1. Data controller

The controller of data collected through majkocnc.eu is Majko – usługi techniczne – Konrad Miłoń, ul. Łukowa 2D, 43-332 Pisarzowice, Poland, tax ID: PL9372777563. Contact for data matters: info@majkocnc.eu, tel. +48 571 329 908.

If the seller in the order is Roman Miłoń P.P.U.H. „PRO-TECH”, that entity becomes a separate controller of the data necessary to conclude, perform and settle that order and handle its complaints. Its details are specified in the offer and order.

2. Data we process

• account data: username, full name, email, login details and settings;
• saved billing and shipping details, phone number, country, company and tax ID/EU VAT number;
• enquiry and order data: materials, quantities, dates, currency, delivery, messages, decisions and statuses;
• uploaded technical files, drawings and photographs, including their names and parameters;
• payment and settlement data received from the bank or payment provider, without storing full card details on the website;
• technical and security data such as IP address, request time, session identifiers and error logs.

3. Purposes and legal bases

• creating and managing an account, preparing a quotation, taking steps before entering into a contract and fulfilling an order — Article 6(1)(b) GDPR;
• invoices, taxes, accounting and other legal obligations — Article 6(1)(c) GDPR;
• website security, preventing abuse, establishing and defending claims, handling correspondence and organising work — legitimate interests under Article 6(1)(f) GDPR;
• optional activities requiring consent, if introduced in the future — Article 6(1)(a) GDPR. Consent may be withdrawn without affecting earlier processing.

Providing the data needed for an account, quotation or order is voluntary, but the relevant step cannot be completed without it. We do not require personal data in technical documentation where it is unnecessary.

4. Data recipients

Data may be received only by parties needed for the purpose: authorised employees and associates, the other seller identified in the order, hosting and email provider dhosting.pl, WordPress/WooCommerce maintenance providers, payment providers and banks, the accounting office, legal or tax advisers and couriers. Each receives only the data necessary for their task.

If a payment provider or another supplier transfers data outside the European Economic Area, it should apply the legal basis and safeguards required by the GDPR. Details of the particular provider are available when selecting a payment method.

5. Confidential technical documentation

1. Quotation files are not published in the standard media library or at an easily accessible public address. They are saved outside the public part of the website.
2. Downloading requires logging in and authorisation as the quotation owner or administrator. Files are served as attachments, and uploaded formats, sizes and contents are checked.
3. We do not use documentation for automated model training or marketing purposes. Operational access is granted to those preparing the quotation and carrying out production.
4. Customers should not submit secrets or data whose disclosure is unnecessary for the quotation. An additional NDA may be agreed before particularly sensitive materials are sent.

6. Retention period

• account — until deletion, and thereafter to the extent necessary for settlements, security and claims;
• quotations without an order and their files — for the time needed to handle the offer and potentially revisit the arrangements, then until the relevant limitation periods expire or earlier secure deletion;
• orders, invoices and tax data — for the period required by accounting and tax law;
• correspondence and complaints — until the matter is closed and the relevant limitation periods expire;
• security logs — for a period proportionate to the purpose of protecting the system.

The period may be longer where required by a dispute, public authority or obligation to preserve evidence, and shorter where the data is no longer needed and the law permits deletion.

7. Your rights

Within the limits of the GDPR, you have rights of access, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interests and withdrawal of consent. You may also lodge a complaint with the President of the Polish Personal Data Protection Office. Send your request to info@majkocnc.eu. We may ask you to confirm your identity to avoid disclosing data to the wrong person.

We do not make decisions about customers that produce legal effects solely by automated means. CNC quotations are prepared manually.

8. Cookies

The website currently uses only cookies and similar mechanisms necessary for operation: WordPress/WooCommerce sessions, login, security, cart and order, user choices and remembering dismissal of the cookie notice. Without them, the account, quotation or payment may not work correctly.

The website currently does not activate analytics or advertising cookies. If such tools are added, they will not be activated before voluntary consent; users will have an equally easy way to refuse and later change their choice.

Cookies can be deleted and blocked in browser settings. Blocking necessary cookies may prevent login, saving forms or payment. The payment provider’s website may use its own necessary cookies as described in its policy.

9. Policy changes

This policy may be updated following changes to the law, suppliers or website functions. The version date appears at the top of the page. Significant changes concerning accounts or new optional purposes will be communicated appropriately.