Privacy policy

This is an English translation of our privacy policy, provided for convenience. In case of any discrepancy, the Polish version prevails.

This privacy policy (the "Policy") describes how we process information that identifies you (your "personal data") collected when you visit our website at mobi.pl (the "Website") and our social media profiles (including LinkedIn, Facebook and Instagram) owned or run by us, when you contact us through the available channels, and in connection with ordering, purchasing or using our products or starting a business relationship with us.

In particular, the Policy explains how we use personal data collected in connection with the operation of the Website. Personal data may also be processed in order to communicate with you (for example when you submit a complaint or send us an enquiry).

This Policy reflects the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (the "GDPR").

Data controller

The controller of your personal data is Mobi.pl s.c., with its registered office at ul. Toszecka 176, 44-109 Gliwice, Poland, VAT ID (NIP): PL9691616598, e-mail: biuro@mobi.pl, tel. +48 720 705 705 (the "Controller").

Processing of personal data

Purposes and legal basis of processing

The personal data you provide to us, i.e. your name, e-mail address, data published on your blog, social media profile or website that you share with us, any data included in messages you send us, and data obtained when you use our Website, i.e. server event logs (data received on the basis of the network protocol used, including the date and time of your visit, the addresses visited, the type and version of your web browser, the type and operating system of your device and your IP address), are processed, depending on the situation, for the following purposes:

• establishing, shaping the content of, amending, terminating and properly performing cooperation in the sale or marketing of products (Article 6(1)(b) GDPR);
• providing you with a product so that you can test it on your blog, social media channels or website (Article 6(1)(b) GDPR);
• collecting opinions about our products (Article 6(1)(f) GDPR);
• handling requests or enquiries you send us (Article 6(1)(b) GDPR);
• following your activity on social media, within information made publicly available (Article 6(1)(f) GDPR);
• direct marketing, including sending a newsletter with commercial information about our products and brand and news on the Website, including promotional offers, if you have given your consent (Article 6(1)(a) GDPR);
• remarketing, by collecting information about your online behaviour (so-called tracking) and analysing it automatically in order to display advertisements tailored to your likely needs and preferences, if you have given your consent (Article 6(1)(a) GDPR); more information is available in our Cookie policy;
• offering social media services, on the basis of our legitimate interest (Article 6(1)(f) GDPR) or your consent (Article 6(1)(a) GDPR);
• complying with our legal obligations, for example under accounting or tax law (Article 6(1)(c) GDPR);
• pursuing our legitimate interests (for example establishing, exercising or defending legal claims, preventing abuse or fraud, and responding to enquiries, complaints and suggestions) (Article 6(1)(f) GDPR).

Where we process your data on the basis of your consent (newsletter, direct marketing, remarketing), you may withdraw your consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

Providing data

You provide your personal data voluntarily. However, if you do not provide certain personal data (identity or address details), we may be unable to achieve the purposes described above (for example to start working with you or to reply to your message).

Retention period

We will process your data only for as long as we have a legal basis to do so, that is, depending on which applies in a given case and whichever occurs last, until:

• we are no longer under a legal obligation requiring us to process your data, or
• it is no longer possible to pursue claims relating to a contract between us, or
• you withdraw your consent to the processing of your personal data, where the processing was based on your consent (newsletter, direct marketing, remarketing), or
• your objection to the processing of your personal data is upheld, where the processing was based on the Controller's legitimate interest.

Recipients of personal data

We will share your data with:

• entities acting on our behalf, i.e. providers of IT services and solutions, marketing agencies, couriers, providers of accounting, financial, insurance and administrative services, and entities conducting customer satisfaction surveys on our behalf;
• providers of user accounts on social media;
• public authorities, including courts, at their justified request;
• public authorities, including courts, as well as legal representatives, insurers and advisers, where necessary to defend ourselves against claims or to pursue our claims;
• social media, advertising and analytics partners, who may combine this information with other data you have provided to them or that they have collected when you used their services.

We will not transfer your personal data to countries outside the European Economic Area.

Your rights

In connection with our processing of your personal data, you have the right to:

• obtain confirmation from the Controller as to whether your personal data is being processed;
• request access to your personal data, its rectification, erasure or restriction of processing;
• request that your personal data be transferred to another controller;
• object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR (i.e. on the legitimate interests pursued by the Controller) and, where personal data is processed for direct marketing purposes, to processing for such marketing;
• lodge a complaint with the supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland, kancelaria@uodo.gov.pl, if you believe that our processing of your personal data infringes the law.

Data security

When processing your personal data, we apply organisational and technical measures in line with applicable law, including encrypting connections with an SSL certificate. Your personal data is stored in a database protected by technical and organisational measures that meet the requirements of generally applicable data protection law. Only persons authorised by the Controller have access to the database.

Final provisions

We may update this Policy from time to time, among other things to keep pace with new technologies, industry practice and legal requirements. We will inform you of any changes in advance by publishing the new version of this document at mobi.pl/en/privacy-policy.html.

Matters not covered by this Policy are governed by the GDPR, the Polish Personal Data Protection Act of 10 May 2018 (Journal of Laws 2019, item 1781), the Polish Act of 18 July 2002 on the provision of electronic services (Journal of Laws 2020, item 344, consolidated text) and the implementing acts issued under them.