PRIVACY POLICY — ENGLISH TRANSLATION

Landing page for the report “Logistics That Sells” – MAI Institute

Effective date: 08.10.2026

This is an English translation of the Polish Privacy Policy. The Polish version is the original document.

We respect your privacy. Below we explain what data we collect through the page dedicated to the report “Logistics That Sells. How delivery options and quality determine e-commerce customers’ purchasing decisions”, why we process it, with whom we may share it, and what rights you have.

1. Who is the data controller?

The controller of personal data collected through the website is MAI Institute sp. z o.o., with its registered office in Wrocław at ul. Arbuzowa 13a/11, 54-054 Wrocław, entered in the register of entrepreneurs of the National Court Register maintained by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register, under KRS number 0001222830, REGON 543975072 and NIP 8943279534, hereinafter referred to as the “Controller”.

For matters related to personal data protection, you can contact us at majowicz@mai-inst.com.

2. What data do we collect?

Depending on how you use the website, we may process:

data provided in the form: first name, last name, e-mail address, company name and other information if the form provides for its submission;

information about consents given, including their content, date and method of giving or withdrawing them;

technical data related to use of the website, such as IP address, browser and device information, and activity on the website, to the extent arising from the technologies actually used;

information related to sending the report and handling correspondence.

We do not ask for special categories of personal data, such as information about health or religious beliefs.

3. For what purposes do we process data?

A. Registration and delivery of the report

We use the data provided in the form to add you to the list of recipients and send the report “Logistics That Sells” to the e-mail address you provide, in accordance with the information shown at registration.

The legal basis is Article 6(1)(b) of the GDPR, where processing is necessary to provide the requested report access service.

B. MAI Institute marketing

If you give a separate consent, we may send you electronic information about our reports, research, webinars, conferences, training and other industry initiatives.

The legal basis for processing is Article 6(1)(a) of the GDPR. Sending commercial information electronically is based on the consent required under the Polish Electronic Communications Law.

C. Sharing data with report partners

If you give the appropriate voluntary consent, we may share the personal data indicated in the form with partners of the report “Logistics That Sells” so that they may carry out their own marketing activities within the scope of the consents given.

The legal basis for sharing the data is Article 6(1)(a) of the GDPR.

A list of the partners with whom data may be shared, together with their full names and information about data processing, will be available directly next to the registration form.

After receiving the data, partners may act as separate controllers of personal data. Each is responsible for processing the data received in accordance with the law and for fulfilling information obligations relating to its own activities.

D. Handling enquiries and correspondence

If you contact us, we process data necessary to respond and conduct correspondence.

The legal basis is Article 6(1)(f) of the GDPR, namely our legitimate interest in handling contacts and enquiries.

E. Security and legal claims

We may process necessary data to ensure website security, document consents and establish, pursue or defend legal claims.

The legal basis is Article 6(1)(f) of the GDPR.

4. Is providing data mandatory?

Providing the data required in the form is necessary to process the registration and send the report. Giving marketing consents is voluntary and is not a condition for receiving the report.

5. How can you withdraw consent?

You may withdraw any marketing consent at any time.

For communications from MAI Institute, you can do so using an unsubscribe link in an e-mail, if available, or by contacting us at majowicz@mai-inst.com.

If your data has already been shared with a partner, you may also contact that partner directly to withdraw consent to its marketing communications.

Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

6. How long do we retain data?

We process data for the period necessary to achieve the purpose for which it was collected.

Registration and sending the report: until the registration and delivery of the publication have been completed, and then for the period necessary to demonstrate proper handling of the registration or defend against possible claims.

Consent-based marketing: until consent is withdrawn or the marketing activities end earlier.

Documenting consents: for the period necessary to demonstrate that they were properly obtained and to meet legal obligations.

Correspondence: for the period necessary to handle the matter and any claims.

Technical data: according to the retention periods arising from the tools actually used.

After the applicable retention period, data will be deleted or anonymised unless further retention is required by law.

7. To whom may we disclose data?

Data may be accessed by:

entities providing us with hosting, form handling, e-mail sending and IT infrastructure maintenance services;

providers of analytics tools, if such tools are used on the website;

providers of legal, accounting or IT services;

report partners, but only to the extent covered by the appropriate legal basis and consents given;

authorised public authorities, where disclosure is required by law.

Entities processing data on our behalf act under appropriate agreements and in accordance with our instructions.

We do not sell personal data to data brokers.

8. Do we transfer data outside the European Economic Area?

We do not transfer data outside the European Economic Area.

9. What rights do you have?

In connection with the processing of personal data, you have the following rights in the cases provided for by the GDPR:

access to your data;

rectification of your data;

erasure of your data;

restriction of processing;

data portability;

objection to processing based on a legitimate interest;

withdrawal of consent at any time.

To exercise your rights, contact us at majowicz@mai-inst.com.

You also have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland.

10. Cookies and similar technologies

The website may use cookies and similar technologies necessary for its proper operation.

11. Automated decision-making

We do not use automated decision-making, including profiling that produces legal effects or similarly significantly affects users; such processes are not carried out.

12. Data security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, alteration or disclosure.

Only persons and entities authorised to process data to the extent necessary to perform their assigned tasks have access to it.

13. Changes to this Privacy Policy

We may update this Privacy Policy, in particular if laws, the scope of data processing or the tools used change.

The current version of the document will be available on the page dedicated to the report.

Last updated: 08.10.2026

MAI Institute sp. z o.o. Contact for personal data protection matters: majowicz@mai-inst.com