Skip to content
Metafox

Legal

Privacy Policy

This policy explains how Metafox collects, uses, and protects your personal data when you contact us or visit this website, and what rights you have under the GDPR (in Poland, RODO).

Last updated: 2026-08-08

1. Data controller (administrator)

The controller of your personal data is Metafox sp. z o.o., with its registered office at ul. Wspólna 4, 77-125 Półczno, Poland, entered in the National Court Register (KRS) under number 0000958830, NIP 8421787421, REGON 521451127. In matters concerning your personal data you can reach us at [email protected].

2. Purposes of processing

We process personal data to (a) respond to enquiries and correspondence you send us via our contact email or contact form, and to conduct the resulting communication; and (b) operate, secure, and maintain this website, including keeping server logs that record technical access data.

3. Legal basis for each purpose

Answering your enquiries and maintaining our related correspondence rests on our legitimate interest as controller (Art. 6(1)(f) RODO) in communicating with people who reach out to us. Operating and securing the website, including server logs, likewise rests on our legitimate interest (Art. 6(1)(f) RODO) in the security and stability of our service. Where we ask you separately for consent for a specific purpose, that processing is based on your consent (Art. 6(1)(a) RODO), which you may withdraw at any time.

4. Categories of data we process

When you contact us we process the data you choose to provide — typically your name, your email address, and the content of your message. When you visit the website, our servers automatically record technical data such as your IP address, the type of browser and device, and the date and time of the request.

5. Recipients and processors

Your data may be entrusted to service providers that support our operations: our hosting provider, SeoHost (a service operated by MICROHOST sp. z o.o.), which stores the website and its server logs and operates the mail servers that handle our correspondence. These providers process data only on our instructions and under a data-processing agreement. We do not sell your personal data and we do not share it for anyone else's marketing.

6. Retention periods

We keep enquiry correspondence for as long as needed to handle the matter you contacted us about, and afterwards for up to 3 years — the general limitation period for business-related claims under Polish law — in case of follow-up or to pursue or defend against claims. Where the law requires a longer period (for example, accounting and tax records kept for 5 years), we retain the data for that period. Server logs are retained for up to 12 months, after which they are deleted or anonymised.

7. Your rights

Subject to the conditions in the RODO, you have the right to access your personal data and obtain a copy of it, to rectify inaccurate data, to erase it ("right to be forgotten"), to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand. To exercise any of these rights, contact us at [email protected].

8. Right to lodge a complaint

If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

9. Cookies and local storage

This website sets no cookies. It stores a single functional item in your browser's localStorage — your language preference (mf_lang) — so the site remembers whether you prefer English or Polish. This value stays in your browser, is not shared with us or any third party, and, as a strictly necessary functional preference, does not require your consent.

10. Transfers outside the EEA

We do not currently transfer your personal data outside the European Economic Area (EEA). If we introduce tools or providers that involve a transfer to a third country, we will update this policy and ensure appropriate safeguards required by the RODO are in place.

11. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing, and we do not profile you.

12. Is providing your data required?

Providing your personal data is voluntary. However, providing at least your email address and message is necessary for us to receive your enquiry and reply to it — without it we cannot respond.