Privacy policy

1. Data controller

The controller of personal data collected on mivly.pl (forms, callback booking) is Maciej Paszka, a sole trader operating under the business name MPS-STAL, tax ID 6452592522, REGON 541196085, CEIDG registration, no KRS number, ul. Stalowa 17 Bud. 65, 41-506 Chorzów, Poland. Marketing services are provided under the Mivly brand (the “Controller”).

This policy covers the informational site and forms only. The ERP account and product data are described in a separate policy at erp.mivly.pl/privacy.

For privacy matters write to [email protected] or call +48 690 752 711. No data protection officer (DPO) has been appointed.

2. Data we collect

When you use the site we may collect:

• Name - from the contact form and callback booking.
• Email - needed to reply.
• Phone - if provided or when requesting a callback.
• Message content and preferred call slot.
• Technical data - IP, browser, visit time.
• Cloudflare Turnstile anti-spam data (IP, device, form interaction).

3. Purpose and legal basis

We process data for the purposes below. The form checkbox confirms you have read this information (Art. 13 GDPR); it is not consent under Art. 6(1)(a) GDPR.

• Handle enquiries and booked calls - Art. 6(1)(f) GDPR (legitimate interest: answering a message you initiated).
• Prepare an offer or conclude a contract (ERP demo, custom systems) - Art. 6(1)(b) when we are taking steps toward a contract.
• Prevent spam with Cloudflare Turnstile - Art. 6(1)(f) (legitimate interest: form security).

4. Duty to provide data

Name, email and message (or phone for a callback) are needed so we can reply. Without them the form will not send. Other fields are optional.

5. Retention

We keep data only as long as needed:

• Form data - until correspondence ends, no longer than 12 months after last contact, unless we conclude a contract sooner.
• Contract data - for the contract term and legally required periods.
• Technical logs and Turnstile - no longer than 12 months.

6. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interest.

Write to [email protected]. You may also lodge a complaint with the Polish DPA (UODO), ul. Moniuszki 1A, 00-014 Warsaw.

We do not take automated decisions under Art. 22 GDPR.

7. Cookies

We use essential cookies for the site to work and for Cloudflare Turnstile. We do not use analytics or advertising cookies, and we do not load visit-measurement tools.

8. Anti-spam (Cloudflare Turnstile)

Contact forms use Cloudflare Turnstile. It may process IP, device data and how you interact with the form.

See the Cloudflare Turnstile Privacy Addendum: https://www.cloudflare.com/turnstile-privacy-policy/ Cloudflare, Inc. is established in the USA; Standard Contractual Clauses (SCCs) or an equivalent mechanism apply.

9. Sharing and transfers

Data may be shared with trusted processors:

• Hosting providers (VPS in the EEA).
• Cloudflare, Inc. - Turnstile (USA, SCCs).
• Resend, Inc. - email delivery (USA, SCCs).
• PayU S.A., ul. Grunwaldzka 186, 60-166 Poznań, Poland - when you pay for a subscription in the ERP panel (payer and transaction data). Forms on this site do not send data to PayU.

10. Security and changes

We use TLS, backups and access control. Material policy updates are published on this site. If a change covers new purposes or recipients beyond the current legitimate interest, we will update the notice first. Simply continuing to browse is not GDPR consent.

11. Contact

Email: [email protected] · Phone: +48 690 752 711 · Address: ul. Stalowa 17 Bud. 65, 41-506 Chorzów · Tax ID: 6452592522 · REGON: 541196085 · CEIDG, no KRS · Legal entity: Maciej Paszka (MPS-STAL) · Brand: Mivly.