Privacy and cookies policy
Version of 15 October 2026
This is an English translation for information. The legally binding text is the Polish version of this document.
Applies to the mrtiq.pl website. Effective date: 15 October 2026.
Part A: Privacy policy
01Who the controller is
The controller of your data is Konik System Spółka z o.o., registered office in Gdańsk, ul. Jaśkowa Dolina 29 lok. 31, 80-286 Gdańsk, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) by the Sąd Rejonowy Gdańsk-Północ w Gdańsku, VII Wydział Gospodarczy KRS under KRS number 0001144320, tax ID (NIP) 9571182157, REGON 540418046, share capital PLN 5,000.00. The company runs the KONIK, mrtiq and X.PUNKT brands.
Contact on data matters: rodo@koniksystem.com or by post to the registered office. The company has not appointed a data protection officer.
02Purposes, legal bases and retention periods
| When | Purpose | Legal basis (GDPR) | How long |
|---|---|---|---|
| Contact form, email, phone | replying and preparing an offer | Art. 6(1)(b) (steps before a contract) or (f) (legitimate interest: replying to an enquiry) | up to 12 months without further contact; after a conversation or offer, up to 24 months from the last contact |
| “Check funding” form | assessing whether training can be co-financed; we do not pass form data to our partner (IQ Consulting) | (b) or (f) | as above |
| Application for the WEKTOR project call (/pomorskie) | contact about the training and the call, email/SMS reminders | consent (a) and steps before a contract (b) | until consent is withdrawn or the call ends; project documentation according to the project rules |
| mrtiq training and Trainer Academy | recruitment, delivering the training, settlement with the funding operator | (b) and (c) | documentation for 5 years, or longer if the agreement with the operator requires it; details in the Academy rules |
| “mrtiq Trainer” certificate register (/rejestr-certyfikatow) | confirming that a certificate is valid after its number is entered (name, number, edition, dates, status); no public list | the trainer’s consent (a), given in the Trainer Academy rules and the licence agreement | up to 12 months after the certificate expires, or until consent is withdrawn |
| Trainer recruitment (/kariera) | selecting a candidate | (b); consent to future recruitment: (a) | until recruitment ends; with consent, 12 months |
| Newsletter and marketing information | marketing | consent (a) and consent under Art. 398 of the Polish Electronic Communications Law | until consent is withdrawn |
| Server logs (IP address, date, page address, browser) | website security, detecting abuse | (f) | according to the hosting provider’s settings |
| Concluding and performing a contract | providing services, settlements | (b) and (c) | for the term of the contract, then until claims become time-barred and for the period required by tax law |
| Claims | establishing, pursuing and defending claims | (f) | until claims become time-barred |
| Analytics and marketing cookies (once switched on) | statistics and advertising | consent (Art. 399 of the Electronic Communications Law; Art. 6(1)(a) GDPR) | until consent is withdrawn or the file expires |
03Who we share data with
We share data with providers who process it on our behalf under data processing agreements:
- website hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, on our own server in an EU data centre (Germany);
- our CRM system, which receives submissions from the forms and runs on the same server of ours at Hetzner (EU);
- email and SMS delivery;
- our accounting firm.
Data may also be received by our law firm, funding operators (for example in the WEKTOR project: the Pomeranian Development Agency and the Regional Labour Office in Gdańsk) and public authorities where the law requires it. We provide the full list of providers on request: rodo@koniksystem.com. We do not sell data.
Partner (registered provider in the BUR database). We do not pass data from the mrtiq.pl forms to our partner: IQ CONSULTING SP. Z O.O., ul. Szczecińska 3, 75-120 Koszalin, NIP 6692559062, KRS 0000864753. If your company decides to settle funding with this partner, it shares its data with the partner itself, in a separate relationship. The partner then processes the data as a separate controller under its own rules.
04Transfers outside the European Economic Area
The website and the CRM system run on our server in the EU (Hetzner, Germany). Some providers of other services (for example email) may be based in the USA or have access to data there. We transfer data only on the basis of:
- a European Commission decision finding an adequate level of protection (for the USA, the EU–US Data Privacy Framework, if the recipient is on the official list),
- or standard contractual clauses.
A copy of the safeguards is available from rodo@koniksystem.com.
05Your rights
You have the right to:
- access your data;
- have it corrected or erased;
- restrict processing;
- data portability;
- object to processing based on legitimate interest (an objection to marketing is always effective);
- withdraw consent at any time (without affecting the lawfulness of earlier processing);
- lodge a complaint with the President of the Personal Data Protection Office (UODO), Stawki 2, 00-193 Warsaw, Poland.
We reply within one month.
06Do you have to provide data
Providing data is voluntary. Without the data marked as required we cannot reply to an enquiry or conclude a contract.
07Artificial intelligence and automated decisions
We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. People decide on admission to the Trainer Academy. If a chat or AI assistant appears on the site, it will say so at the start of the conversation and let you ask to speak to a person.
08Security
We use encrypted connections (HTTPS) and access control. We never ask for passwords to the BUR system or to funding call systems; they stay with you only.
Part B: Cookies and similar technologies
09What the site stores
The site stores small files and data on your device (cookies, localStorage, sessionStorage).
- Necessary: to make the site work and remember your choices. They do not require consent (Art. 399(3) of the Electronic Communications Law).
- Analytics and marketing: only after you give consent in the banner. The site does not use them at present.
| Name | Type | Purpose | Duration | Consent |
|---|---|---|---|---|
| mrtiq-consent-v1 (localStorage) | necessary | remembering your cookie decision | until deleted by the user | no |
| mrtiq-dotacje-seen (sessionStorage) | necessary / functional | showing a window only once during a visit | until the tab is closed | no |
| _ga, _gcl_*, _fbp, only if switched on | analytics / marketing | statistics and advertising | according to the provider | yes |
You can change your consent at any time by deleting the saved decision (site data in your browser); the banner will appear again. You can also delete cookies or block them in your browser settings.
External content. Some pages contain links to messaging apps or social networks. When you click such a link, its provider processes your data under its own rules.
10Changes
We announce changes to this policy on this page, with the date of the update. The rules for using the site are set out in the Website terms.