6(1)(f) GDPR - Legitimate interests: For processing server log data and essential technical data necessary to operate and secure the website. Our legitimate interest is the secure and functional operation of masiyo.info. This processing does not override your rights and freedoms.

Where consent is the legal basis, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

4. How we use your data - Contact form data is used only to respond to your enquiry. Technical data is used for website operation and analytics (with consent).

Data submitted through the contact form is used solely for the purpose of reading and responding to your enquiry. We do not use it for marketing, profiling, or any purpose beyond the specific communication you initiated.

Technical and analytics data (where consent is given) is used to understand how visitors use the website so that we can improve its content and structure. This data is processed in aggregate where possible.

We do not sell, rent, or otherwise transfer your personal data to third parties for their own commercial purposes.

5. Data retention - We keep data only as long as necessary for the purpose for which it was collected.

Contact form correspondence is retained in our email system for as long as it is relevant to the enquiry, and is deleted when no longer needed, typically within 24 months. Server log data is retained by our hosting provider according to their standard retention schedule, generally not exceeding 12 months. Cookie data is retained for the duration specified in our Cookie Policy.

You may request deletion of your personal data at any time by contacting [email protected].

6. Your rights under GDPR - You have the right to access, correct, delete, and port your data, and to object to or restrict its processing.

Under the GDPR and Polish data protection law, you have the following rights:

Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and, if so, a copy of that data.

Right to rectification (Article 16 GDPR): You may request correction of inaccurate personal data we hold about you.

Right to erasure (Article 17 GDPR): You may request deletion of your personal data where there is no longer a legitimate basis for processing it.

Right to restriction (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.

Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, commonly used, machine-readable format.

Right to object (Article 21 GDPR): You may object to processing based on legitimate interests at any time. We will cease such processing unless we can demonstrate compelling legitimate grounds.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time.

To exercise any of these rights, contact us at [email protected]. We will respond within one month as required by Article 12 GDPR. If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

7. Third-party services and international transfers - We may use third-party services. Any international transfers are covered by appropriate safeguards.

Our website may use third-party services including web hosting, analytics (subject to consent), and mapping services (Google Maps on the contact page). These third parties may process data in countries outside the European Economic Area. Where such transfers occur, they are protected by appropriate safeguards under Chapter V GDPR, such as Standard Contractual Clauses adopted by the European Commission.

Google Maps is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Use of the embedded map may result in data being processed by Google. Please refer to Google's privacy policy for details.

8. Security - We implement appropriate technical and organisational measures to protect your data.

We implement appropriate technical and organisational security measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, or access. These measures include HTTPS encryption for data in transit and access controls for data at rest. No method of transmission over the internet is completely secure. We cannot guarantee absolute security but we take our obligations seriously.

9. Changes to this policy - We may update this policy and will note the date of changes.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page indicates when it was last revised. Continued use of masiyo.info after a policy update constitutes acknowledgement of the revised policy. For significant changes, we will make reasonable efforts to notify users.

10. Contact for privacy matters - Write to [email protected] for any privacy-related question or request.

For any question, request, or complaint relating to this Privacy Policy or the processing of your personal data, please contact: [email protected] or by post to Michała Bałuckiego 10, Wrocław, Poland. We aim to respond to all privacy-related enquiries within 30 days.