Maritime & Environmental Consulting

Privacy and Cookie Policy

Effective from 3 September 2026

1. Data controller

The controller of the personal data processed in connection with the use of the MASAD website is:

MASAD sp. z o.o.
11/811 Jana Heweliusza St.
80-890 Gdańsk
VAT Number: 5833529856
REGON: 540840302
KRS: 0001153441

You can contact the administrator via email at: info@masad.pl and by phone on: +48 58 500 82 44.

2. Scope of processed data

In connection with your use of the website, we may process the following data:

  • full name;
  • email address;
  • telephone number, if voluntarily provided;
  • subject and content of the sent message;
  • data regarding conducted correspondence;
  • device's IP address;
  • technical information regarding the device, browser and operating system;
  • data concerning website usage, if the user consents to analytical cookies.

Providing data in the contact form is voluntary, but data marked as required are necessary to send a message and receive a reply.

Please do not submit special category data through the contact form, in particular information regarding health, political opinions, religious beliefs, trade union membership or other sensitive data, unless it is necessary.

3. Purposes and legal bases for data processing

Personal data may be processed for the following purposes:

  1. Handling enquiries and conducting correspondence – on the basis of the controller's legitimate interest, consisting in communicating with persons interested in the activities and services of MASAD, in accordance with Article 6(1)(f) of the GDPR.
  2. Taking steps prior to entering into a contract or the performance of a contract – if the sent message concerns the preparation of a quote, an order or cooperation, pursuant to Article 6(1)(b) of the GDPR.
  3. Compliance with legal obligations, in particular tax, accounting and complaint-handling obligations – pursuant to Article 6(1)(c) of the GDPR.
  4. Establishment, exercise or defence of legal claims – on the basis of the controller's legitimate interests, in accordance with Article 6(1)(f) of the GDPR.
  5. Ensuring the proper operation and security of the website, including the maintenance of technical event logs – based on the controller's legitimate interest, in accordance with Article 6(1)(f) of the GDPR.
  6. Maintaining statistics on the use of the website using Google Analytics 4 – solely after the user has given consent for analytical cookies, in accordance with Article 6(1)(a) of the GDPR.

Consent to analytical cookies can be withdrawn at any time by changing the cookie settings available on the website. The withdrawal of consent does not affect the lawfulness of prior processing.

4. Contact form and email contact

Data provided via the contact form or email will be used exclusively for processing the message, providing a response, preparing an offer, or conducting further correspondence regarding cooperation.

The contact form should contain only the data needed to handle the enquiry. The telephone number may be provided voluntarily.

Data provided as part of a standard enquiry will not be used to send newsletters or unsolicited marketing information.

5. Data recipients

Data may be transferred to entities supporting the administrator in running the website and business, in particular:

  • hosting and server service providers;
  • email service providers;
  • to the entity providing technical, IT and security support for the website;
  • contact form tool providers;
  • to providers of accounting, legal or advisory services – if necessary;
  • Google Ireland Limited – in the event of consenting to the use of Google Analytics 4;
  • public authority, if the obligation to transfer data arises from legal provisions.

Processors processing data on behalf of the controller are granted access to it only to the extent necessary to perform the entrusted services.

6. Google Analytics 4

The website may use the Google Analytics 4 service provided by Google Ireland Limited to generate aggregated statistics and analyse how the site is used.

Google Analytics may collect information regarding, among other things:

  • visited subpages;
  • screen time;
  • traffic sources;
  • device type, browser and operating system;
  • approximate location determined by IP address;
  • events related to the use of the website, such as navigating to the contact form.

Google Analytics will not run before consent is given for analytical cookies. A lack of consent does not restrict the ability to use the basic functions of the website.

In connection with the use of Google services, data may be processed outside the European Economic Area. Google uses legal mechanisms provided for by data protection regulations, including appropriate safeguards regarding international data transfers.

More information can be found in Google's Privacy Policy.

7. Cookies

Cookies are small text files stored on the user's device while using the website.

The service may use:

  1. Strictly necessary cookies – enabling the proper and secure operation of the website and remembering privacy settings. Consent is not required for their use, as they are necessary to provide the service requested by the user.
  2. Analytical cookies – used to analyse traffic and how the website is used via Google Analytics 4. They are only activated once the user has given consent.

On their first visit to the website, the user can accept or reject analytical cookies. Refusal must not hinder the use of the website's core functions.

The user may at any time change their previous choice by using the cookie settings management function available on the service. Cookies can also be deleted and blocked in the web browser settings.

8. Data retention period

The data will be stored for the period necessary to achieve the purpose, in particular:

  • data related to a standard enquiry – for the duration of the correspondence, and subsequently for the period necessary to secure potential claims;
  • data related to the offer or contract – for the duration of the cooperation, and subsequently for the period resulting from legal provisions and limitation periods for claims;
  • tax and accounting documentation – for the period required by law;
  • data contained in technical server logs – for the period resulting from the configuration and security policies of the hosting provider;
  • Google Analytics 4 analytical data – in accordance with the retention period set in the property, for no longer than 14 months, unless the data is deleted or anonymised earlier;
  • information regarding expressed or withheld consent to cookies – for the time needed to demonstrate and respect the choice made.

9. Rights of data subjects

Subject to the provisions of the GDPR, the data subject may have the following rights:

  • right of access to data and to obtain a copy of it;
  • right to rectification of data;
  • right to erasure;
  • right to restriction of processing;
  • right to data portability;
  • right to object to processing based on legitimate interests;
  • the right to withdraw consent at any time, if processing is based on consent;
  • the right to lodge a complaint with the President of the Personal Data Protection Office.

In matters concerning the exercise of these rights, you can contact the administrator at info@masad.pl.

The complaint can be lodged with the President of the Personal Data Protection Office, whose current contact details are available on the website uodo.gov.pl.

10. Automated decision-making

Data transmitted via the website are not used to make decisions towards the user based solely on automated processing, which would produce legal effects or similarly significantly affect them.

11. Data security

The controller applies appropriate organisational and technical measures to protect data against loss, unauthorised access, disclosure, alteration or destruction.

The transmission of data sent via the form should be secured using an encrypted HTTPS connection. Access to systems and mailboxes is restricted to authorised persons.

12. Links to other websites

The service may contain links to external websites and MASAD profiles on social media platforms. After navigating to an external service, data processing is carried out in accordance with the rules established by its operator.

13. Policy changes

The policy may be updated in the event of changes to regulations, the scope of services provided or the tools used on the website.

The current version of the policy will always be available on this page along with its effective date.