// Legal notice

Privacy policy

Below we explain what data we collect about you, why, on what legal basis, and what you can do about it. Without legal fog wherever it can be avoided.

Last updated: 21 August 2026

This English translation is provided for convenience. The Polish version is the legally binding one.

Definitions

  • Controller (We) - Funmedia sp. z o.o. with its registered office at ul. Kiełczowska 70, 51-354 Wrocław, operator of the Hanza brand.
  • Personal data - any information relating to an identified or identifiable natural person who can be identified through one or more specific factors determining their physical, physiological, genetic, mental, economic, cultural or social identity, including the device IP, location data, an online identifier and information collected via cookies and other similar technology.
  • Policy - this Privacy policy.
  • GDPR (RODO) - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC.
  • Website - the website operated by us at hanzagroup.com.
  • User (You) - any natural person visiting the Website or using one or more of the services or functionalities described in the Policy.

Processing of data in connection with use of the Website

In connection with your use of the Website, we collect your data to the extent necessary to provide the individual services offered, as well as information about your activity on the Website. Below we describe the detailed rules and purposes of processing personal data collected during your use of the Website.

Use of the Website

We process the personal data of all persons using the Website (including: name, email address, IP address or other identifiers, and information collected via cookies or other similar technologies) for the following purposes:

  • to provide services by electronic means consisting of making the content collected on the Website available to Users - the legal basis for processing is the necessity of processing to perform a contract (art. 6(1)(b) GDPR);
  • for analytical and statistical purposes - the legal basis for processing is our legitimate interest (art. 6(1)(f) GDPR) consisting in conducting analyses of Users' activity and their preferences in order to improve the functionalities used and the services provided;
  • for the potential establishment and pursuit of claims or defence against them - the legal basis for processing is our legitimate interest (art. 6(1)(f) GDPR) consisting in the protection of our rights;
  • for marketing purposes - the rules for processing personal data for marketing purposes are described in the “Marketing” section.

Your activity on the Website, including your personal data, is recorded in system logs. The information collected in the logs is processed primarily for purposes connected with the provision of services. We also process it for technical and administrative purposes, for the needs of ensuring the security of the IT system and managing that system, as well as for analytical and statistical purposes - in this respect the legal basis for processing is our legitimate interest (art. 6(1)(f) GDPR).

Contact forms

On the Website we provide the possibility of contacting us using electronic contact forms. Using a form requires you to provide the personal data necessary for us to be able to contact you and respond to the question asked. In the form you may also provide other data to make it easier for us to contact you or handle your enquiry. Providing the data marked as mandatory is required in order to accept and handle the enquiry, and failure to provide it will mean we cannot handle your question. Providing the remaining data is voluntary.

The personal data you send us via the contact form is processed:

  • in order to identify you as the sender and to handle your enquiry submitted via the form provided - the legal basis for processing is the necessity of processing to perform a contract for the provision of a service (art. 6(1)(b) GDPR);
  • for analytical and statistical purposes - the legal basis for processing is our legitimate interest (art. 6(1)(f) GDPR) consisting in keeping statistics of enquiries submitted by Users via the Website in order to improve its functionality.

Marketing

We process your personal data in order to carry out marketing activities, which may consist of:

  • displaying marketing content that is not tailored to your preferences (contextual advertising);
  • displaying marketing content matching your interests (behavioural advertising);
  • sending email notifications about offers or content that may be of interest, which in some cases contain commercial information;
  • conducting other kinds of activities connected with direct marketing of goods and services (sending commercial information by electronic means and telemarketing activities).

In order to carry out marketing activities we use profiling in some cases (if you consent to it). This means that, through the automated processing of data, we assess selected factors concerning natural persons in order to analyse their behaviour or create a forecast for the future.

Direct marketing

Your personal data may also be used by us so that we can send you marketing content through various channels, i.e. by email, by SMS or by phone. We undertake such activities only where you have consented to them, and you may withdraw that consent at any time.

