I. General Information

In the privacy policy, we inform you about the legal basis for processing personal data, the methods of collection, processing and use, and the rights of data subjects.

The Policy applies to all cases in which Merida Poland is the controller and processes personal data obtained from the data subject, as well as cases in which personal data has been obtained from other sources with the exception of personal data of employees and those processed under entrustment agreements.

II. Personal data controller

The administrator of your personal data is Merida Polska Spółka z ograniczoną odpowiedzialnością with its registered office in Zabrze (41-800) at ul. M.C. Skłodowskiej 35, entered in the register of entrepreneurs kept by the District Court in Gliwice, X Economic Department under the KRS number 0000019537, share capital 135 000 PLN, NIP: 631-23-00-850, REGON: 008174780 , hereinafter referred to as “Merida Polska”.

III. Data protection contact information

Please direct any inquiries or requests related to the processing of personal data by Merida Polska to the addresses below:

Merida Poland Sp. z o.o.
Street. M.C. Skłodowska 35
41-800 Zabrze

Or at the email address:
[email protected]

IV. Purposes, legal basis and retention period of personal data

Purpose of data processingLegal basisProcessing period
Register an account on our portalsArt. 6(1a) RODO consent of the data subjectuntil such time as consent is withdrawn
Performance of a contract, order to which the data subject is a partyArticle 6(1)(b) RODO performance of a contract, order to which the data subject is a partyuntil the performance of such contract, order and the statute of limitations for claims under the law
Performance of contract, order – personal data of persons indicated in contracts or for contactArt. 6(1)(f) RODO legitimate interest of the controllerpending
and statute of limitations on claims under the
RecruitmentArt. 6(1)(a) RODO consent of the data subject4 months from the end of recruitment
NewsletterArt. 6(1)(a) RODO consent of the data subjectuntil such time as you withdraw your consent
Response to inquiryArt. 6(1)(a) RODO consent of the data subjectuntil a response is given and for a period of 3 years from the end of contact (limitation period for possible claims) or the withdrawal of consent by the inquirer
ComplaintArt. 6(1)(f) RODO legitimate interest of the administratoruntil the statute of limitations for claims arising from
Accounting, taxArt. 6(1)(c) RODOFor a period of 6 years from the date of completion of the service, contract, order
Investigating claims or protecting against claimsArticle 6(1) f RODO legitimate interestNecessary for the performance of an obligation and the statute of limitations on claims
Marketing of products and services including profilingArt. 6(1)(a) RODO consent of the data subjectuntil such time as you withdraw your consent
Marketing of products and services including profilingArt. 6(1)(f) RODO legitimate interest of the administratoruntil an objection is filed
Organization and promotion of the eventArt. 6(1)(f) RODO legitimate interest of the administratoruntil the end of the event and the statute of limitations on claims
Contests, testsArt. 6 (1 a ) RODO consent of the data subjectUntil the withdrawal of consent or until the end of the competition, tests
and statute of limitations on claims

V. Source of data obtained and type of data provided by others

Merida Poland receives personal data directly from data subjects or through other persons ( from the person’s employer, from another employee or other entity with which the person continuously cooperates).

Where we obtain personal data directly from you, you have direct control over the extent of data collected by Merida Poland.

In the case of sharing of data by another person, Merida Polska usually collects contact data related to professional activities, such as: name, surname, telephone number, e-mail address, company name, position or function, and possibly other data resulting from the order, contract on the basis of which the data is shared.

VI. Cookies

We may collect personal information automatically through cookies on our websites. Cookies are small text files that a website can send to a user’s browser for storage on the user’s computer, tablet or other mobile device. Cookies can facilitate the use of the website by retaining and administering status, application, preference and other information about you. The settings of most browsers allow the acceptance of cookies, but users can change them to refuse cookies or receive a warning when they are sent.

If you would like more information about our use of cookies, please refer to the cookie policy available on our websites.

