Privacy Policy (GDPR)

We sell to businesses, but the people we deal with are individuals, and their names, business email addresses and phone numbers are personal data. This policy informs you, in line with Articles 13 and 14 of Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR), how we handle that data on this website and in our business relationship.

1. Controller

The controller of your personal data is EnjoyGroup Sp. z o.o., ul. Brzeska 8/4, 21-500 Biała Podlaska, Poland, KRS 0001143543, NIP 5372686054. For any question about data protection or to exercise your rights, contact us at corp@mascotiq.eu or +48 577 723 719.

2. Data we process

Contact and company data: name, business email, phone number, job title, company name, address, VAT ID.
Request and order data: the content of your enquiry or quote request, the products, quantities and delivery details, and the files you upload, such as logos and artwork.
Correspondence: emails, messages and notes from calls with us.
Invoicing and payment data: billing details and payment records.
Technical data: IP address, browser type, date and time of access and similar information recorded in server logs.
Usage data: information on how you use the website, collected through analytics cookies only if you consent to them.

If you are acting for a company, we may also receive your contact details from a colleague who places a request or an order on the company's behalf.

3. Purposes and legal bases

Purpose	Legal basis
Answering enquiries and preparing quotes	Steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR); where you act for your employer, our legitimate interest in communicating with business customers (Art. 6(1)(f) GDPR)
Processing orders: proofs, production, delivery, complaints	Performance of a contract (Art. 6(1)(b) GDPR); for contact persons of a customer, legitimate interest (Art. 6(1)(f) GDPR)
Invoicing, accounting and tax records	Legal obligation under Polish tax and accounting law (Art. 6(1)(c) GDPR)
Ongoing business communication, including follow-up on offers	Legitimate interest in maintaining customer relationships (Art. 6(1)(f) GDPR)
Marketing emails and newsletters, if offered	Your consent (Art. 6(1)(a) GDPR, together with the applicable electronic communications rules)
Operating and securing the website, server logs	Legitimate interest in a secure, working website (Art. 6(1)(f) GDPR)
Web analytics and advertising measurement	Your consent (Art. 6(1)(a) GDPR and the national rules implementing Art. 5(3) of Directive 2002/58/EC)
Establishing, exercising or defending legal claims	Legitimate interest (Art. 6(1)(f) GDPR)

Providing data is voluntary, but without contact details we cannot answer your request, and without invoicing data we cannot conclude or perform a contract. We do not use automated decision-making, including profiling, that produces legal effects for you within the meaning of Art. 22 GDPR.

4. Recipients

We share personal data only to the extent necessary for the purposes above, with:

our hosting provider and IT service providers who operate the website and our systems;
our email service provider;
Google, as provider of Google Analytics and related tags, but only if you have consented to analytics or advertising cookies; Google Consent Mode passes your choice to these tags;
partners involved in producing, branding and packing your order, to the extent they need your artwork and order details;
couriers and logistics providers, who receive the delivery address and contact person;
accounting, legal and tax advisers, banks and payment service providers;
public authorities, where we are legally required to disclose data.

Service providers acting on our behalf process data under data processing agreements in accordance with Art. 28 GDPR.

5. Transfers outside the EEA

Some service providers, such as Google, may process data outside the European Economic Area. If such a transfer takes place, it is protected by the standard contractual clauses adopted by the European Commission or by another safeguard under Chapter V GDPR. You may request information about the safeguards applied by contacting us.

6. Retention

Enquiries and quotes that do not lead to an order: as long as needed to handle the request and any follow-up, after which we delete them unless another basis applies.
Order, invoicing and accounting records: for the period required by Polish tax and accounting law, generally five years from the end of the relevant calendar year.
Data needed for possible claims: until the applicable limitation periods expire.
Data processed on the basis of consent: until you withdraw your consent.
Server logs: for a short period required for security and troubleshooting.
Cookies: as described in our cookie policy.

7. Your rights

Under the GDPR you have the right to access your data (Art. 15), to have it rectified (Art. 16) or erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21), including at any time to processing for direct marketing. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before withdrawal. You can change your cookie choices at any time via the "Cookie settings" link in the footer.

To exercise your rights, write to corp@mascotiq.eu.

8. Right to lodge a complaint

If you believe that we process your data unlawfully, you have the right to lodge a complaint with a supervisory authority. In Poland this is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO), ul. Stawki 2, 00-193 Warszawa. You may also contact the supervisory authority in the EU member state where you live or work.

9. Changes

We may update this policy when our services or legal requirements change. The current version is always available on this page.

Last updated: 30 October 2026

Privacy Policy