Privacy Policy

This Privacy Policy aims to explain how the personal data of Users of the website www.maverie.pl (hereinafter referred to as the “Website”) is processed. Ensuring the highest possible level of data protection for all Website Users is our priority. We operate in accordance with our established security policy and on the basis of applicable legal provisions, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as “GDPR”). Furthermore, this Privacy Policy aims to explain the rights Users have regarding the restriction of the use of personal data, as well as to present the procedures we implement to protect such data.

Please note that this Privacy Policy is for informational purposes only and does not create any binding obligations for you.

Data Collection and Processing by the Authorized Entity

The entity authorized to process the personal data of Website Users—acting as the data controller—is Muscari spółka z ograniczoną odpowiedzialnością with its registered office in Warsaw, ul. Dobra 4, 00-388 Warsaw, Poland, Tax Identification Number (NIP): 7011021481, National Court Register (KRS) enterprise register number: 0000883750 (hereinafter referred to as the “Data Controller” or the “Company”). The Data Controller has not appointed a Data Protection Officer (DPO).

The Data Controller undertakes to keep the personal data of Website Users confidential and not to process such personal data without their consent or another valid legal basis. Should you have any questions or comments regarding our Privacy Policy or the processing of your personal data, please contact us via email at: office@maverie.pl.

Purpose and Location of Personal Data Processing

The Website is intended primarily, but not exclusively, for its Users, including customers or potential customers of the Company—namely individuals interested in the services provided by the Company in the scope of production and sale of women’s clothing.

Cooperation and interaction with all Website Users may take place through:

• Sending an inquiry to the aforementioned or any other email address of the Company (office@maverie.pl);
• Submitting an inquiry via contact forms available in the sections of the Website, if such forms are provided; or
• Direct contact with the Company, e.g., via telephone call or in-person meeting.

In each case, the User provides the personal data required by us to enable an initial verification of the User’s needs, assess whether the User is a customer, a potential customer, or an interested party in another capacity, and select the most optimal form of cooperation. This information is used to provide our services.

Voluntariness of Providing Data and Rights to Verify, Modify, Object, Withdraw Consent, and Request Erasure

Providing personal data by Users is entirely voluntary. The processing of personal data is carried out in accordance with this Privacy Policy exclusively by authorized personnel.

• Newsletter: If a Website User wishes to subscribe to our Newsletter, providing personal data is mandatory; otherwise, using the Newsletter service—which is equivalent to concluding an electronic service provision agreement with us—will not be possible, and such an agreement will neither be concluded nor performed by us.
• Marketing Consent: Subscribing to the Newsletter or using the contact form may involve giving separate, voluntary consents to receive commercial information electronically or via SMS messages (marketing), provided the User makes such a choice using dedicated tools (e.g., ticking appropriate checkboxes).
• User Rights: Every User has the right to withdraw their consent to the processing of personal data at any time, verify, modify (supplement, rectify, or restrict processing), request the erasure of their personal data at any time, and object to processing based on their particular situation. Relevant requests should be submitted to the email address provided above (office@maverie.pl) or in writing to the Data Controller’s registered address.
• Supervisory Authority: Furthermore, every User has the right to lodge a complaint with a supervisory authority dealing with personal data protection, namely the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych in Poland).
• Unsubscribing: Newsletter subscription can be cancelled at any time without giving any reason, via the unsubscribe link included in the email or by contacting the Administrator. Similarly, any User may withdraw direct marketing consent at any time.

Categories and Purposes of Processed Personal Data

The Data Controller processes personal data within the meaning of the GDPR provided by Website Users and uses them exclusively for the purposes described in this Privacy Policy. Data is not transferred, either for consideration or free of charge, to third parties, including legal entities and other organizational units, unless it is done with the explicit consent of the User or upon the request of an authority authorized by law. Users’ data may, however, be transferred to permanent business partners cooperating with the Company (e.g., IT service providers, hosting providers), but this will take place in accordance with legal requirements and to the extent necessary for service provision.

