GDPR / Privacy Policy

Privacy and Data Protection Policy

This policy describes how personal data is processed and how cookies are used on the majumi-chemicals.com website, as well as in the business activities of Majumi Chemicals Sp. z o.o.

1. Data Controller

The Controller of your personal data is Majumi Chemicals Sp. z o.o., with its registered office at ul. Północna 1, 26-600 Radom, Poland, registered in the National Court Register kept by the District Court for the Capital City of Warsaw, 14th Commercial Division of the National Court Register, under KRS no. 0000205494, NIP: 7962640137, REGON: 672999820, represented by Jerzy Zygmunt Pękalski – President of the Management Board (hereinafter: the “Controller” or “Majumi Chemicals”).

2. Contact for Data Protection Matters

For all matters concerning the processing of personal data, including the exercise of data subject rights, you may contact us at:

3. Information Clause for Customers, Suppliers, Business Partners and Their Employees and Representatives

In accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter: “GDPR”), we hereby inform you that:

3.1. Source and Categories of Data

In the case of employees, associates or representatives of customers, suppliers or business partners, the Controller processes personal data obtained directly from those individuals or from the entity that employs them or with which they cooperate. The categories of data processed typically include: full name, position or function, business contact details (e-mail address, telephone number) and other data necessary for the cooperation.

3.2. Purposes and Legal Basis of Processing

  • conclusion and performance of a cooperation agreement, including communication on matters related to its execution – Article 6(1)(b) GDPR, and with regard to persons representing a party to the agreement – Article 6(1)(f) GDPR (legitimate interest of the Controller in conducting business correspondence);
  • fulfilment of the Controller’s legal obligations, including tax and accounting obligations – Article 6(1)(c) GDPR;
  • direct marketing of Majumi Chemicals products and services – Article 6(1)(f) GDPR (legitimate interest of the Controller);
  • establishment, exercise or defence of legal claims – Article 6(1)(f) GDPR (legitimate interest of the Controller).

3.3. Data Recipients

Recipients of personal data may include: law firms, postal operators (including Poczta Polska S.A.), courier companies, IT and hosting service providers serving the Controller, accounting service providers, and other entities authorised under applicable law. The full list of data recipients is available upon request sent to r.piwowarek@majumi-chemicals.com.

3.4. Transfers to Third Countries

The Controller does not intentionally transfer personal data to third countries (outside the European Economic Area). Where the Controller’s IT service providers use infrastructure located outside the EEA, data is transferred solely on the basis of appropriate safeguards provided for under the GDPR, i.e. an adequacy decision of the European Commission (including the EU-U.S. Data Privacy Framework) or standard contractual clauses.

3.5. Retention Period

  • for the duration of the cooperation agreement and subsequently for a period of 5 years from the end of the calendar year in which the agreement was terminated or completed;
  • for the period required by law, in particular tax and accounting regulations;
  • until the limitation of any potential claims – to the extent necessary for their establishment, exercise or defence;
  • for marketing purposes – until an objection to the processing is raised.

3.6. Automated Decision-Making

Personal data will not be subject to automated decision-making, including profiling, as referred to in Article 22 GDPR.

3.7. Voluntary Provision of Data

Provision of personal data is voluntary but necessary for the conclusion and performance of the cooperation agreement. Failure to provide the data results in the inability to conclude the agreement.

4. Information Clause for Job Candidates

4.1. Purposes and Legal Basis

  • conducting the current recruitment process – with regard to data specified in Article 221 of the Polish Labour Code on the basis of Article 6(1)(c) GDPR, and with regard to other data on the basis of consent (Article 6(1)(a) GDPR);
  • participation in future recruitment processes – exclusively upon obtaining a separate consent (Article 6(1)(a) GDPR);
  • establishment, exercise or defence of any claims related to the recruitment process – Article 6(1)(f) GDPR.

4.2. Data Recipients

Recipients of personal data may include IT service providers handling the Controller’s e-mail and recruitment systems, and other entities authorised under applicable law.

