Privacy Policy

For any matters relating to personal data protection, please contact us by e-mail at iod@maclife.pl, or in writing at the registered office of the relevant company, marked “Ochrona danych” (Data protection).

2.1. Repairs, technical assessments, data recovery and door-to-door service

• Data: full name, phone number, e-mail address, address (for courier collection), device details (model, serial number, IMEI), description of the fault, invoicing details (including Tax ID).
• Legal basis: entering into and performing a contract (Art. 6(1)(b) GDPR), tax and accounting obligations (Art. 6(1)(c) GDPR), establishing and defending against claims and handling complaints (Art. 6(1)(f) GDPR).
• Service history: once an order is completed, we keep a record of it (contact details, device details, scope of repair, parts used) as service history. This allows us to handle complaints and warranty claims, identify recurring faults and process your future orders faster (Art. 6(1)(f) GDPR).
• Retention: for the duration of the order and then 6 years from the completion of your most recent order (the limitation period for claims under Art. 118 of the Kodeks cywilny – Polish Civil Code). Each new order restarts this period. After it expires, the data is deleted or anonymised. We will delete it earlier if you successfully object to the storage of your service history. Accounting documents are kept for 5 years from the end of the calendar year in which the tax payment deadline expired (Art. 86 of the Ordynacja podatkowa – Polish Tax Ordinance; Art. 74 of the ustawa o rachunkowości – Polish Accounting Act).
• Data stored on your device: during a repair we may have technical access to data stored on the device. We do not browse or copy it unless the order requires this (e.g. data recovery or data transfer). In that case we process it solely on your instructions and within the scope of the order, as a processor (Art. 28 GDPR). Working copies are deleted once the device is returned, unless agreed otherwise in writing.

2.2. Online quotes, contact forms and enquiries

• Data: the data entered in the form (name, phone number, e-mail address, device model, description of the problem).
• Legal basis: steps taken at your request prior to entering into a contract (Art. 6(1)(b) GDPR) and our legitimate interest in replying to your enquiry (Art. 6(1)(f) GDPR).
• Purpose: we collect data from forms (online quote, door-to-door request, shipping form, contact form) in order to provide the repair service. If an order is placed, the data becomes part of the service history (section 2.1).
• Retention: if no order is placed – 12 months from the last contact. If an order is placed – as in section 2.1.

2.3. Buying and selling used equipment (Trade In, Preowned), leasing

• Data: identification and contact details, data needed for the sale agreement and payment, device details, information about Activation Lock.
• Legal basis: performance of a contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and our legitimate interest in verifying that the equipment does not originate from a crime (Art. 6(1)(f) GDPR).
• Leasing: if you choose financing, we pass your data to the leasing company you select (e.g. GRENKE Leasing). From that point on, it becomes a separate controller of your data.
• Retention: as in section 2.1.

2.4. Lost and stolen equipment database

• Data: the serial number or IMEI of the reported device and the contact details of the person reporting it. Contact details are not published.
• Legal basis: our legitimate interest and that of the person reporting, namely helping to recover lost equipment and preventing the handling of stolen goods (Art. 6(1)(f) GDPR).
• Retention: until the device is recovered, the report is withdrawn or a successful objection is raised.

2.5. E-mail marketing

• Purpose: sending information about our services, promotions and news to your e-mail address.
• Legal basis: your consent to receive marketing communications by electronic means (Art. 398 PKE – Polish Electronic Communications Law) and our legitimate interest in marketing our own services (Art. 6(1)(f) GDPR). We send marketing messages only to people who have given their consent.
• Unsubscribing: you can withdraw your consent at any time by clicking the unsubscribe link in the message or by writing to iod@maclife.pl.
• Retention: until you withdraw consent or object. After that, we keep only a record of the opt-out so that we do not send you further messages.

2.6. Recruitment

• Legal basis: employment law, including Art. 22¹ of the Kodeks pracy (Polish Labour Code) (Art. 6(1)(b) and (c) GDPR), and – for any data provided voluntarily beyond the required minimum – consent (Art. 6(1)(a) GDPR).
• Retention: until the end of the recruitment process or, if you consent to future recruitment, for up to 12 months or until you withdraw consent.

Phone calls with our service centres are recorded. You are informed of the recording by a message at the start of the call. If you do not want the call to be recorded, please contact us by e-mail or in person at a service centre.

• Purpose: documenting arrangements relating to orders (scope and cost of the repair, acceptance of the quote), handling complaints, establishing and defending against claims, and monitoring the quality of our service.
• Legal basis: our legitimate interest (Art. 6(1)(f) GDPR). You have the right to object to the recording.
• Transcription: recordings are automatically converted to text. Transcription takes place entirely on our own server, without the use of external cloud services. Transcripts form part of the service history and are used to document arrangements relating to orders.
• Where they are stored: we process recordings and their transcripts exclusively on our own server infrastructure, located within the European Union and under our sole control. Only authorised MacLife staff have access to them.
• No sharing: we do not share recordings or transcripts with any third parties and we do not use them to train artificial intelligence models. The only exception is where we are required by law to disclose them (e.g. at the request of a court or law enforcement authorities).
• Retention: audio recordings – 90 days from the date of the call; a recording needed to resolve a complaint or dispute is kept until that matter is closed. Transcripts – 6 years from the date of the call (the limitation period for claims under Art. 118 of the Polish Civil Code), after which they are deleted.
• Access to a recording: on request, we will provide you with a copy of the recording or transcript of a call in which you took part (Art. 15 GDPR). Simply write to iod@maclife.pl, stating the date of the call and your phone number.