Additionally, the Data Controller collects technical data concerning Users visiting the Website, including through the use of cookies and analytical tools, based on consents expressed by the User via the cookie banner. This data includes information regarding how Users utilize the Website, the frequency of such use, the IP address of each User’s computer, browser type, computer location, URL address of requested resources, and other operating system parameters of the User’s computer. This data is used for statistical, functional, and marketing purposes (according to the preferences selected in the cookie banner).

Third-Party Websites

Our Website may contain links to third-party websites over which the Data Controller exercises no control. The Data Controller is not directly or indirectly responsible for any damage or loss incurred in connection with products or services offered on such websites. Furthermore, the Data Controller assumes no responsibility for compliance with data protection policies on third-party websites or for any other aspects related to the operation of these websites. Clicking on links redirecting to these websites is done at the Users’ sole risk. We recommend that every User, upon entering an external website, reviews the privacy policy available on that specific site. The policy available on this Website applies solely to the use of our Website.

Legal Bases and Scope of Personal Data Processing

The Data Controller is authorized to process Users’ personal data on the following legal bases arising from Article 6 of the GDPR:

1. User’s consent (Article 6(1)(a) of the GDPR) – in the case of voluntary marketing consents, newsletter subscription, use of the contact form for quote inquiries, as well as regarding analytical/marketing cookies managed via the cookie banner on the Website. Maximum scope of personal data provided: first and last name, gender, email address, telephone number, or email address only.
2. Performance of a contract or taking steps prior to entering into a contract (Article 6(1)(b) of the GDPR) – for the provision of the Newsletter service or the fulfillment of services related to the sale of clothing. Maximum scope of personal data provided: first and last name, gender, email address, telephone number, or first name and email address only.
3. Legitimate interests pursued by the Data Controller (Article 6(1)(f) of the GDPR) – for the purpose of establishing, exercising, or defending legal claims in court proceedings and ensuring IT security of the Website. Maximum scope of personal data provided: first and last name, gender, email address.

Principles of Personal Data Processing

The processing of personal data complies with the principles set out in Article 5 of the GDPR, which include:

1. Lawfulness, fairness, and transparency – data is processed legally based on the grounds set out in Article 6 of the GDPR.
2. Purpose limitation – data is collected for specified, explicit, and legitimate purposes and not further processed in a manner incompatible with those purposes.
3. Data minimization – processing is limited to data that is adequate, relevant, and necessary (e.g., first name and email address in the contact form).
4. Accuracy – we strive to ensure data is accurate and updated upon the user’s request.
5. Storage limitation – data is stored in a form permitting identification for no longer than necessary for the purposes for which the personal data are processed, including the duration of the Newsletter subscription and for a maximum period of 6 years (limitation period for civil claims).
6. Integrity and confidentiality – data is processed in a manner that ensures appropriate security, including protection against unauthorized or unlawful processing and accidental loss, destruction, or damage, using appropriate technical and organizational measures.
7. Accountability – the Data Controller is able to demonstrate compliance with these principles.

Security of Personal Data

The Data Controller has implemented appropriate technical and organizational measures—taking into account the state of the art, the costs of implementation and the nature, scope, context and purposes of processing as well as the risk of varying likelihood and severity for the rights and freedoms of natural persons—to ensure a level of security appropriate to that risk, in accordance with Article 32 of the GDPR.

Recipients of Data

Apart from the Data Controller, recipients of Users’ personal data may include entities providing services to the Company, in particular: IT service providers, hosting providers, software providers, as well as legal and accounting advisors. These entities process data solely based on data processing agreements and strictly in accordance with the Data Controller’s instructions.

Use of “Cookies” Text Files

The Website uses cookies. These are text files sent by the server and stored on the User’s end device. Cookies are used to ensure the proper functioning of the Website, as well as for statistical and marketing purposes.

Users can manage their preferences regarding cookies at any time via the cookie management tool (cookie banner) available on the Website or by changing their web browser settings (blocking or limiting the storage of cookies). Please note, however, that disabling essential cookies may affect the proper functioning of certain features of the service.

Legal Notices

The Data Controller reserves the right to amend this Privacy Policy in the event of changes in legal regulations or the internal business profile of the Data Controller, by publishing the updated text of the Privacy Policy on the Website. Users will be informed of any significant changes in a transparent manner on the Website.