Privacy Policy

Who we are

The Controller of your personal data is:

This Privacy Policy sets out the rules for the processing and protection of personal data of Users of the website operating under the muszynianka.pl domain, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).

Terms used in this document

• Controller: Muszynianka Sp. z o.o. with its registered office in Krynica-Zdrój, which provides electronic services and processes Users’ personal data.
• Service: the website operating under the muszynianka.pl domain.
• User: a natural person using the Service.
• Personal data: information about an identified or identifiable natural person.
• Cookies: small text files saved on the User’s device by a web browser.
• GDPR: Regulation (EU) 2016/679 of the European Parliament and of the Council.

What data we collect

The Controller may process the following categories of personal data:

Data provided voluntarily

• First and last name, email address, telephone number: when using the contact form or email correspondence.
• Company data: for inquiries regarding commercial cooperation or distribution.

Data collected automatically

• IP address, browser type, operating system, screen resolution.
• Data concerning activity on the Service (visited pages, visit duration, traffic source).
• Cookies and similar tracking technologies.

Why we process data

• Handling contact inquiries: responding to messages sent via the form or email (legal basis: Article 6(1)(f) of the GDPR: legitimate interest of the Controller).
• Execution of contracts and commercial cooperation: processing data of contractors and partners (legal basis: Article 6(1)(b) of the GDPR: performance of a contract).
• Statistical analysis: creating statistics of visits to the Service based on pseudonymous data to improve its functionality (legal basis: Article 6(1)(a) of the GDPR: consent expressed via the cookie banner, in connection with Article 173 of the Telecommunications Law).
• Own marketing and remarketing: presenting the offer of Muszynianka products and targeting advertisements in advertising networks and social media platforms using cookies and pixels (Google Ads, Meta/Facebook, TikTok, Adform), as well as sending a newsletter (legal basis: Article 6(1)(a) of the GDPR: consent, in connection with Article 173 of the Telecommunications Law).
• Ensuring Service security: protection against abuse and attacks (legal basis: Article 6(1)(f) of the GDPR).
• Fulfilling legal obligations: maintaining documentation required by law (legal basis: Article 6(1)(c) of the GDPR).

Rights of the User

Under the GDPR, you have the following rights:

• Right of access: you can obtain information on whether and what data we process (Art. 15 GDPR).
• Right to rectification: you can request the correction of inaccurate or completion of incomplete data (Art. 16 GDPR).
• Right to erasure: you can request the deletion of data when there are no grounds for further processing (Art. 17 GDPR).
• Right to restriction of processing: you can request the restriction of processing in specific cases (Art. 18 GDPR).
• Right to data portability: you can receive your data in a structured format (Art. 20 GDPR).
• Right to object: you can object to processing based on the legitimate interest of the Controller (Art. 21 GDPR).
• Right to withdraw consent: if processing is based on consent, you can withdraw it at any time, without affecting the lawfulness of processing carried out before its withdrawal.

How long we store data

• Data from contact forms: for the period necessary to handle the inquiry, but no longer than 2 years from the last contact.
• Data of contractors: for the duration of the contract and the archiving period required by law (up to 6 years).
• Analytical data: in accordance with the policy of analytical tools (Google Analytics 4: up to 14 months).
• Cookies: in accordance with the validity period of specific files (session cookies: until the browser is closed; persistent cookies: up to 2 years).

Who we share data with

Your data may be transferred solely to trusted entities cooperating with the Controller to the extent necessary to provide services:

• Hosting and IT service providers.
• Providers of analytical tools (Google LLC / Google Ireland Ltd. – Google Analytics 4).
• Providers of advertising, remarketing, and social media tools (Google LLC – Google Ads and YouTube; Meta Platforms Ireland Ltd. – Facebook and Instagram; TikTok Technology Limited – Ireland; Adform A/S – Denmark).
• Entities authorized under legal provisions (state authorities).

Some recipients may be located outside the European Economic Area (EEA). Data transfers to third countries occur solely on the basis of appropriate legal safeguards (standard contractual clauses or an adequacy decision, including the EU-US Data Privacy Framework).

Cookies

The Service utilizes cookies, which are safe for the User’s device and do not allow the downloading of personal data or confidential information.

Types of cookies

• Session cookies: stored until the browser session ends, then automatically deleted.
• Persistent cookies: stored on the device until manually deleted or until their expiration date.

Purposes of using cookies

• Strictly necessary: Service configuration, session maintenance, authentication.
• Functional: remembering User preferences (language, region, page layout).
• Analytical: creating visitor statistics based on pseudonymous data (Google Analytics 4).
• Marketing: tailoring advertising content to User preferences.

Third-party cookies

• Google Analytics 4 (Google LLC): traffic analysis on the Service.
• Google Ads (Google LLC): conversion measurement and advertising remarketing.
• YouTube (Google LLC): multimedia content presentation.
• Facebook / Meta (Meta Platforms Ireland Ltd.): social media functions and remarketing.
• TikTok (TikTok Technology Limited, Ireland): remarketing and advertising effectiveness measurement.
• Adform (Adform A/S, Denmark): remarketing and display advertising emission.

Consent and cookie management

Upon the first visit to the Service, the User receives a consent banner where they can grant or reject consent for specific categories of cookies (analytical, marketing, functional). Cookies other than strictly necessary ones are activated only upon giving consent. The granted consent can be changed or withdrawn at any time via the consent management panel available on the Service, without affecting the lawfulness of processing carried out before its withdrawal.

Irrespective of the above, the User can change their browser settings regarding cookies at any time: block their automatic handling or set notifications for each placement. Disabling cookies may limit the functionality of certain elements of the Service.

How we protect your data

The Controller implements appropriate technical and organizational measures to protect personal data against unauthorized access, loss, damage, or destruction. In particular:

• The Service is secured with an SSL certificate (data transmission encryption).
• Access to personal data is restricted solely to authorized persons.
• IT systems are regularly updated and monitored.

Document updates

The Controller reserves the right to amend this Privacy Policy. Users will be informed about significant changes through an appropriate notice on the Service. The current version of the Privacy Policy is always available at muszynianka.pl/polityka-prywatnosci.

Document updated: July 2026 Previous version: May 2026