Social media

We process your personal data when you visit our profiles maintained on social media (including LinkedIn, Facebook, Instagram, YouTube). This data is processed solely in connection with running the profile, including in order to inform you about our activity and to promote various kinds of events, services and products. The legal basis for processing personal data for this purpose is our legitimate interest (art. 6(1)(f) GDPR) consisting in promoting our own brand.

Cookies and similar technology

Cookies are small text files installed on your device when you browse the Website. Cookies collect information that makes it easier to use the website - e.g. by remembering your visits to the Website and the actions you take.

“Service” cookies

We use so-called service cookies primarily in order to provide you with the services supplied by electronic means and to improve the quality of those services. The cookies used for this purpose include files with data entered by you (session identifier), files used to ensure security, and files used to personalise the User interface.

Analytical and marketing cookies

We and our partners also use cookies for analytical and marketing purposes, including in connection with directing behavioural advertising to you. The use of cookies and of the personal data collected through them for these purposes requires obtaining your consent, which you may withdraw at any time.

Managing consent and cookies

You manage your consent in the consent banner that is displayed on your first visit to the Website - you can return to it at any time and change or withdraw your choice. Independently of this, you can change the cookie settings in your browser. Please note that disabling cookies necessary for authentication, security and maintaining user preferences may make it harder to use the Website.

The tools we use

Below we list the specific tools operating on the Website. All of them are loaded via Google Tag Manager and - apart from the necessary files - are activated on the basis of your consent.

  • Google Analytics 4 (Google Ireland Ltd. / Google LLC) - statistical analysis of traffic on the Website. Details: policies.google.com/privacy and Google partner rules. You manage your advertising preferences at google.com/ads/preferences.
  • Microsoft Clarity (Microsoft Ireland Operations Ltd.) - analysis of User behaviour through heatmaps and session recording. Entered passwords are not recorded; the content of form fields is masked. Details: privacy.microsoft.com.
  • Meta Pixel (Meta Platforms Ireland Ltd.) - measurement of campaign effectiveness and remarketing. We do not pass any additional personal data of yours to Meta. Details: facebook.com/policy.php.
  • Google Tag Manager - a tool managing the firing of the above tags in accordance with your consent.

Some of these entities are established outside the European Economic Area. In such a case the transfer of data takes place on the basis of standard contractual clauses approved by the European Commission or an adequacy decision (EU-US Data Privacy Framework).

Your rights

In connection with the fact that we process your personal data, you have the following rights:

  • the right to information about the processing of personal data - at your request we will provide you with information about the processing of data, including the purposes and legal bases of processing, the scope of the data held, the entities to which it is disclosed, and the planned period for erasing the data;
  • the right to obtain a copy of the data - at your request we will provide you with a copy of the processed data concerning the person submitting the request;
  • the right to rectification - at your request we are obliged to remove any discrepancies or errors in the processed personal data and to supplement it if it is incomplete;
  • the right to erasure of data - you may request the erasure of data whose processing is no longer necessary to achieve any of the purposes for which it was collected;
  • the right to restriction of processing - at your request we will cease carrying out operations on your personal data - with the exception of operations to which you have consented - and storing it, until the reasons for the restriction cease;
  • the right to data portability - to the extent that your data is processed in connection with a concluded contract or consent given, we will provide you with the data you supplied in a format allowing it to be read by machine;
  • the right to object to the processing of data for marketing purposes - you may object to such processing at any time, without having to give a reason;
  • the right to object to other processing purposes - you may object to processing that takes place on the basis of our legitimate interest; an objection in this respect should include a justification;
  • the right to withdraw consent - if data is processed on the basis of your consent, you have the right to withdraw it at any time, which does not affect the lawfulness of processing carried out before the withdrawal;
  • the right to lodge a complaint - if you consider that the way in which we process your personal data infringes the provisions of the GDPR (RODO), you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Security of personal data

We take all steps to ensure that your personal data is processed in a secure manner - ensuring above all that access to your data is held only by authorised persons and only to the extent necessary in view of the tasks they perform.

We also take the necessary measures to ensure that our subcontractors and other cooperating entities guarantee the application of appropriate security measures in every case where they process your personal data on our behalf.

Contact details

In all matters referred to in this Policy, in particular those connected with the processing of your personal data, you can contact us at [email protected].