Privacy Policy for the website of MCC Medale

Dear User, this Privacy Policy sets out the rules governing the processing of personal data of individuals using the website available at https://mccmedale.pl, including those who contact us, submit requests for a quote or use the forms available on the website.

In this Privacy policy, you will learn, in particular, who is the controller of your personal data, for what purposes and on what legal grounds we process your data, to whom we may disclose it, and what rights you have in connection with the processing of your personal data.

1. Who is the controller of your personal data?

The controller of your personal data is MCC BARTŁOMIEJ PAKUŁA, with its registered office in Łódź, at ul. Traktorowa 128, door no. 38, NIP (tax ID): 7272793277, REGON (statistical no.): 101835749, e-mail: mcc@mccmedale.pl, hereinafter referred to as the ‘Controller’ or ‘MCC’. For matters relating to the protection of personal data, you can contact the Controller by e-mail at: mcc@mccmedale.pl or in writing at the Controller’s registered office address.

2. How do we handle your personal data?

We process your personal data in accordance with applicable legislation, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, known as the ‘GDPR’. We seek to ensure that data is processed lawfully, fairly and transparently, collected solely for specific and legitimate purposes, relevant to those purposes, accurate and up to date, and adequately protected against unauthorised access.

3. For what purposes do we process your data?

We may process your personal data, in particular, for the following purposes:

  1. to handle communications with us, including enquiries submitted via forms, e-mail, telephone or other communication channels;
  2. to prepare and present an offer;
  3. to contact you regarding an enquiry you have submitted or an order being processed;
  4. to conclude and perform a contract;
  5. to handle complaints, reports and correspondence;
  6. to fulfil the legal obligations incumbent on the Controller, in particular tax and accounting obligations;
  7. to pursue claims or defend against claims;
  8. to ensure the proper functioning of the website, including maintaining basic statistics, analysing website traffic and using cookies.

4. What data may we process?

Depending on how you use the website or contact us, we may process personal data that you have voluntarily provided to us, including, in particular: your full name, address, e-mail, telephone number, the name of your company or organisation, your job title or role, and other personal data provided in the body of messages, correspondence or attachments.

In order to handle your enquiry, we may also process information and materials relating to the enquiry, including details of the selected product, quantity, design, expectations regarding fulfilment, and any files or materials provided.

We may also process technical data relating to your use of the website, including your IP address, browser details, device information, operating system details and cookies.

5. Is providing your data mandatory?

The provision of personal data is voluntary, but in many cases it is necessary for us to process an enquiry addressed to us, prepare a quotation, get back to you or fulfil an order. Failure to provide the data required to contact you or process your enquiry may prevent us from responding, preparing a quotation or fulfilling your order.

6. On what legal basis do we process data?

We process personal data on the following legal bases:

  1. Article 6(1)(b) of the GDPR – where processing is necessary for taking steps at the request of the data subject prior to entering into a contract or for the performance of a contract;
  2. Article 6(1)(c) of the GDPR – where processing is necessary for compliance with a legal obligation to which the Controller is subject, in particular tax and accounting obligations;
  3. Article 6(1)(f) of the GDPR – where processing is necessary for the purposes of the Controller’s legitimate interests, such as conducting correspondence, handling enquiries, business contact, pursuing or defending against claims, ensuring website security and compiling basic statistics;
  4. Article 6(1)(a) of the GDPR – where, in a specific case, processing is based on consent, e.g. in relation to non-essential cookies or marketing activities requiring consent.

7. Contacting MCC and sending requests for quotes

You can contact us, in particular, via the quotation form available on our website, the contact form, by e-mail, by telephone or by any other means of your choice. We process the personal data provided when you contact us for the purposes of handling your enquiry, providing a response, preparing and presenting a quotation, following up on your enquiry, and, where applicable, the subsequent fulfilment of your order.

If you are contacting us on behalf of a company, institution or other organisation, we may also process your data on the basis of our legitimate interest in maintaining business contacts and handling correspondence.

8. Forwarding enquiries regarding pins and key chains to Pinswear

If you submit a request for a quote or an enquiry to MCC regarding pins, badges, key chains or similar products, regardless of how the enquiry is submitted, the personal data provided in connection with that enquiry may be forwarded our sister brand Pinswear, operated by the company under the business name PINSWEAR sp. z o.o., with its registered office in Łódź, address: ul. Traktorowa 128, door no. 38, 91-204 Łódź, NIP (tax ID): 7292718385, e-mail: wspolpraca@pinswear.com.

Data is transferred to Pinswear for the purposes of processing your enquiry, preparing and presenting a quote, contacting you, and, where applicable, processing your order for pins, badges, key chains or similar products.

