GDPR
Privacy policy
Information on the processing of personal data by Metasy S.A. (Article 13 GDPR). It covers e-mail correspondence, the contact form and visits to metasy.art.
Last updated:
Data controller
The controller of your personal data is Metasy S.A. with its registered office in Szczecin, Al. Wojska Polskiego 48/4, 70-475 Szczecin, Poland, KRS 0000967147, NIP 8522681500, REGON 521798598.
For matters concerning personal data you can write to office@metasy.art or by post to the registered office address.
Correspondence and contact form
The form on this website does not send data to our server. It opens a message in your e-mail client, and its content reaches us as an ordinary e-mail. We do not store form data in any database.
We process the data contained in correspondence: name, e-mail address, company or law firm name, message content and attachments.
Providing data is voluntary. Without an e-mail address and the content of the enquiry, however, we cannot reply or prepare a quote.
Purposes and legal bases
We process correspondence data for the following purposes:
- replying to the enquiry and defining the scope of cooperation - Article 6(1)(b) GDPR (steps prior to entering into a contract) and Article 6(1)(f) GDPR (legitimate interest: handling correspondence),
- preparing and performing a contract - Article 6(1)(b) GDPR,
- complying with legal obligations, including accounting and tax obligations - Article 6(1)(c) GDPR,
- establishing, exercising and defending legal claims - Article 6(1)(f) GDPR.
Retention period
We keep correspondence until the matter it concerns is closed and then for the limitation period of any claims. Documents relating to contracts and settlements are kept for the period required by accounting and tax law.
We do not profile data subjects and do not make automated decisions.
Recipients of data and transfers outside the EEA
Recipients of data may include entities that provide services to us: the e-mail and hosting provider, the accounting office and law firms when claims are pursued or defended.
We do not transfer data to countries outside the European Economic Area. If the hosting or e-mail provider processes data outside the EEA as part of its global infrastructure, this takes place on the basis of standard contractual clauses approved by the European Commission.
Rights of the data subject
Every person whose data we process has the right to:
- access their data and obtain a copy of it,
- rectification of their data,
- erasure of their data,
- restriction of processing,
- object to processing based on a legitimate interest,
- data portability for data processed on the basis of a contract,
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
Website
The metasy.art website does not use cookies, analytics tools or trackers. Fonts are hosted on our own server; the website does not connect to Google servers.
The hosting provider records server logs: IP address, time of the request and the address of the page requested. The logs serve the security and diagnostics of the service (Article 6(1)(f) GDPR) and are kept by the hosting provider in accordance with its policy.
Data from case files and engagements
Personal data contained in case files, financial documents and evidence are processed solely on the basis of an engagement by a court, an authority or a client, to the extent necessary to prepare the expert opinion or analysis and subject to legally protected secrecy.