Privacy Policy

1.General information

This Privacy Policy (the “Privacy Policy”) sets out the principles governing the processing and protection of personal data of users of the multicontract.com.pl website (the “Website”), in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – “GDPR”). We are committed to protecting the personal data entrusted to us. this Privacy Policy explains how “Multicontract” Sp. z o.o. uses the personal data collected when you visit the Website.

The Controller of your personal data is:
Multicontract Spółka z ograniczoną odpowiedzialnością, located in Całowanie 111B, 05-480 Karczew, Poland, National Court Register (KRS): 0000496515, Tax Identification Number (NIP): 5322047777, Statistical Identification Number (REGON): 0000496515, Registered with the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register. Share capital: PLN 500,000.00

E-mail address: info@multicontract.com.pl
Telephone: +48 22 778 19 50

Hereinafter referred to as the “Controller”, “Multicontract” or the “Company.”

2.Categories of Personal Data Collected

When using the Website, users may be asked to provide certain personal data, including:

full name;
e-mail address;
telephone number;
residential or business address;
company name (where applicable);
profession or job title;
project-related information (where requested through the relevant contact form).

Providing personal data is voluntary; however, failure to provide certain information may prevent users from accessing selected Website functionalities, including submitting contact forms or ordering free product samples.

3. Purposes of Processing

Personal data may be processed for the following purposes:

responding to enquiries submitted through contact forms;
processing and fulfilling requests for free product samples;
maintaining correspondence relating to enquiries or sample requests;
conducting marketing activities, where permitted by law;
compiling website traffic statistics and analytics, either in anonymised form or on the basis of the user’s consent.

4. Legal Basis for Processing

Personal data is processed on one or more of the following legal grounds:

Article 6(1)(b) GDPR – where processing is necessary for the performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (for example, processing requests for free product samples);
Article 6(1)(a) GDPR – where the data subject has given consent to the processing of personal data for one or more specific purposes (for example, marketing communications);
Article 6(1)(f) GDPR – where processing is necessary for the purposes of the legitimate interests pursued by the Controller, including operating the Website, establishing, exercising or defending legal claims.

5. Recipients of Personal Data

The Controller may engage third-party service providers to perform certain services necessary for the operation of its business. Where such service providers process personal data on the Controller’s behalf, they are granted access only to the personal data strictly necessary for the performance of the relevant services and are contractually required to implement appropriate technical and organisational measures to safeguard such data. The Controller does not sell users’ personal data and does not authorise third parties to use such data for their own independent purposes.

Personal data may be disclosed to:

providers of hosting, IT support and website maintenance services;
courier or postal service providers, solely for the purpose of delivering orders;
providers of analytical services (such as Google Analytics), using anonymised data.

The Controller does not transfer personal data to countries outside the European Economic Area (EEA), unless services provided by companies such as Google are used and appropriate safeguards are in place (e.g. the European Commission’s Standard Contractual Clauses).

6. Data Retention Period

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, namely:

until the relevant enquiry has been answered or the correspondence has been concluded;
for up to 12 months following the dispatch of free product samples, for organisational purposes and any necessary follow-up communication;
until consent is withdrawn, where processing is based on consent;
or for a longer period where retention is required or permitted under applicable law.

Upon expiry of the applicable retention period, personal data will be securely deleted or irreversibly anonymised.

7. Data Subject Rights

In accordance with the GDPR, users are entitled to exercise the following rights:

Right of access – to obtain confirmation as to whether personal data are being processed and, where that is the case, to receive a copy of such data.
Right to rectification – to request the correction of inaccurate or incomplete personal data.
Right to erasure (“right to be forgotten”) – to request the deletion of personal data in the circumstances specified in Article 17 GDPR, including where the data are no longer necessary for the purposes for which they were collected or where they have been processed unlawfully.
Right to restriction of processing – to request the temporary restriction of processing under the circumstances provided for by the GDPR, for example while the accuracy of the data is being verified.
Right to data portability – to receive personal data in a structured, commonly used, and machine-readable format and, where technically feasible, to have those data transmitted directly to another controller.
Right to object to processing – the user has the right to object to the processing of their personal data. This means that the user may ask us to stop processing their personal data. The user may object to direct marketing at any time and free of charge if their personal data is processed for these purposes. If the user exercises this right, we will no longer process their personal data for such purposes.
Right to withdraw consent at any time, without affecting the lawfulness of processing carried out prior to such withdrawal.

To exercise any of the above rights, users may contact the Controller at:

info@multicontract.com.pl

Users also have the right to lodge a complaint with the competent supervisory authority responsible for personal data protection. In Poland, this authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO).

8. Data security

The Controller implements appropriate technical and organisational measures designed to ensure a level of security appropriate to the risk associated with the processing of personal data. Such measures are intended to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

9. Cookies

Detailed information regarding the use of cookies and similar technologies is available in the separate Cookie Policy published on the Website.

10. Amendments to this Privacy Policy

The Controller reserves the right to amend or update this Privacy Policy at any time.

Any amendments will be published on the Website in a clear and visible manner together with the date of the latest revision.

Last updated: September 1, 2025