In accordance with Article 50 of the AI Act, we inform you that the chat on this website is operated by an artificial intelligence system, not by a human. You can ask to be put in touch with a member of staff at any time.

• Purpose and legal basis: providing information about our services and prices and accepting service requests, i.e. steps taken prior to entering into a contract (Art. 6(1)(b) GDPR), and our legitimate interest in providing round-the-clock customer service (Art. 6(1)(f) GDPR).
• Provider: to generate replies, the assistant uses services provided by Anthropic PBC (a language model). The provider processes chat content as a processor under a data processing agreement and may not use it for its own purposes, including training models.
• Retention: a request accepted by the assistant is entered into our order system and kept as described in sections 2.1–2.2.
• The assistant does not make decisions that produce legal effects concerning you (Art. 22 GDPR). Binding arrangements are always confirmed by a member of staff.

In accordance with Art. 399 PKE (Polish Electronic Communications Law), cookies and similar technologies that are not strictly necessary for the website to function are stored on your device only after you give consent in the cookie banner. You can change or withdraw your consent at any time by clicking the cookie settings icon on the website.

• Necessary (no consent required): session handling, security, remembering your choice in the banner. The banner is managed by CookieYes Limited as a processor.
• Functional (with consent): remembering website settings, e.g. the language version, and embedded third-party content (e.g. YouTube videos).
• Analytics (with consent, Art. 6(1)(a) GDPR): Google Analytics 4 loaded via Google Tag Manager – visitor statistics. We use Google Consent Mode, so without your consent Google tools do not store analytics cookies.
• Marketing (with consent, Art. 6(1)(a) GDPR): Meta Pixel (Meta Platforms Ireland Ltd.) and Google advertising tags – measuring the effectiveness of ads and showing ads to people who have visited the website. With regard to data collection via Meta Pixel, we are joint controllers with Meta Platforms Ireland Ltd.

A detailed list of cookies, their providers and retention periods is available in the cookie banner settings. You can also block or delete cookies in your browser settings.

We run MacLife profiles on social media (Facebook, Instagram, X). We process the data of people who interact with us in order to communicate with them (Art. 6(1)(f) GDPR), and with regard to page statistics we are joint controllers with the platform operator.

Data may be disclosed only to the extent necessary to:

• authorised MacLife employees and associates,
• providers of hosting, e-mail, the order management system and IT services,
• courier companies (door-to-door service and shipping),
• payment operators and banks,
• our accounting firm and law firm,
• providers of the analytics and advertising tools listed in the cookie banner (including Google Ireland Ltd. and Meta Platforms Ireland Ltd.) – only with your consent,
• the consent banner provider (CookieYes Limited),
• the provider of our marketing e-mail system – only for people who have given consent,
• the chat AI assistant provider named in section 4,
• leasing companies – at your request,
• public authorities, where required by law.

Recordings of phone calls (section 3) are not disclosed to any of the above.

We do not sell personal data.

Some providers (Google, Meta, Anthropic) may process data in the USA. Such transfers take place on the basis of the European Commission implementing decision of 10 July 2023 on the adequate level of protection under the EU-US Data Privacy Framework (Art. 45 GDPR) – for certified entities – or on the basis of standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). You can obtain a copy of these safeguards by writing to iod@maclife.pl.

You have the right to:

• access your data and obtain a copy of it (Art. 15 GDPR),
• rectify your data (Art. 16 GDPR),
• erasure of your data (Art. 17 GDPR),
• restriction of processing (Art. 18 GDPR),
• data portability (Art. 20 GDPR),
• object to processing based on legitimate interest, including call recording (Art. 21 GDPR),
• withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal,
• lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, UODO – the Polish supervisory authority), ul. Moniuszki 1A, 00-014 Warszawa, uodo.gov.pl.

We respond to requests without undue delay and in any event within one month of receipt.

Providing your data is voluntary but necessary to enter into and perform a contract. Without it we cannot accept an order. Providing invoicing details is a statutory requirement.

We do not make decisions based solely on automated processing that produce legal effects concerning you or similarly significantly affect you. Only with your consent may advertising tools (section 5) tailor the ads you see to your activity on the website.

We apply technical and organisational measures appropriate to the risk (Art. 32 GDPR). These include encrypted connections (HTTPS), role-based access control, backups and restricting access to call recordings to authorised persons only.

This Policy may be updated if the law or the way we provide our services changes. The current version and its effective date are always shown on this page. We announce significant changes on the home page.