Privacy policy

Controller

Who is responsible for your data

The data controller is M4Wind Nowicki Petters Sp.k., ul. Arkońska 36, 71-470 Szczecin, Poland, KRS 0000440822, Tax ID 851-316-62-47, REGON 321307454.

For privacy questions or requests concerning your rights, email our data-protection contact at hr@m4wind.pl or write to our registered address.

Data scope

Information we process

• Contact-form data: name, email, telephone, company, message and selected site language.
• Information supplied through correspondence, calls and project or commercial relationships.
• Candidate information submitted during recruitment run by M4Wind or through the Traffit platform.
• Technical data needed for security and operation, such as server logs, IP address, request time, browser type and error information.
• Your privacy setting stored in a necessary cookie.

Purposes and legal bases

Why we use personal data

• Handling enquiries and preparing cooperation or a contract — steps before a contract and our legitimate interest in business correspondence.
• Delivering projects, contracts, accounting and legal duties — performance of a contract and compliance with law.
• Recruitment — steps requested by the candidate, employment-law duties and, for additional data or future recruitment, consent.
• Protecting the website, preventing abuse and establishing or defending claims — M4Wind’s legitimate interests.
• Loading the optional OpenStreetMap map and recording your preference — consent, which can be withdrawn in Privacy settings.

Cookies and external services

What is stored or loaded

The public website stores the necessary m4wind_consent cookie, which remembers the version and scope of your choice for 180 days. The protected CMS sets an additional necessary PHPSESSID session cookie solely to authenticate editors. We currently use no analytics or advertising cookies.

After consent, the Projects page loads the local Leaflet library and map tiles from OpenStreetMap servers. Opening the project list alone does not start this connection. You can change consent from the footer.

Vacancies are fetched server-to-server from Traffit. Selecting Apply opens that external recruitment service, whose own privacy terms then apply.

Recipients

Who may receive data

Data may be accessed by authorised M4Wind staff and contractors and by hosting, IT, email, legal, accounting and recruitment providers under appropriate agreements and only where necessary.

We may disclose data to public authorities where law requires it. If a provider processes data outside the European Economic Area, we use safeguards required by the GDPR, such as an adequacy decision or standard contractual clauses.

Retention

How long we keep data

• Enquiries and correspondence — as long as needed to respond, manage cooperation and cover applicable claim and legal periods.
• Contracts and accounting records — for periods required by tax, accounting and claims law.
• Recruitment data — for the recruitment process and, for future recruitment, for the period stated in consent or until withdrawal.
• Technical logs — for the time needed for security, diagnostics and abuse prevention.
• Privacy settings — for 180 days unless you change the choice or remove the cookie earlier.

Your rights

You remain in control

• Access your data and receive a copy.
• Correct, erase or restrict processing where the legal conditions apply.
• Request data portability and object to processing based on legitimate interests.
• Withdraw consent at any time without affecting processing already carried out lawfully.
• Lodge a complaint with the President of the Polish Personal Data Protection Office.

Security and updates

How we protect information

We use proportionate organisational and technical measures, access controls, secure transmission and risk-based backup and handling procedures. No internet system can eliminate every risk.

We may update this policy when the website, providers or law change. The current version and publication date will remain available here.