Privacy — B2B enquiries

This notice covers enquiries sent to Masuria Living through the contact form and related correspondence.

Controller and contact

The controller is Masuria Industry sp. z o.o., Olsztyńska 5F, 14-100 Ostróda, Poland. Telephone: +48 89 646 49 62. For enquiries and data protection matters: anna@masurialiving.com; German-language enquiries: katarzyna@masurialiving.com.

Data we process

The form requires your full name, email address and message. Company, country and telephone number are optional. We also process information you choose to include in your correspondence. Please do not send information that is unnecessary for your enquiry.

Purpose and legal basis

We use the data to respond and discuss products or business cooperation. If you act on your own behalf and ask us to take steps before entering into a contract, the basis is Article 6(1)(b) GDPR. For other correspondence, including contact with a company representative, the basis is Article 6(1)(f) GDPR — our legitimate interest in handling enquiries and maintaining business relationships. Data necessary to establish, exercise or defend legal claims may also be processed on this legitimate-interest basis. Submitting the form does not constitute consent to a newsletter.

Retention

We retain data while handling your enquiry and related discussions about cooperation. The employee handling the matter assesses the need for continued storage based on the progress of the correspondence, ongoing cooperation and legal obligations. We delete data when the purpose ends and there is no other basis for retaining it. Where correspondence relates to a concluded contract or a legal claim, the relevant data will be retained for the period required by law or until the applicable limitation period expires; if proceedings remain pending, until their final conclusion. This rule also covers messages held in email inboxes.

Recipients

We also use Pipedrive CRM to manage business contacts and enquiries; it processes data on our behalf. Access may be granted to authorised staff handling enquiries and to providers of hosting, email and IT support, insofar as necessary to provide those services. Providers acting on our behalf should process data under a data processing agreement. Data may also be disclosed to competent authorities where required by law.

Transfers outside the EEA

Using Pipedrive may involve processing outside the EEA, including in the USA. Transfer safeguards, particularly the European Commission’s standard contractual clauses, are described in Pipedrive’s data processing agreement. The sub-processor list identifies processing locations. Contact us to request a copy of the applicable safeguards.

Your rights

Subject to the conditions of the GDPR, you may request access, rectification, erasure or restriction of processing. You may object on grounds relating to your particular situation to processing based on legitimate interests. Data portability applies where the GDPR conditions are met, in particular for automated processing based on a contract. You may complain to the President of the Polish Personal Data Protection Office (uodo.gov.pl) or to the competent supervisory authority in your country of habitual residence, work or the alleged infringement. Please send requests to the contact address above.

Voluntary provision and automation

Providing data is voluntary, but the form cannot submit an enquiry without the required fields. The form module sends a message to a contact person; it does not make decisions that produce legal or similarly significant effects on an individual. This notice covers B2B contact; cookies and other website features require separate information.