Privacy Policy

Last updated: 21 July 2026

1. Who we are

This Privacy Policy explains how MagellanERP Sp. z o.o. ("MagellanERP", "we", "us") collects, uses, and protects personal data of visitors to this website, in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR").

2. What data we collect

We collect personal data in the following situations:

• Contact form. When you request a demo or contact us, we collect your name, business e-mail address, company name, and any information you include in your message.
• E-mail correspondence. When you write to us directly, we process the data contained in your message.
• Technical data. Our hosting infrastructure automatically records basic technical information (such as IP address, browser type, and access time) in server logs for security and operational purposes.

We do not use advertising trackers and we do not sell personal data.

3. Purposes and legal bases of processing

• Responding to your enquiry and arranging a demo or consultation - Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in communicating with prospective clients).
• Marketing communication, where you have asked us to keep in touch - Art. 6(1)(a) GDPR (consent), which you may withdraw at any time.
• Security, error diagnosis, and operation of the website - Art. 6(1)(f) GDPR (our legitimate interest in maintaining a secure and functional service).
• Establishing, exercising, or defending legal claims - Art. 6(1)(f) GDPR.

4. Recipients of data

We share personal data only with service providers who support the operation of this website and our business, such as hosting providers, e-mail service providers, and IT support - always under data processing agreements compliant with Art. 28 GDPR.

Formcarry (Teijal Inc.) processes submissions from the contact form on our behalf. Form data is stored in Frankfurt, Germany. Authorised support and engineering personnel in the United States may access it when necessary to provide the service; such transfers are protected by Standard Contractual Clauses.

Fonts on this website are delivered by an external font service; when the page loads, your browser contacts that provider's servers, which may involve the transfer of your IP address.

Where another service provider processes data outside the European Economic Area, we ensure an adequate level of protection through mechanisms provided for in Chapter V GDPR (such as adequacy decisions or Standard Contractual Clauses).

5. How long we keep data

• Contact form and enquiry data - for the duration of our correspondence and up to 24 months after the last contact, unless a business relationship is established.
• Data processed on the basis of consent - until the consent is withdrawn.
• Server logs - typically up to 90 days.
• Data related to legal claims - for the applicable limitation periods.

6. Your rights

Under the GDPR you have the right to:

• access your personal data (Art. 15),
• rectify inaccurate data (Art. 16),
• erase your data (Art. 17),
• restrict processing (Art. 18),
• data portability (Art. 20),
• object to processing based on legitimate interest (Art. 21),
• withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).

To exercise any of these rights, contact us at contact@magellanerp.com. You also have the right to lodge a complaint with a supervisory authority - in Poland, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl).

7. Cookies and similar technologies

This website does not use advertising or analytics cookies. Only technically necessary mechanisms required to deliver the website are used. If we introduce analytics or marketing cookies in the future, we will update this policy and ask for your consent where required.

8. Automated decision-making

We do not use your personal data for automated decision-making or profiling that produces legal effects concerning you.

9. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or disclosure, including encrypted connections (TLS), access controls, and regular reviews of our security practices.

10. Changes to this policy

We may update this Privacy Policy from time to time, for example when our services or legal requirements change. The current version, with its effective date, will always be published on this page.