Privacy Policy

1. Data controller

The controller of your personal data is MIMIR Sp. z o.o., registered office at ul. Frezerów 3, 20-209 Lublin, Poland, KRS 0000700328, REGON 36855101900000, VAT ID PL9462674269.

Contact for data protection matters: [email protected], telephone +48 690 328 877, or by post to the registered office.

This document explains what data we collect through mimir.trade, for what purpose, on what legal basis, and for how long we keep it.

2. What we collect

The website collects data only when you give it to us yourself — through the contact form. Browsing the site requires no data at all.

The contact form sends us:

• your full name,
• your e-mail address,
• your telephone number — an optional field,
• the content of your message,
• the goods category, if the form was opened from a specific offer card,
• the language version of the site the enquiry was sent from.

Two technical details are stored along with the enquiry:

• the IP address the form was sent from,
• the date and time of sending.

The IP address appears in the message delivered to our mailbox and is written to the enquiry log. It is used solely to limit the number of enquiries from a single address and to establish the circumstances in case of abuse.

The site keeps no visit log: simply opening a page is not recorded.

3. Purposes and legal bases

If we introduce analytics tools in the future, this policy will be updated and consent for that purpose will be collected separately, before any such tool is switched on.

4. Recipients of the data

Data is neither sold nor shared for marketing purposes. It is accessible only to the people handling enquiries on the controller’s side and to the providers that keep the site running:

• OVH SAS — provider of the server the site runs on and of the mail service for the mimir.trade domain. Infrastructure within the European Union.
• Cloudflare, Inc. — protection against attacks and faster page delivery. Traffic to the site passes through this provider’s infrastructure, which means data is transferred outside the European Economic Area.
• Google LLC — the map on the Contact page. It loads only after the visitor presses a button; only then does the browser connect to Google’s servers, which receive the visitor’s IP address among other data. Without that click no data reaches Google at all. This involves a transfer outside the European Economic Area.

Transfers outside the EEA rely on the mechanisms provided for in Chapter V of the GDPR — standard contractual clauses or a European Commission adequacy decision. The basis for the transfer is subject to confirmation during the legal review of this document.

5. Retention periods

• Enquiry log, including the IP address — 4 weeks, after which entries are deleted automatically.
• Business correspondence — for as long as the matter is being handled, and afterwards for the limitation period of any potential claims.
• Data processed on the basis of legitimate interest is kept until an effective objection is raised.

6. Your rights

You have the right to access your data, to rectify it, to erase it, to restrict processing, to data portability, to object to processing, and to lodge a complaint with the supervisory authority.

How to exercise these rights, our response times and the details of the supervisory authority are set out in the GDPR information.

7. Providing data is voluntary

Providing data is voluntary, but necessary for us to answer an enquiry. Without an e-mail address we have nowhere to reply; the telephone number is optional and serves only to make contact faster.

8. No profiling

Your data is not used for automated decision-making or profiling. We build no interest profiles and do not combine enquiries in order to evaluate the people who sent them.

9. Security

• The entire site is served over an encrypted connection (HTTPS) only.
• The enquiry log is stored on a server with access limited to the administrator and is deleted automatically after 4 weeks.
• The form is protected against automated submissions.
• The site loads no scripts, fonts or images from external servers. A visitor’s browser connects to the mimir.trade domain and nothing else.

10. Cookies

The site currently uses no analytical or marketing cookies. The details are set out in the Cookie Policy.

11. Changes to this policy

We update this policy when the scope of the data we process changes or when the law does. The date of the last update is given at the top of the document. An amended policy takes effect on the day it is published on the site.

The rules for using the site are set out in the Terms of Service.