VII. Automated decision-making

The data you provide may be processed for the purpose of profiling and tailoring the marketing content, offers or information we send to your interests and business or professional activities.

The data you provide will not be processed for the purpose of automated decision-making.

VIII. Consequences of not providing data

  1. In cases of electronic forms (e.g., contact forms), providing data is voluntary, only failure to provide data indicated as mandatory will result in the inability to send the form, participate in the event or subscribe to the newsletter.
  2. In the case of data of persons who are parties to the contract/order, the provision of data necessary for the performance of the contract and legal obligations is a condition for the conclusion and performance of the contract.
  3. In the case of data collected by representatives for marketing, purchasing, sales activities, their submission is fully voluntary. The consequence of not providing them is that you cannot be contacted in the future.

IX. Recipients of personal data

We transfer personal data to other entities only when permitted by law. In such cases, we enter into agreements with a third party that include provisions and security mechanisms to ensure adequate protection of personal data and to maintain our standards.

Merida Poland is part of a worldwide network and, together with other professional service providers, conducts its business through third parties
based in other countries. Your personal data may therefore be transferred to a country outside the EU.

In the case of transfer of data to a third country for which there has not been a decision of the European Commission establishing an adequate level of protection, the transfer shall be carried out only on the basis of an agreement taking into account EU requirements
Regarding the transfer of personal data outside the EEA.

The data we store may be transferred:

  1. Entities that process personal data under entrustment agreements (processors)
  2. Providers of web hosting and website management services
  3. Providers of software delivery services, software and hardware maintenance services, backup, security, data analysis
  4. Entities implementing marketing campaigns
  5. Providers of survey services including customer satisfaction surveys
  6. Debt collection companies
  7. Auditors, experts, legal and tax advisors
  8. Law enforcement, regulatory, state and local government bodies under the law

X. Rights of data subjects

Under the RODO, you have the right to:

  1. access to data, including obtaining a copy of the data
  2. rectification (change, update) of data
  3. deletion of data (in cases indicated in the RODO )
  4. restrictions on the processing of personal data
  5. object to the processing
  6. Data portability where the basis of the processing is your consent or a contract to which you are a party
  7. withdraw your consent in case your data is processed on the basis of consent.In case you wish to unsubscribe from the newsletter, the link to unsubscribe of the service can be found in any message sent to you or please to use the data contained in point III “Contact details for data protection matters”

    If you wish to withdraw your consent to data processing, please use the the contact details in Section III “Contact details for data protection matters”

  1. lodge a complaint to the supervisory authority – the President of the Office for Personal Data Protection. A list of supervisory authorities in other EU member states is available at:

Merida Poland reserves the right to exercise the above rights after positive verification of the identity of the person applying for the exercise of the right.

The realization of the aforementioned rights depends on the specific conditions set forth in the RODO. If your request is denied, you will receive a response with the following
With reasons for the refusal.

If you wish to exercise your rights, use the data indicated in section III “Contact details for data protection matters”

Please do not send special categories of personal data (revealing racial or ethnic origin, political views, world views, trade union membership, information on physical or mental health, genetic data, biometric data, information on sexual life, sexual orientation, criminal convictions and violations of law) via contact forms, websites. If you provide such information, this will constitute your express consent to Merida Poland’s collection and use of such information in the manner specified in the form, the document in which the data was disclosed to us.

XI. Security

In order to ensure the security of personal data, Merida Polska selects and applies appropriate technical and organizational measures to ensure the protection of the processed data and applies safeguards to protect the data from being disclosed to unauthorized persons, as well as from being processed in violation of applicable laws. We have implemented appropriate data protection policies, procedures and training, and regularly review whether the measures in place are adequate to safeguard the data we hold.

XII. Note from the administrator

Merida Poland reserves the right to change this privacy policy, in particular when it becomes necessary or advisable due to the guidelines of the authorities responsible for the supervision of personal data protection processes, personal data processing practices, changes in technology, methods and purposes of personal data processing.

Last updated on 22/05/2018.