Legal documents
Privacy and cookie policy
This document explains what data may be processed when you use mcfresh.pl and how to manage your consent choices.
Important: this document was prepared on the basis of the same company’s policy for mcplus.pl. It should be reviewed by a legal professional before final use and updated whenever the Google Tag Manager configuration changes.
1. Data controller
The controller of personal data is Marketing Consulting+, ul. Harcerzy Września 1939 3/p. 405, 40-659 Katowice, Poland, tax identification number (NIP) 6351841314, REGON 366594303.
Privacy contact: hello@mcplus.pl, tel. +48 511 780 185.
2. Scope and purposes of processing
We may process data voluntarily provided in email correspondence, in particular your name, company name, email address, telephone number and message content, in order to answer an enquiry, prepare an offer or take steps before entering into a contract.
The server may also record technical data such as IP address, browser type, operating system, request time and requested resources for website security and diagnostics.
3. Cookies and similar technologies
- Necessary – support security and remember the user’s choice.
- Analytics – help measure traffic and website usage; they require consent.
- Marketing – may support advertising measurement and personalisation; they require consent.
Your choice is stored in the mcfresh_cookie_consent cookie for 12 months. You can change your preferences at any time through the “Cookie settings” link in the footer.
4. Google Consent Mode v2 and Google Tag Manager
The website uses Google Consent Mode v2 and Google Tag Manager container GTM-NX3NV6HH. Before the user makes a choice, analytics and advertising storage consent is set to denied. The settings are then updated according to the user’s choice.
The functionality_storage and personalization_storage signals remain disabled because the website does not use these optional storage categories.
Google Tag Manager controls the deployment of tags. The data actually processed depends on the tags published in the container; this document should be updated whenever that configuration changes.
5. Legal bases
- Article 6(1)(a) GDPR – consent to analytics and marketing technologies,
- Article 6(1)(b) GDPR – steps taken at the data subject’s request before entering into a contract and performance of a contract,
- Article 6(1)(f) GDPR – the controller’s legitimate interests in security, correspondence handling and the establishment or defence of claims.
6. Recipients and international transfers
Data may be entrusted to providers of hosting, email, IT support, analytics and advertising services, solely to the extent necessary to provide those services.
Google services may involve transfers outside the European Economic Area. Google uses appropriate legal mechanisms, including Standard Contractual Clauses. Further details are available in Google’s privacy policy.
7. Retention
Correspondence data is retained until the matter or cooperation ends and then for the period necessary to protect legal claims, no longer than three years unless the law requires a longer period. The consent cookie expires after 12 months. Provider cookie lifetimes are governed by their current policies.
8. Your rights
You have the right to access, rectify, erase, restrict and port your data, object to processing and withdraw consent at any time. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.
You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
9. Policy changes
This policy may be updated following changes in law, services or tool configuration. Last updated: 17 September 2026.