Privacy policy

Last updated: 2 November 2026.

Controller

The controller of your personal data is MEGAZONE Sp. z o.o., Nadrzeczna 7 A/Box E30, 05-552 Wólka Kosowska, Poland, entered in the National Court Register (KRS) under number 0001267429, NIP 1231611483, REGON 545758723. For any queries about your personal data, please contact us at offer@megazone.com.pl.

Contact by phone, e-mail and WhatsApp

When you contact us, we process the details you give in your message or call: your name, company name, e-mail address, phone number and the content of your enquiry. We do this to reply and prepare a quote (Art. 6(1)(b) GDPR: steps taken at your request prior to entering into a contract) and on the basis of our legitimate interest in corresponding with customers (Art. 6(1)(f) GDPR).

We keep the data for as long as we need to handle your enquiry, and then until any legal claims become time-barred. Giving us your details is voluntary, but we cannot reply without them. WhatsApp conversations are also subject to the rules of WhatsApp (Meta).

B2B shop and quote requests (shop.megazone.com.pl)

When you send a quote request in the B2B shop, you give us your contact details (name, company name, e-mail address or phone number), a message and a list of products. We process them to prepare and send the quote and to contact you about it (Art. 6(1)(b) and (f) GDPR). The quote is available via a dedicated link; we record when it was first opened and your decision (accepted, declined, change requested). Retention is the same as for e-mail contact.

The shop runs on our server in the European Union (INTERNET CZ, a.s., Czech Republic), accessed through Cloudflare. E-mails (request confirmation, quote) are sent through Resend, Inc. (USA); transfers outside the EEA rely on the mechanisms provided by the GDPR, such as standard contractual clauses. Until you send it, the quote list is stored only in your browser.

Visits to the site

The site runs on Cloudflare infrastructure. On every visit your browser sends standard technical information, such as your IP address, browser type and the address of the page. Cloudflare processes it on our behalf to deliver the site and protect it from attacks.

We also keep our own visit statistics without cookies. We record only: the page visited, its language, the country (derived from your IP address, which we do not store), the device type and the domain of the referring site. This data does not allow you to be identified. The legal basis is our legitimate interest in analysing how the site is used in order to improve it (Art. 6(1)(f) GDPR).

Google Analytics

Only if you agree in the cookie banner do we use Google Analytics 4 (Google Ireland Limited) — on this site and in the B2B shop, separately on each site. It sets cookies and collects information about how you use the site, such as pages visited, time on the site, approximate location and device type. The legal basis is your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time via “Cookie settings” at the bottom of the page. Data may be transferred to Google LLC in the USA under the European Commission’s adequacy decision for the EU-U.S. Data Privacy Framework.

Map

The map on the contact page comes from OpenStreetMap. To show it, your browser downloads map tiles from servers of the OpenStreetMap Foundation (United Kingdom), which receive your IP address. The map sets no cookies. The legal basis is our legitimate interest in showing how to find us (Art. 6(1)(f) GDPR). The “Open in Google Maps” and “Get directions” buttons take you to Google’s site, where Google’s rules apply.

Social media

Links to our profiles go through our own addresses (e.g. facebook.megazone.com.pl), which count clicks: we record the platform, the place on our site, the country and the device type, but not your IP address. Once you are on the social network, its own rules apply.

Recipients

Data may be received by companies that process it on our behalf (processors): Cloudflare (infrastructure and site statistics; Cloudflare, Inc. in the USA participates in the EU-U.S. Data Privacy Framework), the provider of the shop’s server (INTERNET CZ, a.s.), our e-mail hosting provider, our e-mail sending service (Resend, Inc.) and, only with your consent, Google (Google Analytics). We do not sell your data, and we do not subject you to decisions based solely on automated processing, including profiling (Art. 22 GDPR).

Your rights

You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. You can withdraw consent at any time; this does not affect the lawfulness of processing based on consent before its withdrawal. You may also lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw).