Privacy policy

Welcome to the website https://b2b-tamo.com/ (the “Website”) owned by .mdd Sp. z o.o. with its registered office in Sępólno Krajeńskie at the following address: (89-400), ul. Koronowska 22, KRS: 0000097731 NIP: 5611437378, REGON: 092911632, and to TAMO DESIGN Sp. z o.o., with its registered office in Gdynia at (81-547) al. Zwycięstwa 220, KRS: 0001141340, NIP: 5862412329, REGON: 540312833.

The protection of personal data and information security have always been a priority in the companies' activities. We are aware that information has a specific value and constitutes a resource that requires proper protection, so we are committed to providing adequate information on matters related to the processing of personal data, especially in view of the content of personal data protection regulations, including Regulation (EU) 2016/679 of the European Parliament and of the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”).

The privacy policy aims to explain how we collect, use, and share the data that you may provide when using the Website. Please read this document carefully before using our services or providing any personal data.

The Controllers of your personal data are the following companies:

• .mdd Sp. z o.o. with its registered office in Sępólno Krajeńskie at the following address: (89-400), ul. Koronowska 22, KRS: 0000097731 NIP: 5611437378, REGON: 092911632,
• DIGITAL DIRECT Sp. z o.o., with its registered office in Bydgoszcz at the following address: (85-023), ul. Toruńska 33, KRS: 0000915881, NIP: 9532784828, REGON: 389662490,
• TAMO DESIGN Sp. z o.o., with its registered office in Gdynia at (81-547) al. Zwycięstwa 220, KRS: 0001141340, NIP: 5862412329, REGON: 540312833,

which we communicate in a shortened version of the information obligation provided in accordance with Articles 13.1 and 14.3 of the GDPR in direct or indirect communication.

Would you like to notify us of a breach of your personal data protection, send us a request regarding your rights as a data subject? Do you have questions or concerns about the protection of your personal data? Please contact our Data Protection Officer directly at the following e-mail address: iod@mdd.pl or witaj@tamo.design (email titled “Personal Data Protection”).

We have obtained your personal data directly from you in connection with the ordering and fulfillment process, during our mutual cooperation, or from publicly available sources.

We process personal data in the scope of contact details (e.g., phone number, email address) required to fulfill an order or contract, employment data (position, place of employment), and identification data (first name, last name). We also collect data on website usage.

Purposes and legal basis of data processing:

• Establishing communication and maintaining business relations – processing is necessary for the legitimate interests of the controller consisting in the purchase of goods and services necessary for the conduct of business (Article 6(1)(f) of the GDPR).
• Performance of the provisions of the contract and orders – processing is necessary for the performance of activities prior to the conclusion of the contract and for the performance of its provisions (Article 6(1)(b) of the GDPR).
• Keeping accounting and tax records – processing is necessary for compliance with a legal obligation under Article 74 of the Accounting Act and other acts concerning taxpayers (Article 6(1)(c) of the GDPR).
• Pursuing claims and protection against claims – processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6(1)(f) of the GDPR).
• Marketing of own services, where processing is necessary for the purposes of the legitimate interests pursued by the controller (Article 6(1)(f) of the GDPR), and in the case of implementation through the indicated communication channel [telephone, e-mail], on the basis of consent given in this regard (Article 6(1)(f) of the GDPR in conjunction with Article 10(1)-(2) of the Act on the provision of electronic services or Article 172(1) of the Telecommunications Act).
• Marketing of own services may be preceded by profiling, understood as the automated matching of shared content to the interests or needs of the customer, when processing is necessary for purposes arising from the legitimate interests of the Controller (Article 6(1)(f) of the GDPR), and in the case of profiling that significantly affects your decisions, only if such consent has been given.
• As part of the https://b2b-tamo.com/ website, we use information stored in cookies, i.e., IT data stored on users' end devices intended for use with websites (e.g., computers, tablets, phones). They usually contain the name of the website they come from, the time they are stored on the end device, and a unique number when you visit our website, but you can read more about this in the Cookie Policy.
• Regardless of the situation, we undertake not to sell, commercialize, or use your personal data in violation of applicable data protection laws.

We process data for the following periods:

• until an effective objection/request for data deletion is submitted – applies to points 1 and 5 above, excluding e-mail and telephone communication;
• until the contract is terminated or expires – applies to point 2 above;
• 5 years from the end of the calendar year in which the contract was terminated or expired – applies to point 3 above;
• expiry of the limitation period for claims – applies to point 4 above;
• until consent is withdrawn – applies to points 5 and 6 above.

Personal data will be transferred by the controller only to trusted entities, such as companies providing and servicing selected IT systems and solutions, accounting, legal, postal, and courier service providers.

As a rule, personal data will not be transferred outside the EEA or made available to international organizations. However, if the controller uses service providers outside the EEA that have not been recognized by the European Commission as providing an adequate level of personal data protection, the transfer of personal data to the above-mentioned entities is based on standard data protection clauses adopted by the European Commission, which means that they are subject to appropriate safeguards in terms of the protection of privacy and the rights and freedoms of data subjects. A copy of the standard contractual clauses can be obtained from the controller.

In connection with our processing of your personal data, you have the right to:

• request access to your personal data,
• request the rectification or modification of your personal data,
• request the deletion or restriction of the processing of your personal data,
• object to the processing of your data,
• lodge a complaint with a supervisory authority, which in Poland is the President of the Personal Data Protection Office.

You can exercise your rights by sending a relevant request by traditional mail to the address of the Administrator's registered office or by e-mail:

.mdd Sp. z o.o.

• ul. Koronowska 22,
• 89–400 Sępólno Krajeńskie
• iod@mdd.pl

DIRECT DIGITAL Sp. z o.o.

• ul. Toruńska 33,
• 85-023 Bydgoszcz
• iod@mdd.pl

TAMO DESIGN Sp. z o.o.

• al. Zwycięstwa 220,
• 81-547 Gdynia
• witaj@tamo.design (email titled “Personal Data Protection”)

Providing data is voluntary, but necessary for the conclusion and performance of the contract and delivery of orders.

Data processing in the process of marketing our own services may be preceded by profiling, understood as the automated matching of shared content to the customer's interests or needs. If profiling significantly influences your decisions, the mechanism is activated after you give your consent.

In order to protect personal data from unauthorized access, disclosure, alteration, or destruction, we have taken appropriate organizational and technical measures, including physical, electronic, and managerial procedures, to ensure the protection and security of the information collected by the companies.

We are developing our competencies, modernizing our processes, and subjecting our data processing model and security measures to audits, which may result in changes to the communications addressed to you and made available here. We reserve the right to update them.

Updated documents will be published on the Website.

Date of the last update: 2026-01-15