Close

Privacy policy

We treat your data with care.

About

In the document below you will find the rules for the processing of personal data and the use of cookies in connection with the use of the website www.madabox.pl. The website administrator is MADABOX Marcelina Jaskólska-Wolny, Brukselska 6A, 03-973 Warsaw. If you have any doubts related to the privacy policy, you can contact us at any time by sending a message to the address kontakt@madabox.pl

The most important information

For your convenience, we have also prepared a shortened version of the most important privacy-related principles.

  • By subscribing to the newsletter, submitting a complaint, withdrawing from the contract, or simply by contacting us, you provide us with your personal data, and we guarantee you, that your data will remain confidential, secure and will not be disclosed to any third parties without your express consent.
  • We entrust the processing of personal data only to proven and trusted entities providing services related to the processing of personal data.
  • We use Google Analytics analytical tools that collect information about your website visits, such as the subpages you viewed, time spent on the website or transitions between individual subpages. For this purpose, Google LLC cookies for the Google Analytics service are used. As part of Google Analytics, we collect demographic and interest data. As part of cookie settings, you can decide whether you consent to the collection of such data about you or not.
  • We use Google Tag Manager to control advertising campaigns and how you use our pages. For this purpose, Google LLC cookies related to the Google Tag Manager service are used. As part of cookie settings, you can decide whether you consent to the use of such cookies in your case or not.
  • We use marketing tools such as Facebook Pixel to target personalized ads on Facebook. This involves the use of Facebook cookies. W ramach ustawień plików cookies możesz zadecydować, whether you consent to us using Pixel Facebook in your case or not.
  • We provide the opportunity to use social features such as sharing content on social networking sites and subscribing to a social profile. The use of these functions may involve the use of cookies for social network administrators such as Facebook, Instagram, YouTube, Twitter, Google+, LinkedIN.

Personal data

The administrator of your personal data within the meaning of the provisions on the protection of personal data is MADABOX Marcelina Jaskólska-Wolny, with its registered office in Warsaw (03-973) at Brukselska 6A.

Purposes, legal basis and period of personal data processing they are indicated separately for each purpose of data processing (see description of individual purposes for processing personal data below).

Permissions. The GDPR grants you the following potential rights related to the processing of your personal data:

  • the right to access personal data,
  • the right to rectify personal data,
  • the right to delete personal data,
  • the right to limit the processing of personal data,
  • the right to object to the processing of personal data,
  • right to data portability,
  • the right to lodge a complaint with a supervisory authority,
  • the right to withdraw consent to the processing of personal data if you have given such consent.

The rules related to the implementation of the indicated rights are described in detail in art. 16 - 21 GDPR. We encourage you to read these regulations. For our part, we consider it necessary to explain to you that the above-mentioned rights are not absolute and you will not be entitled to all processing of your personal data. For your convenience, we have made an effort to indicate your rights as part of the description of individual personal data processing operations. We emphasize that you always have one of the rights indicated above - if you consider that when processing your personal data we have violated the provisions on the protection of personal data, you have the opportunity to lodge a complaint with the supervisory body (the President of the Office for Personal Data Protection).

You can also always ask us to provide you with information about what data we have about you and for what purposes we process them. All you have to do is send a message to the address kontakt@madabox.pl. We have made every effort to ensure that the information you are interested in is comprehensively presented in this privacy policy. The e-mail address provided above can also be used if you have any questions related to the processing of your personal data.

Safety. We guarantee the confidentiality of all personal data provided to us. We ensure that all security measures and personal data protection required by the provisions on the protection of personal data are taken. Personal data is collected with due diligence and properly protected against access by unauthorized persons.

Data recipients. Your data may be processed by our subcontractors, i.e. entities whose services we use to process data and provide services to you.

  • hosting provider - to store personal data on the server,
  • newsletter platform - to use the mailing system in which your data is processed, if you subscribed to the newsletter,.

All entities entrusted with the processing of personal data guarantee the use of appropriate measures for the protection and security of personal data required by law.

Purposes and processing activities

Newsletter. If you want to subscribe to the newsletter, you must provide us your email address via the newsletter subscription form. Providing data is voluntary, but necessary to subscribe to the newsletter.

