Privacy Policy

1. General Information

This privacy policy applies to the website available at www.cim-mes.com.pl.
The data controller is CIM-mes Projekt Sp. z o.o., Al. Jerozolimskie 125/127, unit 503, 02-017 Warsaw, e-mail: cim-mes@cim-mes.com.pl.​

2. Purpose and Legal Basis for Data Processing

Personal data is processed for the following purposes and legal bases:

  • newsletter delivery – based on user consent (Art. 6(1)(a) GDPR),​

  • handling contact form queries – for contract execution or upon user request (Art. 6(1)(b) GDPR),

  • service delivery – based on contract (Art. 6(1)(b) GDPR),

  • presenting offers – based on the legitimate interest of the controller (Art. 6(1)(f) GDPR).​

3. Sources and Technologies for Data Collection

Personal data is collected:

  • via information voluntarily entered in forms,

  • via cookies (details in the Cookie Policy).​

4. Data Recipients

Data may be shared with:

  • hosting provider (home.pl),

  • authorized employees and collaborators,

  • providers of marketing services,

  • IT companies providing technical website support.​
    Data is not transferred outside the European Union.​

5. User Rights

Every user has the right to:

  • access their personal data,

  • rectify their data,

  • erase their data,

  • restrict processing,

  • transfer data (according to GDPR),

  • object (to processing based on legitimate interest, including profiling).​
    To exercise these rights, please contact cim-mes@cim-mes.com.pl.​

6. Complaints to Supervisory Authority

You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw.​

7. Data Retention Periods

Personal data is processed:

  • for the period necessary to fulfill its purpose (e.g., handling requests, performing a service),

  • marketing data – for up to 3 years, unless you withdraw consent earlier,

  • accounting data – for the period required by law.​

8. Automated Decision-Making / Profiling

Profiling may occur for the purpose of service delivery and direct marketing; such activities do not produce significant legal effects for the user. Further details are provided upon user request.​

9. Information in Forms

Each form clearly describes the purpose and legal basis for data collection relevant to its function.​

10. Cookies

The website uses cookies for statistical analyses (Google Analytics) and marketing purposes. Users can independently manage cookie settings in their browser and via the consent panel on the site.​
Details regarding types and use of cookies are described in the dedicated Cookie Policy.

11. Hosting

The website is hosted by SEO Host Sp. z o.o. in accordance with best security practices (SSL certificate, backups, software updates).​

12. Data Security

The controller implements technical measures (SSL, backups, software updates, restricted data access).​
Provision of personal data is voluntary, but necessary to receive certain services.​

This policy complies with current GDPR, WCAG 2.2 digital accessibility standards, and the guidelines of the Polish Data Protection Authority as of 2025.