Privacy Policy

§ 1. General Provisions

Joint Controllers of personal data of all clients of MTA Group companies are:

• a) MTA Digital sp. z o.o., ul. Święty Marcin 29/8, 61-806 Poznań, KRS: 0000561985, NIP: 7831727441, REGON: 36172305500000;
• b) MTA Performance sp. z o.o., ul. Święty Marcin 29/8, 61-806 Poznań, KRS: 0000784788 (Warsaw SR for the capital city of Warsaw), NIP: 7010922437, REGON: 383274210;
• c) Anchor.Team sp. z o.o., ul. Święty Marcin 29/8, 61-806 Poznań, KRS: 0000969275, NIP: 7831856345, REGON: 521897892;
• d) Force of Nature Europe sp. z o.o., ul. Święty Marcin 29/8, 61-806 Poznań, KRS: 0001050399, NIP: 7831885358, REGON: 525999520;
• e) Zero Fluff Digital sp. z o.o., ul. Świętego Marcin 29/8, 61-806 Poznań, KRS: 0001174081, NIP: 7831930082, REGON: 541841870;
• f) SharkPress Agency sp. z o.o., ul. Świętego Marcina 29/8, 61-806 Poznań, KRS: 0001181847, NIP: 7831932253, REGON: 542142080.

Contact person for data protection: Mateusz Mikołajczyk
Email: gdpr@mta.digital
Mailing address: ul. Święty Marcin 29/8, 61-806 Poznań
In-person: MTA Digital sp. z o.o., ul. Bolesława Prusa 6/3, 60-819 Poznań

§ 2. Legal Bases, Purposes, Sources and Retention

We collect personal data directly from you when entering or performing contracts, and via contact forms.

Purposes and legal bases:

• Concluding and performing marketing/SEO/lead generation/website contracts (Art. 6(1)(b) GDPR)
• Day-to-day operations and cooperation with contractors (Art. 6(1)(b) GDPR)
• Handling contact forms based on consent (Art. 6(1)(a) GDPR) or legitimate interest/steps prior to contract (Art. 6(1)(f)/(b) GDPR)
• Statistics of website usage based on legitimate interest (Art. 6(1)(f) GDPR)
• Claims establishment, exercise and defence (Art. 6(1)(f) GDPR)
• Accounting/tax obligations (Art. 6(1)(c) GDPR)
• Newsletter with consent (Art. 6(1)(a) GDPR)
• Social media presence based on legitimate interest (Art. 6(1)(f) GDPR)
• IT operations based on legitimate interest (Art. 6(1)(f) GDPR)
• Partner programs (Art. 6(1)(b)/(f) GDPR)
• Blog/testimonials (Art. 6(1)(f) GDPR)
• Online meetings and problem‑solving forms (Art. 6(1)(b)/(f) GDPR)

Retention periods: For the duration of services; until limitation of claims; for accounting/tax: 5 years from the start of the year following the financial year; cookies: up to 50 months; newsletter: until consent is withdrawn.

§ 3. Data Sharing

Data may be shared with providers of IT, email, hosting, analytics, accounting, legal and advisory services, and couriers—only as necessary. Providers include, among others: Google (LLC/Ireland/Asia Pacific/Australia), Autenti sp. z o.o., Asana, Inc., Web INnovative Software sp. z o.o., Home.pl S.A., OVH sp. z o.o., Notion Labs Inc., ZIELINAMEDIA sp. z o.o., Loom Inc., Pipedrive Inc., Mango Technologies, Inc. (ClickUp). Analytics/ads providers include Google (Analytics/Tag Manager/Ads/Workspace) and Meta (Facebook Pixel). Transfers outside the EEA rely on appropriate safeguards under Art. 46/49 GDPR (including SCCs). For the USA: where possible we transfer to organizations certified under the EU–US Data Privacy Framework (EC decision of 10 July 2023); otherwise we use SCCs/other safeguards.

§ 4. Your Rights

You have the right to access, rectify, erase, restrict processing, object (including to direct marketing), data portability, withdraw consent at any time, and lodge a complaint with the Polish supervisory authority (PUODO).

§ 5. Right to Lodge a Complaint

If you believe processing of personal data infringes the law, you may lodge a complaint with the President of the Personal Data Protection Office (PUODO), 00-014 Warsaw, ul. Moniuszki 1A.

§ 6. Cookies

The websites use necessary, preferences, statistical and marketing cookies. Details: on https://mta.digital/ there are e.g. 21 necessary, 3 preferences, 10 statistical, 21 marketing, 1 unclassified; on https://www.anchor.team/ no cookies; on https://www.sharkpress.agency/ there are 1 necessary, 6 analytics, 3 marketing, 1 performance, 1 other. Consent to necessary cookies is required to use the site; other categories are optional. You can manage cookies in your browser settings. The site does not respond to DNT signals.

Cookie types used:

• Session cookies – maintain your session until the browser is closed. They typically do not directly identify you, but combined with other data may do so.
• Long‑lived cookies – persist beyond a single session and may personalize services (e.g., saving search criteria).
• Third‑party cookies – placed by providers such as Cookiebot, Google (Analytics/Tag Manager/Ads/Workspace). They may identify devices via IP, device ID, or similar identifiers. See Cookiebot privacy policy: https://www.cookiebot.com/en/privacy-policy/

Cookie categories:

• Necessary – enable basic functions (navigation, secure areas). The site cannot function properly without them.
• Preferences – remember choices (language, region, appearance).
• Statistical/Analytics – help us understand how users interact (may collect behavioral data).
• Marketing/Advertising – track behavior to display relevant ads (may include location, preferences, browsing history).
• Unclassified – being classified together with providers.

Additional notes:

• We may use tracking pixels/clear GIFs to measure email/website interactions.
• We may use web logs (e.g., IP address, technical data) to monitor traffic, troubleshoot, detect and prevent fraud, and enforce terms.
• We do not use cross‑site tracking technologies, and we do not sell personal data for behavior‑based advertising across unrelated sites.
• Browser cookie management help pages: Chrome, Firefox, Edge, Opera, Safari (macOS/iOS/iPadOS). Mobile devices: see device manual.
• Last updated: 16 July 2025.

In case of discrepancies, the Polish version governs.