The data provided to us when subscribing to the newsletter are used to send you the newsletter, and the legal basis for their processing is your consent (art.6 par.1 lit.a RODO) expressed when subscribing to the newsletter.

The data will be processed for the duration of the newsletter, unless you unsubscribe from it earlier, which will delete your data from the database.

You can correct your data saved in the newsletter database at any time, as well as request their removal by unsubscribing from the newsletter.You also have the right to transfer data referred to in art. 20 GDPR.

Complaints and withdrawal from the contract. If you submit a complaint or withdraw from the contract, you provide us with personal data contained in the content of the complaint or statement of withdrawal from the contract, which includes your name, address, telephone number, email address, bank account number. Providing data is voluntary, but necessary to make a complaint or withdraw from the contract.

The data provided to us in connection with the submission of a complaint or withdrawal from the contract are used to implement the complaint procedure or the withdrawal procedure (art.6 par.1 lit.c RODO).

The data will be processed for the time necessary to complete the complaint or withdrawal procedure. Complaints and statements of withdrawal from the contract may also be archived for statistical purposes.

In the case of data contained in complaints and declarations of withdrawal from the contract, you cannot rectify this data. You also can not object to the processing of data and demand the deletion of data until the expiry of the limitation period for claims under the contract. After the expiry of the limitation period for claims under the contract however, you can object to the processing of your data by us for statistical purposes, as well as demand the removal of your data from our database.

E-mail contact. By contacting us via email, including sending an inquiry via the contact form, you naturally give us your email address as the sender's address. In addition, you can also include other personal data in the message. Providing data is voluntary, but necessary to make contact.

In this case, your data is processed in order to contact you, and the basis for processing is art. 6 clause 1 lit. and GDPR, i.e. your consent resulting from initiating contact with us. The legal basis for processing after the contact is a justified purpose in the form of archiving correspondence for internal purposes (Article 6 (1) (c) of the GDPR).

The content of correspondence may be archived and we are not able to clearly determine when it will be deleted. You have the right to request a history of correspondence you have with us (if it has been archived), as well as demand its removal, unless its archiving is justified due to our overriding interests, e.g. defense against potential claims on your part.

Cookies and other tracking technologies

Our website, like almost all other websites, uses cookies.

Cookies are small text information stored on your end device (e.g. computer, tablet, smartphone), which can be read by our teleinformation system (own cookies) or teleinformation system of third parties (third party cookies).

Some of the cookies we use are deleted after the end of the web browser session, i.e. after closing it (so-called session cookies). Other cookies are stored on your end device and allow us to recognize your browser the next time you visit the site (persistent cookies). See more details below.

Consent to cookies. During the first visit to the website, you are shown information on the use of cookies. Thanks to a special tool you have the ability to manage cookies from the page. In addition, you can always change your cookie settings from your browser or delete cookies at all. Browsers manage cookie settings in different ways. In the auxiliary menu of the web browser you will find explanations about changing cookie settings.

Remember that disabling or limiting the use of cookies may cause difficulties in using our website as well as from many other websites that use cookies.

Own cookies. We use our own cookies to ensure that the website works properly.

Third party cookies. Our website, like most modern websites, uses functions provided by third parties, which involves the use of cookies from third parties. The use of this type of cookies is described below.

Google Analytics. We use the Google Analytics tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. We implement activities in this area, based on our legitimate interest, consisting in the production of statistics and their analysis in order to optimize our websites.

Google Analytics automatically collects information about your use of our site. The information collected in this way is usually transmitted to a Google server in the United States and stored there. Due to the IP anonymization that we have activated, your IP address is shortened before forwarding. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and shortened there. The anonymized IP address provided by your browser as part of Google Analytics is generally not combined with other Google data.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, joined the EU-US-Privacy Shield program to ensure an adequate level of protection of personal data required by European regulations. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies that have a Privacy Shield certificate.

You can prevent the collection of data collected by cookies regarding your use of our website by Google, as well as the processing of this data by Google, by installing the browser plug-in located at the following address: here.

As part of Google Analytics, we also collect demographic and interest data. As part of cookie settings directly from our site, you can decide whether you consent to the collection of such data about you or not.

If you are interested in details related to data processing as part of Google Analytics, we encourage you to read the explanations prepared by Google: here.

