PRIVACY POLICY OF THE WEBSITE
madora.net.pl
The protection of Users' privacy is of particular importance to MADORA LIMITED LIABILITY COMPANY (MADORA SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ). For this reason, Users of the website madora.net.pl are guaranteed high standards of privacy protection. MADORA LIMITED LIABILITY COMPANY, as the Data Controller, ensures the security of the data provided by Users.
The objective of the Data Controller is also to properly inform Users about their rights and obligations related to the processing of personal data, particularly in light of the provisions on personal data protection specified in Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as the "GDPR"). Therefore, in order to protect the privacy of Website Users, this document informs Users about the legal basis for the processing of personal data provided by Users in connection with their use of madora.net.pl (hereinafter referred to as the "Website"), the methods of collecting, processing, and protecting personal data, as well as Users' rights.
A User is any natural person whose personal data is concerned and who uses the website madora.net.pl or electronic services available through the Website.
The controller of personal data provided by the User through madora.net.pl is MADORA LIMITED LIABILITY COMPANY, Tadeusza Kościuszki 37, 63-220 Kotlin, NIP (Tax Identification Number) 6172222497 (hereinafter referred to as the "Data Controller").
USER
The User's use of madora.net.pl means that the User accepts that the Data Controller collects and uses personal data in accordance with this Privacy Policy.
The User's personal data is processed depending on the purpose:
- on the basis of consent (Article 6(1)(a) GDPR);
- for the purpose of taking steps prior to entering into a contract or for its performance (Article 6(1)(b) GDPR);
- on the basis of the legitimate interests of the Data Controller (Article 6(1)(f) GDPR), including ensuring communication through automated tools (e.g., an AI chatbot).
If this Privacy Policy is amended and the User continues to use the Website, such use shall be deemed acceptance of the current terms of the Privacy Policy. The User has the right to withdraw previously granted consent at any time. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
PERSONAL DATA PROCESSED BY THE DATA CONTROLLER
Method of Collecting Personal Data
The Data Controller obtains personal data directly from the User through the Website, via the functionalities and communication tools available therein, and through messages sent to the Data Controller using those tools.
The Data Controller also collects data through automated communication tools (chatbot / AI widget), which allow communication with the User and the collection of information necessary to prepare an offer or fulfill an order.
Providing personal data by the User is voluntary.
Types of Personal Data Processed
Through the Website, the Data Controller collects the following personal data concerning the User:
- first and last name;
- e-mail address;
- telephone number;
- message content;
- message subject;
- data provided during conversations with the chatbot (content of inquiries and responses);
- data concerning purchasing preferences or request-for-quotation details;
- other information voluntarily provided by the User during conversations;
- technical data and information regarding the User's behavior on the Website (e.g., IP address, device data, manner of interaction with the Website), including data processed through security mechanisms (e.g., reCAPTCHA).
PURPOSES OF PERSONAL DATA PROCESSING
The manner in which the Data Controller processes User data depends on how the User uses the Website and the functionalities available within it. The Data Controller processes the User's personal data for the following purposes:
Communication with the User
The Data Controller uses the User's personal data to communicate with the User in a personalized manner. The information communicated to the User relates to offered products or services, personal data security, network updates, reminders, as well as suggested offers from the Data Controller or its partners. Communication with the User also concerns customer service. Personal data is used to assist the User, resolve technical issues, and respond to complaints or claims.
Presenting Commercial Offers to the User Electronically
The purpose of using the User's personal data provided through the functionalities and communication tools available on the Website is to conduct marketing communications by the Data Controller as part of its business activity, particularly through presenting commercial offers electronically.
Presenting Commercial Offers to the User by Telephone
The purpose of using the User's personal data provided through the functionalities and communication tools available on the Website is to conduct marketing communications by the Data Controller as part of its business activity, particularly through presenting commercial offers by telephone.
Sending Information to the User Electronically under the Data Controller's Newsletter Subscription
The purpose of using personal data provided by the User through the newsletter subscription form available on the Website is to inform the User electronically (by e-mail) about new products, services, promotions, or events of the Data Controller or its partners.
Enabling the User to Submit Comments or Opinions
The Data Controller uses the User's personal data to enable the User to comment on or provide opinions regarding the activities, services, or products of the Data Controller or entities cooperating with the Data Controller.
The Data Controller may also process personal data obtained through the Website for the following purposes:
- to conclude and perform a potential agreement between the User and the Data Controller and to service the User as a customer of the Data Controller pursuant to Article 6(1)(b) GDPR;
- to conduct financial settlements with the User who is a customer of the Data Controller in connection with the performance of a potential agreement concluded between the parties, as well as to pursue potential claims against the User under the Data Controller's legitimate interest pursuant to Article 6(1)(f) GDPR and to fulfill legal obligations towards tax authorities pursuant to Article 6(1)(c) GDPR;
- to carry out the Data Controller's marketing activities based on the legitimate interest referred to in Article 6(1)(f) GDPR, as well as in accordance with declarations concerning marketing communications submitted to the Data Controller. Consents granted regarding marketing communications (e.g., receiving commercial information electronically or telephone contact for direct marketing purposes) may be withdrawn at any time without affecting the lawfulness of processing carried out before the withdrawal;
- to fulfill the Data Controller's legal obligations towards the User under the GDPR pursuant to Article 6(1)(c) GDPR.
