Personal data protection

Information notice

Last updated: 2026-09-30

1. 01Who controls your data

   The controller of your personal data is MAWANI sp. z o.o., Al. Jerozolimskie 85/21, 02-001 Warszawa, entered in the Polish National Court Register under KRS number 0000755064, NIP (tax ID) 7010890074.

   For anything concerning your personal data, write to us at mawani.handlowe@gmail.com. We have not appointed a data protection officer – at the scale of our business, the law does not require one.

2. 02Visiting the site

   This site uses no cookies, no analytics tools and no tracking scripts. We do not profile visitors and we show no advertising.

   The server that runs the site automatically records technical connection data – such as your IP address, the date and time, and your browser type. It is used only to keep the site secure and working. The legal basis is our legitimate interest (Article 6(1)(f) GDPR).

3. 03Contacting us by e-mail

   When you write to us, we process the data you send – usually your name, e-mail address and the content of your message – in order to reply and handle your matter. The legal basis is our legitimate interest (Article 6(1)(f) GDPR) and, where you ask about a purchase or cooperation, steps taken before entering into a contract (Article 6(1)(b) GDPR).

4. 04Recruitment

   If you apply for a role, we process the data in your application in order to run the recruitment:

   • your name, e-mail address and the information in your CV about your education, qualifications and employment history – under Article 6(1)(c) GDPR in conjunction with Article 22¹ of the Polish Labour Code or, for a civil-law contract or internship, under Article 6(1)(b) GDPR (steps taken at your request before entering into a contract);
   • any other data you choose to give us, such as your phone number, a profile link or salary expectations – on the basis of your consent, given by sending it (Article 6(1)(a) GDPR);
   • your data in future recruitments – only if you give separate consent to that (Article 6(1)(a) GDPR);
   • we do not need a photo or any special-category data, such as information about your health, beliefs or religion – please leave it out of your application.

5. 05Who receives your data

   We do not sell data or share it for marketing. Apart from public authorities where the law requires it, the only people with access are those at MAWANI handling the matter, and the companies that technically run our site and our e-mail:

   • Google – provider of the e-mail inbox (Gmail) that receives messages and applications.
   • Vercel – provider of the hosting on which the site runs.

6. 06Transfers outside the EEA

   Google and Vercel are companies based in the USA, so data may be processed outside the European Economic Area. This takes place on the basis of a European Commission adequacy decision (the EU-US Data Privacy Framework) or standard contractual clauses approved by the Commission.

7. 07How long we keep data

   We keep data only for as long as it is needed:

   • Server logs – for the period set by the hosting provider, for security purposes only.
   • Correspondence – until the matter is closed, and then until any possible claims become time-barred.
   • Job applications – until the recruitment ends; we then delete them within 3 months.
   • Applications with consent for future recruitments – for 12 months from sending, or until you withdraw consent, if sooner.

8. 08Your rights

   To exercise any of the rights below, write to mawani.handlowe@gmail.com. You have the right to:

   • access your data and receive a copy of it,
   • have inaccurate data corrected,
   • have your data erased or its processing restricted,
   • object to processing based on our legitimate interest,
   • receive the data you gave us in a portable form – where we process it on the basis of consent or a contract,
   • withdraw your consent at any time – without affecting the lawfulness of processing carried out before you withdrew it.

9. 09Complaints to the supervisory authority

   If you believe we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

10. 10Voluntary provision and automated decisions

    Providing data is voluntary. Without your name, e-mail address and CV, however, we cannot consider an application, and without an e-mail address we cannot reply to a message.

    We make no automated decisions and do no profiling. Every application is read by a person.