Privacy Policy of CoolCity.eu
This document describes the principles of processing and protection of personal data obtained by MGGP Aero through the Service.
The terms indicated below and used in this document should be interpreted in accordance with their assigned meanings:
| Term | Meaning |
|---|---|
| MGGP Aero | MGGP Aero sp. z o.o. with its registered office in Tarnów, ul. Karola Kaczkowskiego 6, 33-100, KRS: 0000026913. |
| Cookies | small text files saved by the browser on the end device of a user visiting a website. Cookies most often contain the name of the website from which they originate, their storage time on the end device, and a unique identifier. |
| Personal Data | information about an identified or identifiable natural person, in accordance with the definition contained in Art. 4 para. 1 of the GDPR. |
| Service | the CoolCity internet service, available at www.coolcity.eu. |
| GDPR | Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation). The text of the GDPR is available here. |
| User | a natural person, a legal person, or an organizational unit without legal personality, to which a separate act grants legal capacity – conducting business activity in its own name, as well as a natural person not conducting business activity, using the Service. |
| Services | services provided by MGGP Aero to Users by electronic means within the meaning of the provisions of the Act of 18 July 2002 on the provision of services by electronic means, specified in the regulations, available here. |
MGGP Aero collects personal data of Users who are natural persons:
- through forms available in the Service;
- in connection with the provision of Services to Users;
- through the User's use of the Service.
Personal data of Users collected and processed by MGGP Aero may include:
- First and last name;
- Street and house number;
- City;
- Country;
- Postal code;
- Name (company) of the institution;
- Order area;
- NIP;
- Phone number;
- E-mail address;
- Billing and payment data;
- Service usage statistics.
The User's use of the Service may be associated with the collection of information about the User by MGGP Aero using cookies.
Cookies allow for the collection of such information as:
- type of end device;
- name and version of the browser;
- name and version of the operating system installed on the end device.
The detailed rules regarding the use of cookies by MGGP Aero are set out in the cookie policy, which is an integral part of the privacy policy, available here.
MGGP Aero, acting as a personal data controller within the meaning of Art. 4 pt 7 of the GDPR, may process the User's personal data for the following purposes and on the basis of the indicated legal grounds:
With regard to Users who are Clients of MGGP Aero
| Purpose | Legal basis |
|---|---|
| Art. 6 para. 1 lit. b) of the GDPR: processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract. |
| Art. 6 para. 1 lit. c) of the GDPR: processing is necessary for compliance with a legal obligation to which MGGP Aero is subject. |
| Art. 6 para. 1 lit. f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by MGGP Aero, i.e. establishment, exercise or defense of claims, establishing and maintaining contact with the User, including for the purpose of responding to the User's questions sent via the contact form available in the Service and exchanging current correspondence. |
| Art. 6 para. 1 lit. f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by MGGP Aero, i.e. direct marketing of own products or services. |
With regard to Users who are employees/co-workers of our Clients
| Purpose | Legal basis |
|---|---|
| Art. 6 para. 1 lit. f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by MGGP Aero, i.e. ensuring contact with the entity being a party to the contract concluded with MGGP Aero, verification whether the person contacting MGGP Aero is authorized to take actions on behalf of the entity being a party to the contract concluded with MGGP Aero, ensuring the proper performance of the contract concluded with MGGP Aero, establishment, exercise and defense against claims. |
| direct marketing of own products or services; | Art. 6 para. 1 lit. f) of the GDPR: processing is necessary for the purposes of the legitimate interests pursued by MGGP Aero, i.e. direct marketing of own products or services. |
| keeping by MGGP Aero of settlements and accounting; | Art. 6 para. 1 lit. c) of the GDPR: processing is necessary for compliance with a legal obligation to which MGGP Aero is subject. |
Regardless of the purposes and grounds indicated above, MGGP Aero may ask the User to consent to the processing of their personal data for a specific purpose.
The User whose personal data is processed by MGGP Aero may have the following rights, described below. The scope of the rights to which the User is entitled in a specific case depends in particular on the legal basis for the processing of their personal data by MGGP Aero.
| Right | Description |
|---|---|
| Right to information | The User's right to obtain information related to the processing of their personal data by MGGP Aero. MGGP Aero implements this right by publishing this privacy policy, the cookie policy, and information clauses available in the Service. |
| Right of access | The User's right to obtain from MGGP Aero confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the information, in accordance with Art. 13 and 14 para. 1 of the GDPR. |
| Right to rectification | The User's right to obtain from MGGP Aero without undue delay the rectification of inaccurate personal data concerning them. Taking into account the purposes of the processing, the User has the right to have incomplete personal data completed, including by means of providing a supplementary statement. |
| Right to erasure | The User's right also known as the ‘right to be forgotten’. In the cases specified in Art. 17 para. 1 of the GDPR (e.g. the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed), the User has the right to obtain the erasure of personal data concerning them, and MGGP has the obligation to erase personal data without undue delay. However, there are certain exceptions to this right, specified in Art. 17 para. 3 of the GDPR (e.g. further processing of personal data is necessary for the establishment, exercise or defense of legal claims). |
| Right to restriction of processing | The User's right to obtain from MGGP Aero restriction of processing in the cases specified in Art. 18 para. 1 of the GDPR (e.g. where the accuracy of the personal data is contested by the data subject, for a period enabling MGGP Aero to verify the accuracy of the personal data). In such a case, however, MGGP Aero is entitled to process personal data, with the exception of storage, only with the User's consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. |
| Right to data portability | The User's right to receive the personal data concerning them, which they have provided to MGGP Aero, in a structured format, and have the right to transmit those data to another controller. |
| Right to object to data processing | The User's right to object, on grounds relating to their particular situation, at any time to processing of personal data concerning them, or in connection with the processing of their personal data for direct marketing purposes, where processing is necessary for the performance of a task carried out in the public interest or for the purposes of the legitimate interests pursued by MGGP Aero. |
| Right to withdraw consent | The User's right to withdraw consent to the processing of personal data, given to MGGP Aero, at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal. |
| Right not to be subject to automated decision-making | The User's right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them. The above provision does not apply in the cases specified in Art. 22 para. 2 of the GDPR (e.g. when processing is based on the data subject's explicit consent). |
| Right to lodge a complaint with a supervisory authority | The User's right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement if they consider that the processing of personal data relating to them has infringed the provisions of the GDPR. |
In order to exercise the rights described in pt. 6 above, the User should contact MGGP Aero with a relevant request at the address indicated in pt. 14.
