Visit our stationary exchange
We care about your confidentiality. We collect and process your data only when necessary to provide the service properly.
Below we present you the data processing principles that the Administrator applies in accordance with the GDPR.
I. Who is the Data Controller?
The Data Controller is Kantor Kurs Sp.z o.o., NIP 8971912239, KRS 0000993495 ul. Szewska 75/77, 50-121 WROCŁAW.
II. What is the purpose of collecting your data? How long do we process it?
We may process your data for the following purposes:
1. Communication with you, including responding to inquiries sent through the contact form, email, online meetings, etc.
Your data will be processed on the basis of the Administrator's legitimate interest in communicating with website users (art. 6 para. 1 lit. f GDPR). Your data will be processed no longer than until you express an objection or until the business purpose ceases. Providing this data is voluntary but necessary for communication with you. The data may also be processed for archiving purposes, for internal purposes based on the Administrator's legitimate interest (art. 6 para. 1 lit. f GDPR) until you express an objection or until the business purpose ceases.
2. Conclusion of the contract and its execution (placement of an order);
3. Acceptance, defense, and protection of claims;
4. Performance of legal obligations imposed on the Administrator (including tax and archival obligations, as well as obligations arising from the Law on the Prevention of Money Laundering and Terrorism Financing).
The data necessary for the conclusion and execution of the contract will be processed during the term of the contract, including the term of the exercise of contractual rights, such as the right to lodge a complaint under the warranty (Art. 6(1)(b) and (f) of the GDPR). Providing this data is voluntary but necessary for the conclusion and execution of the contract.
Additional data provided to facilitate the performance of the contract, among other things, will be processed no longer than until you object or until the business purpose ceases based on the legitimate interest of customer service (Art. 6(1)(b) and (f) of the GDPR).
After this period, the data will be processed for the limitation period for claims based on the legitimate interest of the Administrator to defend against claims and to receive and examine claims (Art. 6(1)(b) and (f) of the GDPR).
If the data is necessary to perform legal obligations imposed on the Administrator (such as issuing and storing invoices), the data will be processed for this purpose for no longer than 6 years (obligations regarding the archiving of accounting documents), or, regarding obligations under the Law on the Prevention of Money Laundering and Terrorism Financing, for 5 years from the date of termination of business relations, a one-time transaction or a risk analysis, unless a longer period is required by law (Art. 6(1)(b) and (f) of the GDPR).
Data may also be stored for internal and statistical purposes until you object or until the business purpose ceases based on the legitimate interest of the Administrator (Art. 6(1)(f) of the GDPR).
5. Sending marketing information (including sending newsletters and other information about services, products, promotions, and free content).
Your data will be processed based on the legitimate interest of the Administrator in promoting their products and services on the market (art. 6 ust. 1 lit. f RODO). Your data will be processed no longer than until you object or until the business purpose ceases - depending on what happens first. Providing data is voluntary, but necessary to receive the newsletter.
For commercial communication purposes, your consent is required under Article 10 of the Act of July 18, 2002 on the provision of services by electronic means (Dz.U. z 2002 r. Nr 144, poz. 1204). You can withdraw your consent at any time by writing to us at the above address.
6. For the administration and management of the website and groups on social media platforms (including Facebook), primarily when processing data on social media platforms, we communicate with you, targeting you with marketing content.
This data will only be processed if you decide to like the page, join the group, choose "Subscribe" or otherwise leave your data on a platform managed by us (for example, in the form of a post or comment). Data will be processed throughout the existence of the page or group, or until you express objection, which can be done by unchecking the "Like!", "Follow" option, deleting a comment/post or any other way provided on the platform/website or by contacting us.
Please note that the rules regarding the page/fan page/group are established by the Administrator, while the terms of use of the social network on which the page/fan page/group is located are established by the entity that manages these portals.
7. Collection of confidential data based on your consent or regulatory requirements.
If you have provided your consent and if it is necessary for the performance of a contract and its proper processing, we will also process confidential data (art. 9 par. 2 lit. a or g GDPR). Data will be collected until the business purpose ceases or until the consent is withdrawn, or, in the case of processing based on Article 9 par. 2 lit. g, for the period provided for by law. The provision of data is voluntary but necessary for the proper performance of the contract.
III. Whom can we share your data with?
We only share your data with other parties if necessary for the purposes of processing as outlined in Section II.
If necessary, your data may be shared with organizations we collaborate with for the aforementioned purposes, including hosting companies, IT companies/website management companies, accounting service providers, newsletter distributors, cloud service providers, advertising agencies, marketing companies, lawyers, social media platforms (e.g., Facebook), and software development companies (e.g., CRM).
As a general rule, data will not be transferred outside the EEA. However, if they are transferred outside the EEA, this will be done on the basis of your consent, standard contractual clauses, or other safeguards provided by GDPR, after fulfilling, among other things, the obligation to provide information.
IV. What rights do you have?
In connection with GDPR, you have the right to:
● access your personal data;
● rectify your personal data;
● erase your personal data;
● restrict the processing of your personal data;
● object to the processing of your personal data;
● data portability;
● withdraw consent; withdrawing consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you believe that your personal data is being processed in violation of the applicable law, you have the right to lodge a complaint with the Head of the Personal Data Protection Office (Prezesa Urzędu Ochrony Danych Osobowych). However, in such a case, we recommend that you contact us in advance to clarify any doubts.
V. Legal provisions applicable to personal data.
In matters that are not regulated, relevant provisions of Polish and European legislation, including in particular the GDPR, are applied.
VI. Cookie Policy.
The administrator uses technologies that track user actions on the website:
1. Facebook conversion pixel - for managing Facebook ads and conducting remarketing campaigns;
2. Google Analytics code and codes for advertising on the Google platform - for analyzing website statistics and targeting advertising to the audience. Google Analytics uses its own cookie files to analyze user actions and activity on the website. These cookie files are used to store information, such as which page the user came from to the current site. They help improve the website's performance and, in the case of tracking code for advertising on the Google platform, increase the effectiveness of advertising targeting on the Google platform.
The website does not automatically collect any information other than what is contained in the cookie files.
Cookie files (so-called "cookies") are computer data, including text files, that are stored on the end-user device of the website user and are intended for use on the website. Cookies typically contain the name of the website they originate from, the time they are stored on the end device, and a unique number.
Cookie files are used to adapt the content of the website to the user's preferences and optimize the use of the website; to create statistics that help us understand how users use the website, allowing us to improve its structure and content.
You can change the cookie file settings yourself. In many cases, your web browser allows cookies to be stored on your end device by default. Detailed information about the possibility and methods of processing cookie files is available in the settings of your software (web browser).
Refusal to consent to the use of cookie files may limit the functioning of certain functions on the website.
VII. Joint administration.
The administrator carries out joint management of data collected for statistical purposes on the Facebook platform with Meta Platforms Ireland Limited, whose legal address is: 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter referred to as the Joint Controller. The data is processed based on joint administration by the aforementioned entities. Details of joint data management, including information about your rights, are described on the Site Statistics Information page.
The administrator processes data based on the legitimate interest of the administrator, which consists of analyzing user activity and preferences to improve the functional capabilities and services provided. Regarding personal data, inquiries can be directed to both the Administrator and the Joint Administrator.