Privacy policy
This policy explains how MaViAl Sp. z o.o. processes personal data when you use mavial.pl, contact the company, apply for a vacancy or request a service.
1. Controller and contact
The controller is MAVIAL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, ul. Stanisława Leszczyńskiego 4/29, 50-078 Wrocław, Poland, KRS 0001058460, NIP 8971927502, REGON 526420479. Privacy requests may be sent to legal@mavial.pl.
2. Scope
This policy covers mavial.pl, its software and digital-product pages, vacancy and candidate routes, contact correspondence, BIM, construction, printing, residence-support and company-service enquiries, and pages describing digital assets for sale.
3. Data categories
Depending on the interaction, MaViAl may process contact and identity data, professional and recruitment information, enquiry and project data, correspondence, order or billing data, consent records, and technical data such as IP address, device, browser, timestamps and requested URLs.
4. Purposes and legal bases
Data may be processed to answer enquiries and take steps before a contract; perform a contract; operate recruitment and candidate workflows; comply with legal obligations; protect the website, prevent abuse and establish or defend claims; improve services through consent-based analytics; and display consent-based advertising. The applicable basis is Article 6(1)(a), (b), (c) or (f) GDPR, as appropriate.
5. Recipients and processors
Data may be available to authorised MaViAl personnel and necessary service providers such as hosting, email, security, analytics, advertising, accounting, legal and technical vendors. Public authorities may receive data when the law requires it. Providers act under the applicable contractual and legal safeguards.
6. International transfers
Some technology providers may process data outside the European Economic Area. Where required, MaViAl relies on an adequacy decision, Standard Contractual Clauses or another lawful transfer mechanism and applies supplementary safeguards where appropriate.
7. Retention
Data is kept only for the period needed for the relevant purpose and then deleted or anonymised, unless a longer period is required by tax, accounting, employment, limitation or other law. Recruitment, enquiry, contract, security and consent records may therefore have different retention periods.
8. Analytics, advertising and consent
Google Analytics 4 and Google AdSense are configured behind consent controls. Analytics and advertising storage are denied by default until the applicable consent signal permits use. You can revisit privacy and cookie settings through the footer control. Browser or device controls may provide additional choices.
9. Your rights
Subject to the conditions in the GDPR, you may request access, rectification, erasure, restriction, portability or objection; withdraw consent at any time without affecting prior lawful processing; and complain to the President of the Personal Data Protection Office (UODO) in Poland.
10. Required and optional data
Fields marked as required are needed to process the selected request or application. Without them, MaViAl may be unable to respond or provide the requested workflow. Optional data can be omitted.
11. Automated decisions
MaViAl does not make a decision that produces legal or similarly significant effects solely through automated processing unless this is expressly disclosed and a lawful basis and safeguards apply. Search, matching and anti-abuse tools may assist human-operated workflows.
12. Security and updates
MaViAl applies proportionate technical and organisational measures, including access controls, transport encryption, logging and data minimisation. No internet service can guarantee absolute security. Material policy changes will be published on this page with an updated review date.
Last reviewed: 2026-08-29