MAX BORN FORUM / LEGAL INFORMATION

Privacy policy

How personal data is processed and external services are used on the Max Born Forum website.

Last updated: 27 October 2026

1. GENERAL PROVISIONS

This Privacy Policy sets out the rules for processing the personal data of visitors to the Max Born Forum website at https://placwolnosci4.pl (the “Website”). The Website presents the Max Born Forum building at Plac Wolności 4 in Wrocław, available spaces, information about leasing opportunities, and telephone and email contact details.

The Website does not operate an online store, provide user accounts or offer a contact form. It uses an embedded Google Maps map and CookieYes to manage preferences for cookies and similar technologies.

2. PERSONAL DATA CONTROLLER

The controller of personal data processed in connection with the operation of the Website and the handling of leasing enquiries is:

  • Integrit S.A.
  • ul. Tyniecka 1, 52-407 Wrocław, Poland
  • KRS: 0000449172
  • NIP: 8941017698

For matters concerning the processing of personal data and the exercise of rights under the GDPR, the controller may be contacted by email at daneosobowe@integrit.com.pl or by post at the registered office address above.

3. SCOPE AND SOURCES OF PROCESSED DATA

The following information may be processed when using the Website:

  • data voluntarily provided in telephone or email correspondence, in particular first and last name, name of the company represented, email address, telephone number and the content of the enquiry;
  • technical data relating to visits to the Website, in particular IP address, date and time of connection, requested URL, browser and device information and server response status, recorded in technical server logs;
  • information relating to the management of cookie preferences and recording user choices, in particular a consent identifier, date and time of a choice, and information on accepting, rejecting or changing preferences for individual categories of technologies; technical data, including IP addresses, may also be processed in connection with CookieYes. This information is used to remember settings, respect user decisions and demonstrate whether and when consent was given;
  • technical data transferred to the Google Maps provider when the embedded map is loaded, in particular IP address, browser and device information and interactions with the map.

The data is obtained directly from the user, their device or technical records generated during the operation of the Website.

4. PURPOSES AND LEGAL BASES FOR DATA PROCESSING

4.1. Responding to leasing enquiries and corresponding with representatives of businesses — Article 6(1)(f) GDPR. The controller’s legitimate interest is to communicate with people interested in the offer and handle business enquiries.

4.2. Taking steps at the request of an individual prior to entering into a contract with that individual — Article 6(1)(b) GDPR, where the enquiry relates to such a contract.

4.3. Ensuring the proper operation and security of the Website, diagnosing errors, preventing abuse and analysing security incidents — Article 6(1)(f) GDPR. The legitimate interest is to protect the Website and IT infrastructure.

4.4. Establishing, pursuing or defending claims connected with correspondence or the operation of the Website — Article 6(1)(f) GDPR.

4.5. Complying with the controller’s obligations under personal data protection legislation, in particular handling requests relating to users’ rights and documenting consent and its withdrawal — Article 6(1)(c) GDPR, in connection with the obligations under Articles 5(2), 7(1) and (3) and 12–22 GDPR.

4.6. Displaying the embedded Google Maps map, related transfers of data to the map provider and the use of optional cookies or similar technologies — Article 6(1)(a) GDPR, based on the user’s consent. The map is loaded only after the “Functional” category has been accepted in CookieYes. Information is stored on, or accessed from, the user’s terminal equipment in accordance with Article 399 of the Polish Electronic Communications Law of 12 July 2024.

4.7. Technical operation of the consent management mechanism, including remembering and applying user preferences — Article 6(1)(f) GDPR. The controller’s legitimate interest is to ensure the proper operation of the consent mechanism and respect users’ choices. Technologies strictly necessary to remember these choices may be used without separate consent within the exception provided for in Article 399(3) of the Polish Electronic Communications Law.

5. COOKIES AND CONSENT MANAGEMENT — COOKIEYES

The Website uses CookieYes, a tool that enables users to manage consent to cookies and similar technologies. On the first visit a banner is displayed, allowing the user to accept optional technologies, reject them or select individual preferences using the “Customize” option.

The “Customize” panel provides information about technology categories and their purposes, and a list of identified cookies and similar technologies, including, as applicable, their names, providers, purposes and lifetimes. The list is updated based on CookieYes scans of the Website and verification by the controller.

Technologies requiring consent are activated only after the user agrees to the relevant category. If consent is not given or is refused, those optional technologies are not activated. Cookies necessary for the proper operation of the Website, including remembering consent choices, may be used without separate consent where permitted by law.

Users may reopen the panel at any time through the “Cookie settings” link on the Website, change preferences or withdraw previously given consent. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

More information about the tool and provider: https://www.cookieyes.com/privacy-policy/

6. GOOGLE MAPS

The “Location” page contains an interactive Google Maps map. For users in the European Economic Area, the service provider responsible for processing user data within the service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The map is loaded only after the user consents to the “Functional” category in CookieYes. Until consent is given, the embedded map remains blocked and no connection to Google servers is made. Once consent is given, the map may load automatically without an additional click on the map.

Loading the map establishes a connection between the user’s device and Google servers and transmits technical data, in particular IP address and browser and device information. Use of the map may also involve processing information about interactions with it and the use by Google of cookies or similar technologies. Where the user is signed in to a Google account, Google may associate information obtained through the map with that account in accordance with its rules and the user’s settings.