4.3. Retention Period

  • data collected during the current recruitment process – until completion of that process and subsequently for 3 years for the purpose of any potential claims;
  • data of persons who have consented to participate in future recruitment processes – for 12 months from the date of consent or until its earlier withdrawal.

4.4. Requirement to Provide Data

Provision of personal data within the scope arising from Article 221 of the Polish Labour Code is necessary in order to participate in the recruitment process. Provision of any other data is voluntary and does not affect the ability to participate in the recruitment process.

5. Contact Form and E-mail Correspondence

If you contact the Controller via the contact form available on the website or directly by e-mail (e.g. info@majumi-chemicals.com), the personal data provided in the message (typically: full name, e-mail address, telephone number, content of the message and company details) is processed for the purpose of responding to the inquiry and conducting further correspondence – on the basis of Article 6(1)(f) GDPR (legitimate interest of the Controller in handling inquiries).

Correspondence is retained for the period necessary to handle the matter and for the period required by law, no longer than 3 years from the last contact, unless longer retention is required for the establishment, exercise or defence of claims, or due to the conclusion of an agreement.

6. Cookies and Analytics Tools

6.1. What Are Cookies

Cookies are small text files saved on the user’s device while browsing the website. They allow the device to be recognised and the website to be displayed in a manner adjusted to individual preferences.

6.2. Categories of Cookies Used on the Website

Necessary cookies – required for the proper functioning of the website, including remembering cookie consent preferences. Processed on the basis of Article 6(1)(f) GDPR and Article 173(3) of the Polish Telecommunications Act (cookies necessary to deliver the service). They do not require user consent.

Analytics cookies – used to analyse website traffic and how the site is used (number of visits, traffic sources, most frequently visited pages). For this purpose we use Google Analytics 4 (provider: Google Ireland Limited), integrated via the Google Site Kit plugin. Analytics cookies are activated only after consent is given (Article 6(1)(a) GDPR and Article 173(1) of the Polish Telecommunications Act).

6.3. Granting and Withdrawing Consent

Consent for analytics cookies is granted via the cookie banner displayed on the first visit. The user may:

  • accept all cookies (the “Accept All” button),
  • reject optional cookies (the “Reject All” button),
  • customise preferences for individual categories (the “Customise” button).

Consent may be withdrawn or modified at any time by clicking the cookie settings icon available in the website footer. Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

6.4. Google Analytics 4 – Details

Google Analytics 4 is used exclusively for statistical purposes (website traffic analysis). We do not use GA4 for remarketing or advertising. The tool processes data such as: anonymised IP address, device and browser information, traffic source, pages visited and time of visit.

Data may be transferred to Google LLC in the USA – the transfer is carried out on the basis of the EU-U.S. Data Privacy Framework (European Commission adequacy decision of 10 July 2023) or standard contractual clauses.

For more information on data processing by Google: https://policies.google.com/privacy.

6.5. Managing Cookies in the Browser

Independently of the cookie banner, users can manage cookies directly in their browser settings – block them, delete them, or receive notifications when they are saved. Restricting cookies may affect certain website functionalities.

7. Rights of the Data Subject

In connection with the processing of your personal data, you have the following rights:

  • the right of access to your data and to receive a copy of it;
  • the right to rectification of inaccurate data;
  • the right to erasure of data (in cases specified in Article 17 GDPR);
  • the right to restriction of processing;
  • the right to data portability (within the scope set out in Article 20 GDPR);
  • the right to object to processing based on the legitimate interest of the Controller, including for the purposes of direct marketing;
  • the right to withdraw consent at any time, where processing is based on consent – withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal;
  • the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.

To exercise the above rights, please contact us at: r.piwowarek@majumi-chemicals.com.

8. Changes to the Policy

The Controller reserves the right to make changes to this policy. The current version is always available on the majumi-chemicals.com website in the Privacy Policy section.