Last updated: 6 May 2026
Controller
The data controller is MACH TECHNOLOGIES PROSTA SPÓŁKA AKCYJNA, Św. Filipa 23/3, 31-150 Kraków, NIP PL6762701684, KRS 0001192155. GDPR contact: office@machtechnologies.eu.
Purposes of processing
- Handling enquiries sent via the contact form and conducting commercial discussions.
- Concluding and performing contracts for advisory, implementation and maintenance services.
- Compliance with accounting, tax and archival obligations under applicable law.
- Communicating with clients, partners and candidates in the course of cooperation.
- Measuring website traffic and improving site operation with Matomo.
Legal bases
- Art. 6(1)(b) GDPR — performance of a contract.
- Art. 6(1)(c) GDPR — compliance with legal obligations.
- Art. 6(1)(f) GDPR — legitimate interest (commercial contact, claim handling, system security).
- Art. 6(1)(a) GDPR — consent of the data subject, where consent is collected.
Recipients
Data may be shared with processors acting on our behalf: providers of IT infrastructure, hosting, email, communication and analytics tools, accounting offices and law firms. We do this only to the extent required for their tasks and under data-processing agreements.
We do not transfer data outside the European Economic Area without the safeguards required by Art. 46 GDPR.
Retention
- Commercial correspondence: up to 24 months from the last contact if no contract is signed.
- Contracts and settlement records: 5 years from the end of the financial year in which the tax obligation arose.
- Data processed on the basis of consent: until consent is withdrawn.
Rights of data subjects
- Right of access and to obtain a copy (Art. 15).
- Right to rectification (Art. 16) and erasure (Art. 17).
- Right to restriction of processing (Art. 18).
- Right to data portability (Art. 20).
- Right to object to processing based on legitimate interest (Art. 21).
- Right to withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.
- Right to lodge a complaint with the President of the Personal Data Protection Office (uodo.gov.pl).
Profiling and automated decision-making
We do not make decisions producing legal effects based solely on automated processing, including profiling.
GDPR contact
For data-protection matters write to office@machtechnologies.eu or to our registered office.