Privacy Policy

Legal information for the B2B online shop www.microtronik.de. If translations differ, the German version prevails unless mandatory law provides otherwise.

1 Controller

MD AUTO SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Aleja “Solidarności” 68, unit 121, 00-240 Warsaw, Poland
Email: info@microtronik.de | Website: www.microtronik.de
KRS: 0001215663 | REGON: 543669323 | NIP: 5253073954
VAT ID: PL5253073954 | EORI: PL525307395400000

Represented by the Management Board: Yurii Pashko, President of the Management Board, and Bohdan Polozhyshnyk, Member of the Management Board. Each member may represent the company independently.

2 Legal bases

We process personal data only where necessary to operate the website, answer business enquiries, manage customer accounts and perform B2B contracts, or where consent or a legal obligation applies.

The main legal bases are Article 6(1)(a) GDPR for consent, Article 6(1)(b) for contracts and pre-contractual steps, Article 6(1)(c) for legal obligations and Article 6(1)(f) for legitimate interests.

3 Website access and hosting

When the website is accessed, the server may process the IP address, date and time, requested page, referrer URL, browser, operating system, hostname, transferred data and HTTP status. This is required for technical delivery, stability and security.

Hosting and IT suppliers may act as processors under Article 28 GDPR. Logs are deleted when no longer required unless a security incident or law requires longer retention.

4 Customer accounts

Registration data may include name, company, business address, email, telephone number, VAT ID, credentials and account and order history. Processing is based on Article 6(1)(b) GDPR and, for statutory records, Article 6(1)(c). Accounts are deleted on request unless retention duties or outstanding claims apply.

5 Orders invoices and payment

We process contact, company, billing, delivery, VAT, order and payment data to accept orders, deliver goods, issue invoices and monitor payment. Processing is based on Article 6(1)(b) and (c) GDPR. In case of default, necessary data may be shared with legal advisers, courts or collection providers under Article 6(1)(f).

6 Delivery

Necessary recipient and shipment data may be sent to DHL, DPD or FedEx. This may include company and contact names, delivery address, email, telephone number and shipment details. The legal basis is Article 6(1)(b) GDPR.

7 Enquiries

We process information submitted through the enquiry form or by email. Contract-related enquiries rely on Article 6(1)(b) GDPR; other business enquiries rely on Article 6(1)(f).

8 Newsletter

With consent, we send product and company information by email. The legal basis is Article 6(1)(a) GDPR. Consent may be withdrawn at any time by the unsubscribe link or email. Evidence of subscription, confirmation and withdrawal may be retained. Any external newsletter provider must be identified in the published policy.

9 Google reCAPTCHA

Google reCAPTCHA may protect forms against automated submissions. The EEA provider is generally Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. IP address, browser, device and usage data may be processed and transferred outside the EEA.

Where consent is required, activation relies on section 25(1) TDDDG and Article 6(1)(a) GDPR. Further information: https://policies.google.com/privacy.

10 Cookies analytics and advertising

Strictly necessary technologies support login, basket, sessions and security. Their use may rely on section 25(2) TDDDG and Article 6(1)(b) or (f) GDPR.

Non-essential analytics and advertising services may be activated only after consent. The live policy and consent interface must identify every service actually used, including provider, purpose, retention and international transfers. Consent may be changed or withdrawn at any time.

11 Recipients and international transfers

Recipients may include hosting, IT, communications, newsletter, analytics, advertising, delivery, accounting, banking, legal and collection providers and authorities. International transfers take place only under Articles 44 et seq. GDPR, such as an adequacy decision, standard contractual clauses or a statutory exception.

12 Retention

Data is retained only for the relevant purpose, mandatory record-keeping period or establishment, exercise or defence of legal claims. Enquiries are deleted after completion unless a business relationship or duty requires retention. Contract, invoice and tax records are held for the statutory period. Newsletter addresses are removed from active distribution after withdrawal.

13 Individual rights

Subject to legal conditions, individuals may request access, correction, deletion, restriction and portability, object to processing and withdraw consent. Requests may be sent to info@microtronik.de.

Complaints may be submitted to the President of the Personal Data Protection Office, ul. Stanisława Moniuszki 1A, 00-014 Warsaw, Poland, or another competent supervisory authority.

14 Security changes and date

We use appropriate technical and organisational safeguards. Order processing does not involve solely automated decisions under Article 22 GDPR. This policy may be amended when the website, services or law changes.

Version date: September 2026