Privacy Policy

Last updated: January 2025

1. Data Controller

The data controller responsible for your personal data is MJ Instal sp. z o.o., a company registered in Poland and operating in Belgium, providing industrial installation, plumbing, HVAC, welding and pipework services (hereinafter referred to as "MJ Instal", "we", "us" or "our").

You may contact us regarding any data-related matter by using the contact form on our website or by visiting the Contact page.

2. What Data We Collect

When you use our website or contact us, we may collect the following categories of personal data:

  • Contact information: name, email address, telephone number.
  • Message content: the content of enquiries submitted via the contact form.
  • Technical data: IP address, browser type, operating system, referral URL, and pages visited (collected via server logs or analytics tools, if enabled).
  • Cookie data: cookie consent preferences stored locally in your browser. See Section 7 for details.

We do not collect special categories of personal data (sensitive data) as defined by Article 9 of the GDPR.

3. Legal Basis for Processing

We process your personal data on the following legal grounds:

  • Performance of a contract / pre-contractual steps (Article 6(1)(b) GDPR): when you contact us to request a quote or discuss a project.
  • Legitimate interests (Article 6(1)(f) GDPR): for website security, fraud prevention, and improving our services.
  • Consent (Article 6(1)(a) GDPR): for optional cookies (analytics, marketing), where you have explicitly consented via our cookie consent banner.
  • Legal obligation (Article 6(1)(c) GDPR): where we are required to retain data by law.

4. How We Use Your Data

We use the personal data we collect to:

  • Respond to enquiries and provide requested information or quotations.
  • Communicate with you about ongoing or potential projects.
  • Maintain the security and performance of our website.
  • Comply with applicable laws and regulations.

We will not use your data for automated decision-making or profiling as defined in Article 22 of the GDPR.

5. Data Sharing

We do not sell, trade or otherwise transfer your personal data to third parties for marketing purposes. We may share your data with:

  • Service providers: hosting, IT support, or email delivery providers who process data on our behalf under binding data processing agreements.
  • Legal authorities: where required by law, court order, or to protect our legal rights.

Any data transfers outside the European Economic Area (EEA) are conducted in compliance with Chapter V of the GDPR.

6. Data Retention

We retain personal data only as long as necessary for the purposes described in this policy, or as required by applicable law. Specifically:

  • Contact enquiry data: up to 3 years from the date of last contact.
  • Contractual data: as required by Polish and Belgian accounting and commercial law (typically 5–10 years).
  • Cookie consent records: 180 days.

7. Cookies

Our website uses cookies — small text files stored in your browser. We use only necessary cookies by default. Optional cookies (analytics, marketing) are only activated if you provide consent via our cookie consent banner.

You can withdraw or adjust your cookie preferences at any time by clicking the cookie settings button available on this site, or by clearing your browser cookies.

Clearing your browser cookies constitutes withdrawal of consent as provided under Article 7(3) of the GDPR.

8. Your Rights

Under the GDPR, you have the following rights:

  • Right of access (Art. 15): obtain a copy of your personal data we hold.
  • Right to rectification (Art. 16): request correction of inaccurate data.
  • Right to erasure (Art. 17): request deletion of your data ("right to be forgotten").
  • Right to restriction of processing (Art. 18): request that we limit how we use your data.
  • Right to data portability (Art. 20): receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): object to processing based on legitimate interests.
  • Right to withdraw consent (Art. 7(3)): withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us via the Contact page. We will respond within 30 days. You also have the right to lodge a complaint with the relevant supervisory authority — in Poland: the President of the Personal Data Protection Office (UODO); in Belgium: the Data Protection Authority (APD/GBA).

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration or destruction. However, no transmission over the internet can be guaranteed to be completely secure.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make significant changes, we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.

11. Contact

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us via the Contact page.