Consent may be withdrawn at any time using the “Cookie settings” link on the Website. After consent is withdrawn the embedded map is disabled; loading it again requires consent to be granted again. Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Not consenting to Google Maps does not restrict access to the remaining content of the Website, including textual information about the building’s address and location.

Google also processes the data it receives as a separate controller, under its own privacy policy: Google Privacy Policy.

7. DATA RECIPIENTS

Personal data may be accessed, insofar as necessary to achieve the stated purposes, by authorised employees and associates of the controller and service providers responsible for hosting, technical maintenance of the Website and email services. Providers processing data on behalf of the controller act under appropriate agreements and documented instructions.

In connection with specific Website functions, data may also be transferred to:

  • Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland — in connection with loading and using Google Maps after consent is given. To the extent Google independently determines the purposes and means of processing the data received, it acts as a separate controller;
  • CookieYes Limited, 3 Warren Yard, Warren Park, Wolverton Mill, Milton Keynes, MK12 5NW, United Kingdom — as the provider of the consent management tool, processing data on behalf of the controller when handling user preferences and the consent register.

Data may also be disclosed to public authorities legally entitled to receive it.

External websites accessed using links on this Website operate according to the rules established by their respective administrators.

8. DATA RETENTION

Data provided in correspondence is retained for as long as necessary to handle the enquiry. Where discussions have clearly ended, data is removed from working resources without undue delay and from backups within 30 days. Where discussions have not clearly ended and the user does not respond, correspondence data is retained for up to 6 months after the last message, in accordance with the rules described in the Integrit S.A. privacy policy.

If a contract is entered into, a legal obligation arises or claims need to be secured, the applicable retention period follows the duration of the contract, record-keeping obligations or the limitation period for claims, as appropriate.

Data contained in standard server logs is retained to ensure Website security, diagnose technical errors and prevent abuse for no longer than 365 days from the time of recording. After this period the data is deleted or irreversibly anonymised.

If particular log entries concern a detected security incident, they may be separated and retained for as long as necessary to investigate that incident. Where establishing, pursuing or defending claims is necessary, the data may be kept longer, taking account of applicable limitation periods.

The record used to remember cookie preferences is stored on the user’s device for the duration indicated in the “Customize” panel, unless the user removes it earlier through browser settings. Changing preferences, including withdrawing consent, updates the stored choice accordingly. Removing this record from the device may cause the banner to appear again on a subsequent visit.

Independently of the preference record stored on the user’s device, CookieYes maintains a register of choices made. Entries in this register are retained for up to one year after a given choice is recorded. Withdrawal of consent is recorded in the register and does not automatically remove information about earlier consent where keeping that information remains necessary to demonstrate the lawfulness of earlier processing, within the specified retention period.

The lifetimes of individual cookies are available in the “Customize” panel. Data processed by Google as a separate controller in connection with Google Maps is retained under the rules described in Google’s privacy policy.

9. TRANSFERS OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA

Use of Google Maps and CookieYes may involve processing data outside the European Economic Area (EEA).

CookieYes Limited is established in the United Kingdom. Transfers of personal data from the EEA to the United Kingdom are based on a European Commission adequacy decision concerning that country. Where subcontractors outside the EEA are engaged, CookieYes declares that it applies mechanisms under Chapter V of the GDPR, including adequacy decisions or standard contractual clauses.

Data connected with Google Maps may also be processed in the United States. Google LLC participates in the EU–US Data Privacy Framework, which the European Commission recognises as providing an adequate level of protection for certified participants. Google describes the grounds and safeguards applied to other transfers in its rules on international data transfers.

Further information on the transfer mechanisms and safeguards used by the providers is available at:

https://policies.google.com/privacy/frameworks

https://www.cookieyes.com/privacy-policy/

https://www.cookieyes.com/dpa/

10. RIGHTS OF DATA SUBJECTS

Under the GDPR, each person whose data is processed has the right of access, to receive a copy, to rectification, erasure and restriction of processing.

Where data is processed on the basis of the controller’s legitimate interests, the data subject may object under Article 21 GDPR.

Where processing is based on consent, it may be withdrawn at any time. Withdrawal does not affect the lawfulness of earlier processing.

The right to data portability applies in the circumstances set out in Article 20 GDPR, in particular where processing is automated, based on consent or a contract, and concerns data supplied by the individual.

Requests to exercise rights may be sent to: daneosobowe@integrit.com.pl.

The data subject also has the right to lodge a complaint with the President of the Polish Personal Data Protection Office: https://uodo.gov.pl/.

11. VOLUNTARY PROVISION OF DATA AND AUTOMATED DECISIONS

Providing data when contacting us by telephone or email is voluntary. However, failure to provide information necessary to identify the matter or respond may prevent the enquiry from being handled.

The controller does not make decisions concerning Website users based solely on automated processing, including profiling, that produce legal effects or similarly significantly affect them.

12. CHANGES TO THIS PRIVACY POLICY

This Privacy Policy may be updated following changes in law, data processing practices or Website functionality. Its current version, including the date of the last update (27 October 2026), is available at:

https://placwolnosci4.pl/polityka-prywatnosci/