As part of handling inquiries via AI tools (chatbot), the Data Controller processes the User's personal data for the purpose of:
- conducting automated communication with the User;
- responding to inquiries;
- preparing offers or orders based on information provided by the User.
The legal basis for such processing is Article 6(1)(b) and Article 6(1)(f) GDPR.
As part of using the chatbot, automated processing of data, including profiling, may occur, consisting of the analysis of inquiry content in order to tailor responses or offers. Such processing does not produce legal effects concerning the User nor does it similarly significantly affect the User.
The User should not provide special categories of personal data (so-called sensitive data) or information whose disclosure could violate their privacy or the rights of third parties through the chatbot.
The Data Controller may process the User's personal data in order to ensure Website security, including detecting and preventing automated activities (bots), abuse, and attacks. For this purpose, tools such as Google reCAPTCHA are used, which analyze User behavior on the Website (e.g., navigation patterns, interaction time, IP address).
The legal basis for processing is the legitimate interest of the Data Controller (Article 6(1)(f) GDPR).
DISCLOSURE OF PERSONAL DATA
The User's personal data is or may be disclosed to the following categories of recipients:
- entities cooperating in the provision of services;
- providers of chatbot technologies and AI solutions (e.g., IT infrastructure providers and language model providers);
- entities processing data on behalf of the Data Controller (data processors);
- providers of tools used to ensure Website security and protection against abuse (e.g., Google reCAPTCHA – Google Ireland Ltd.), acting as data processors on behalf of the Data Controller.
Data may be transferred outside the European Economic Area based on appropriate safeguards, particularly the Standard Contractual Clauses approved by the European Commission.
USER RIGHTS
User Rights
At every stage of data processing, the User is entitled to a range of rights that allow access to their data, verification of the correctness of data processing, correction of data, objection to processing, and the right to request deletion of data, restriction of processing, or data portability.
If the User wishes to exercise their rights as a data subject, they may contact the Data Controller using the following contact details:
MADORA LIMITED LIABILITY COMPANY
Tadeusza Kościuszki 37
63-220 Kotlin
Right to Lodge a Complaint with a Supervisory Authority
A User whose personal data is processed by the Data Controller has the right to lodge a complaint with the supervisory authority competent for personal data protection matters (the President of the Personal Data Protection Office).
COOKIES
The Data Controller informs Users that when using the Website, pieces of code known as "cookies" are stored on the User's end device. These are text files corresponding to HTTP requests directed to the Data Controller's server. Cookies are installed by every browser through which the User visits the Website. Cookies are used on the Website for the following purposes:
- maintaining technical correctness and session continuity between the Website server and the User's end device;
- optimizing the User's use of the Website and adapting the display of Website pages to the User's end device;
- ensuring secure use of the Website;
- collecting statistics concerning visits to Website pages to support improvements to their structure and content;
- displaying content on the User's end device tailored to their preferences.
Detailed information concerning the cookies used by the Data Controller and their management is available in the Cookies Policy.
OTHER IMPORTANT INFORMATION
Personal Data Security
The Data Controller implements appropriate measures to ensure the security of the User's personal data. Secure use of the Website is ensured through systems and procedures protecting against unauthorized access and disclosure of data. Furthermore, the systems and processes used by the Data Controller are regularly monitored in order to detect potential threats. Personal data obtained by the Data Controller is stored in computer systems with strictly limited access.
Retention of Personal Data
The retention period for Users' personal data depends on the purposes for which it is processed.
The Data Controller retains personal data for the period necessary to achieve the specified purposes, namely:
- in the case of providing a service or delivering a product to the User, for the period necessary for the Data Controller to perform the ordered service or deliver the product to the User, and subsequently for the next 5 years calculated from the end of the calendar year in which the Data Controller completed the service or delivered the product.
In each of the above cases, after the necessary processing period has expired, the data may only be processed for the purpose of pursuing claims arising from the relationship between the parties until such claims have been finally resolved through legal proceedings.
Changes to the Privacy Policy
In order to update the information contained in this Privacy Policy and ensure its compliance with applicable laws, this Privacy Policy may be amended. In the event of changes to the content of the Privacy Policy, the update date indicated at the end of the document will be changed accordingly. To obtain information on how personal data is protected, the Data Controller recommends that Users regularly review the provisions of the Privacy Policy.
Contact Information
To obtain any information regarding this Privacy Policy, the User may contact the Data Controller:
MADORA LIMITED LIABILITY COMPANY
Tadeusza Kościuszki 37
63-220 Kotlin
using the following contact details:
It is also possible to contact the Data Controller by post at:
Tadeusza Kościuszki 37
63-220 Kotlin
The last update of this document took place on 30 September 2026.