MGGP Aero is entitled to verify the identity of the User making the request.
The exercise of the User's rights will be carried out in accordance with the provisions of the GDPR.
MGGP Aero is entitled not to grant a request concerning the exercise of rights which, in accordance with the provisions of the GDPR, are not available to the User. In the case of a request that is manifestly unfounded or excessive, MGGP Aero is entitled to charge a fee to cover the costs of implementing this request.
MGGP Aero will provide the User with information on the actions taken in connection with the submitted request within one month of its receipt. This period may be extended by another two months due to the complex nature of the request or the number of requests. MGGP Aero will inform the User about the extension of the deadline.
MGGP Aero applies technical and organizational measures aimed at ensuring protection against destruction, loss, modification, unauthorized disclosure or unauthorized access to personal data.
The measures implemented by MGGP Aero include in particular:
- only authorized MGGP Aero employees have access to the data;
- training of MGGP Aero personnel in the field of personal data protection;
- implementation of adequate physical, technical and procedural safeguards for personal data, in particular to ensure their confidentiality and integrity;
- implementation of security procedures;
- encryption of connections using the SSL protocol.
MGGP may transfer the User's personal data to the following entities:
- payment service providers whom the User has authorized to access their personal data; the processing of personal data carried out by payment service providers is subject to the principles of personal data protection, in particular the privacy policies of these providers;
- authorized bodies and institutions, acting on the basis of applicable law;
- entities providing advisory (legal, tax) and IT services to MGGP Aero.
MGGP Aero may transfer the User's personal data to MGGP Aero's partners processing personal data in third countries, i.e. countries outside the European Economic Area (EEA), but only to the extent necessary, related to the provision by these partners to MGGP Aero of services, especially IT and related to payment processing in the Service.
The transfer of personal data will be based on mechanisms ensuring an adequate level of protection of these data in third countries, in particular on the basis of a European Commission decision stating an adequate level of protection or on the basis of standard contractual clauses adopted by a European Commission decision (available here, text in English).
In order to obtain additional information on the safeguards for data transfer to third countries applied by MGGP Aero, including obtaining a copy of such additional safeguards, please contact us at the address indicated in pt. 14.
MGGP stores and processes personal data for the duration of a valid legal basis, i.e.:
- in the case of processing personal data on the basis of the User's consent, until its withdrawal;
- in the case of processing personal data for the purpose of performing a contract, or taking action at the User's request before concluding a contract, respectively, for the duration of the contract or the completion of actions taken before concluding the contract;
- in the case of processing personal data for the purposes of the legitimate interests of MGGP Aero, until the User's objection to such processing is taken into account – in which case MGGP Aero will cease processing such data, unless MGGP Aero or a third party demonstrates the existence of valid legitimate grounds for the processing, overriding the interests, rights and freedoms of the User, or grounds for establishing, exercising or defending claims (provided that in the case of processing the User's personal data for the purpose of direct marketing of its own products or services, MGGP Aero will cease processing the User's personal data to the extent that the processing is related to such marketing);
- in the case of making settlements by MGGP and keeping accounts to the extent and for the time consistent with applicable law.
The protection of personal data of minor Users is very important to MGGP Aero.
In the case where the basis for processing the personal data of a minor in connection with the provision by MGGP Aero of information society services (i.e. services normally provided for remuneration, at a distance, by electronic means and at the individual request of a service recipient) is consent, this consent may be given independently by a minor who has reached the age of 16.
In the case of a minor under the age of 16, MGGP Aero will process their personal data only in cases where consent has been given or approved by the person exercising parental authority or custody over the child and only to the extent of the consent given.
A person exercising parental authority or custody over a child under the age of 16 who has obtained information that this child has independently given consent to the processing of personal data may contact MGGP Aero at the address indicated in pt. 14.
MGGP Aero is entitled to verify:
- the User's age;
- the identity of the person exercising parental authority or custody over the child, including for the purpose of determining whether such person has given or approved consent.
The rules for using the Service by minors, separate from issues related to the processing of their personal data, are governed by the terms of service for the provision of electronic services of the Service, available here.
Detailed information on the processing of Users' personal data, including an indication of whether the provision of personal data is mandatory, is set out in the information clauses located under the forms through which MGGP Aero collects personal data:
MGGP Aero has appointed a Data Protection Officer, who can be contacted in all matters indicated in this privacy policy and related to it at the address iod@mggpaero.com or in writing (by post) to the address of MGGP Aero, i.e. ul. Karola Kaczkowskiego 6, 33-100, Tarnów (with the note ‘IOD’ or ‘Data Protection Officer’).
PrivacyPolicy.section14.p2
In matters not regulated by the privacy policy, the provisions of Polish law shall apply.
Date of entry into force of the document: 14.10.2025. Last change of the document: 14.10.2025.
This document can be downloaded here.