Google Tag Manager. We use the Google Tag Manager tool provided by Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. With the help of Google Tag Manager, we control our advertising campaigns and the way you use our pages. We implement activities in this area based on our legitimate interest in the form of marketing of own products or services and optimization of our websites.

When you visit our website, a Google cookie is automatically left on your device which, with the help of a pseudonymous identifier (ID) and based on the pages you visit, allows you to display interest-based ads, controlling the effectiveness of these ads and other activities related to controlling your behavior on the site.

Further data processing only takes place if you have consented to Google to combine browsing history and application usage with your account and using information from your Google account to personalize the ads that are displayed on websites. If in this case you will be logged in when visiting our website on Google, Google will use your data together with Google Analytics data to create and define target group lists for remarketing on different devices. To this end, Google temporarily combines your personal data with Google Analytics data to create target groups.

Due to the fact that Google LLC is based in the USA and uses technical infrastructure located in the USA, it joined the EU-US-Privacy Shield program to ensure an adequate level of personal data protection as required by European legislation. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies that have a Privacy Shield certificate.

You can deactivate cookies used for remarketing as part of your Google account settings: here. In addition, as part of cookie settings from our website, you can disable the use of cookies for remarketing.

If you are interested in details related to data processing as part of Google Tag Manager, we encourage you to read the Google privacy policy: here.

Facebook Pixel. We use marketing tools available as part of Facebook and provided by Facebook Inc., 1601 S. California Ave. Palo Alto, CA 94304, USA. As part of these tools, we direct ads to you on Facebook. We implement activities in this area based on our legitimate interest in the form of marketing of our own products or services.

In order to target you personalized ads in terms of your behavior on our site, we have implemented Pixel Facebook pages within our pages, which automatically collects information about your use of our site regarding the pages viewed. The information collected in this way is usually transmitted to a Facebook server in the United States and stored there.

The information collected as part of Facebook's Pixel is anonymous, i.e. it does not allow us to identify you. We only know what actions you have taken on our site. Please be advised, however, that Facebook may combine this information with other information about you collected as part of your use of Facebook and use for your own purposes, including marketing. These Facebook actions are no longer dependent on us, and you can search for information directly in Facebook's privacy policy: here. You can also manage your privacy settings from your Facebook account.

Due to the fact that Facebook Inc. has US headquarters and uses technical infrastructure located in the US, joined the EU-US-Privacy Shield program to ensure an adequate level of protection of personal data required by European regulations. As part of the agreement between the US and the European Commission, the latter has established an adequate level of data protection for companies that have a Privacy Shield certificate.

As part of the cookie settings available from our website, you can decide whether you consent to our use of Pixel Facebook in your case or not.

Social Tools. Our websites use plugins and other social tools provided by social networking sites such as Facebook, Twitter, Instagram, Google, LinkedIN.

By displaying our website containing such a plugin, your browser will establish a direct connection to the servers of the administrators of social networking sites (service providers). The content of the plugin is transmitted by the respective service provider directly to your browser and integrated with the website. Thanks to this integration, service providers receive information that your browser has viewed our website, even if you do not have a profile with a given service provider or are not currently logged in to it. This information (along with your IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.

If you have logged in to one of the social networking sites, then this service provider will be able to directly assign a visit to our site to your profile on a given social network.

If you use a given plugin, e.g. by clicking on the "Like" or "Share" button, the relevant information will also be sent directly to the server of the given service provider and stored there.

In addition, this information will be published on the social network and appear to people added as your contacts. The purpose and scope of data collection and their further processing and use by service providers, as well as the possibility of contact and your rights in this regard and the ability to make settings to protect your privacy are described in the privacy policy of individual service providers.

If you do not want social networking sites to match the data collected during visits to our website directly to your profile on a given website, you must log out of this website before visiting our website. You can also completely prevent the plugins from loading on the page using the appropriate extensions for your browser, e.g. script blocking.

Server logs Using the website involves sending queries to the server on which the website is stored. Each query directed to the server is saved in the server's logs.

Logs include, among others Your IP address, server date and time, information about the web browser and operating system you use. Logs are saved and stored on the server.

The data saved in the server logs are not associated with specific people using the site and are not used by us to identify you.

Server logs are only auxiliary material used to administer the site, and their content is not disclosed to anyone except persons authorized to administer the server.