Why do we operate in this way? This is due to the division of specialties within our group. MCC focuses on the production of medals, orders and coins, while enquiries regarding pins and key chains are handled by Pinswear. In this case, Pinswear may process the data provided as a separate controller of personal data to the extent necessary to prepare and present a quotation, respond to your enquiry and, where applicable, fulfil your order.

We only pass on to Pinswear the data necessary to process enquiries regarding orders for pins, badges, key chains or similar products. Data relating to enquiries handled directly by MCC will not be passed on to Pinswear, unless this is necessary for the proper handling of the enquiry in question or is done on the basis of separate arrangements with the customer.

9. Who might we share your data with?

We may share your personal data with organisations that support us in running our business and maintaining our website, in particular:

  1. hosting and IT service providers;
  2. e-mail and communication tool providers;
  3. organisations that manage online forms;
  4. accountancy firms, tax advisers, legal advisers or other entities providing advisory services;
  5. entities providing courier, postal or transport services, where this is necessary to fulfil an order;
  6. Pinswear – in the case of enquiries regarding pins, badges, key chains or similar products;
  7. public authorities or other authorised entities, where the obligation to disclose data arises from legal provisions.

10. Is data transferred outside the European Economic Area?

As a rule, we do not intend to transfer your personal data outside the European Economic Area.

However, where data is transferred outside the European Economic Area in connection with the use of specific IT tools or external services, this will take place exclusively in accordance with the mechanisms provided for by the GDPR, in particular based on an adequacy decision of the European Commission or based on standard contractual clauses.

11. Do we use profiling?

We do not make automated decisions about you, including profiling, that would have legal consequences for you or otherwise significantly affect you.

12. How long do we retain data?

We retain personal data for the period necessary to fulfil the purposes for which it was collected.

We retain data provided when you contact us or submit an enquiry for the period required to handle the enquiry, prepare a quotation and conduct correspondence, and subsequently for the period necessary to safeguard against any potential claims.

If a contract is concluded or an order is fulfilled, the data may be retained for the period required by law, in particular tax and accounting regulations, as well as for the limitation period for any potential claims.

We process data on the basis of consent until such consent is withdrawn, unless there is another legal basis for continued processing.

13. What rights do you have?

In connection with the processing of personal data, you have the following rights:

  1. the right of access to your data;
  2. the right to request rectification of your data;
  3. the right to request erasure of your data;
  4. the right to request restriction of processing;
  5. the right to data portability, where processing is based on consent or a contract and is carried out by automated means;
  6. the right to object to the processing of data if the basis for processing is the Controller’s legitimate interest;
  7. the right to withdraw consent at any time where data is processed on the basis of consent; the withdrawal of consent does not affect the lawfulness of processing carried out prior to its withdrawal;
  8. lodge a complaint with the competent supervisory authority, i.e. the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

To exercise your rights, please contact us at the following e-mail address: mcc@mccmedale.pl.

14. Cookies and the consent management tool

The website uses cookies, which are small text files stored on the User’s device.

Cookies may be used, in particular, to ensure the website functions correctly, to save selected settings, to compile statistics, to analyse how the website is used and – if the User has given their consent – for marketing purposes.

The website may use the following types of cookies:

  1. essential cookies – necessary for the website to function properly;
  2. analytical cookies – they help us understand how Users interact with the website;
  3. marketing cookies – used for marketing purposes, provided the User has given their consent.

To manage consent for the use of cookies, we use CookieFirst, a platform provided by Digital Data Solutions B.V., based in Amsterdam, the Netherlands. CookieFirst enables us to display a cookie banner, save the User’s cookie preferences, and record consent or its withdrawal.

In connection with the use of CookieFirst, the following information may be processed in particular: information regarding the status of consent or its withdrawal; an anonymised IP address; information about the browser and device; the date and time of the visit to the website; the URL of the page on which cookie preferences were saved or changed; the approximate location; and the User’s technical identifier.

CookieFirst is used to obtain and record consent to the use of cookies, where such consent is required by law. The legal basis for data processing in this regard is Article 6(1)(c) of the GDPR, i.e. compliance with a legal obligation to which the Controller is subject, and, in the case of cookies not required for the website to function, the User’s consent as well.

The User may change their cookie settings at any time using the consent management tool available on the website or via their web browser settings. Disabling certain cookies may affect the way the website functions.

15. Server logs

Using the website involves sending requests to the server on which the website is hosted. Each request may be recorded in the server logs.

The logs may contain, in particular, the IP address, the date and time of the connection, information about the web browser, the operating system, the device and the address of the website from which the User accessed our website.

This data is used for technical, administrative and statistical purposes, and to ensure that the website is secure.

16. Changes to the Privacy Policy

The Controller may modify this Privacy Policy, in particular in the event of changes to legislation, the website’s functionality, the IT tools used, or the way personal data is processed.

Last updated: 24 June 2026