1. General information
The controller of personal data is Egzekucja spółka cywilna Ryszard Rudzki, Andrzej Kraś, run by partners entered in the Central Registration and Information on Business (CEIDG), with its registered office in Zielona Góra (65-602), ul. Miodowa 2b, telephone: +48 68 325 50 17, hereinafter referred to as the Controller.
The Controller attaches particular importance to protecting the privacy of people using the website and to the security of processed personal data.
This Privacy Policy and Cookies Policy (hereinafter: the Policy) sets out the rules for processing personal data of website users and provides information on the use of cookies and similar technologies.
The Controller is not required to appoint a Data Protection Officer pursuant to Article 37 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR).
In all matters related to the processing of personal data and the exercise of rights under the GDPR, the Controller may be contacted:
by email: euroinkasso@euroinkasso.pl
by phone: +48 68 325 50 17
2. What data we process
- contact data provided in the form or by email, in particular email address, phone number and the content of the message,
- data contained in attachments sent by the user, where such documents are needed to assess the matter,
- identification and organisational data provided by clients in connection with case handling and cooperation with the controller,
- technical data related to the use of the website and technical tools, such as IP address, basic device and browser information, system logs and interface settings.
3. Period of personal data processing
Personal data is processed for the period necessary to achieve the purposes for which it was collected, in particular:
- for the duration of correspondence and after it ends - until the expiry of the limitation period for any potential claims,
- where an agreement is concluded - for the period of its validity and after its termination for the time required by law,
- where processing is based on consent - until that consent is withdrawn.
4. Voluntary provision of data
Providing personal data is voluntary; however, failure to provide it may make it impossible to:
- respond to an enquiry,
- conclude or perform an agreement.
5. Rights of data subjects
The data subject has the right to:
- access personal data,
- rectify data,
- erase data,
- restrict processing,
- data portability,
- object to processing,
- withdraw consent at any time (where processing is based on consent),
- lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warszawa, Poland, www.uodo.gov.pl.
6. Purposes and legal bases of personal data processing
The User may use the website without disclosing their identity. In specific cases, however, personal data may be processed for the following purposes:
1. Handling enquiries and contact
Personal data is processed in order to respond to enquiries submitted via the contact form, email or telephone.
Scope of data in the contact form: email address, telephone number (optional), subject and message content.
Retention period: contact form data is retained for 3 years from the date the message is received or until the enquiry has been handled.
Legal basis: Article 6(1)(b) GDPR - taking steps prior to entering into a contract or performance of a contract; Article 6(1)(f) GDPR - the Controller's legitimate interest in conducting correspondence.
2. Establishing cooperation and performing agreements
Personal data is processed for the purpose of entering into and performing agreements, in particular agreements concerning debt recovery.
Legal basis: Article 6(1)(b) GDPR.
3. Compliance with legal obligations
Personal data is processed in order to comply with obligations arising from law, in particular tax regulations and accounting legislation.
Legal basis: Article 6(1)(c) GDPR.
4. Pursuing and defending claims
Personal data may be processed for the purpose of establishing, pursuing or defending claims.
Legal basis: Article 6(1)(f) GDPR.
5. Ensuring website security
Personal data is processed in order to ensure website security, prevent abuse and protect against spam.
Legal basis: Article 6(1)(f) GDPR.
6. Website analytics
Personal data, including IP address or statistical data, may be processed for the analysis of website traffic and the improvement of website performance - only after the User's consent has been obtained.
Legal basis: Article 6(1)(a) GDPR.
The Controller does not carry out profiling within the meaning of Article 22 GDPR and does not make decisions producing legal effects concerning the User or similarly significantly affecting the User.
Where personal data is processed on the basis of Article 6(1)(f) GDPR (legitimate interests of the Controller), the data subject has the right to object at any time – without providing reasons (Article 21 GDPR). The Controller will cease processing unless it demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or grounds for the establishment, exercise or defence of legal claims.
7. Contact form and correspondence
Providing data in the contact form is voluntary, but necessary if we are to reply to your enquiry. Without that information, a response may be impossible or significantly delayed.
If files or documents are attached to the form, the user should limit their content to information necessary to assess the matter. The materials provided may contain personal data, so they are processed solely in order to handle the enquiry, analyse the matter and prepare a response.
9. Data recipients
Personal data may be disclosed to:
- employees and associates of the Controller authorised to handle cases,
- IT and hosting service providers,
- email service providers,
- providers of accounting, legal and advisory services,
- Google LLC in connection with Google Fonts and Google Maps services,
- public authorities - on the basis of applicable law.
10. Transfers of data outside the European Union
Where tools provided by entities outside the European Economic Area are used, personal data may be transferred to third countries, in particular to the United States.
Data transfers take place on the basis of standard contractual clauses (SCCs) or other mechanisms compliant with Articles 45 and 46 GDPR. The Controller verifies in each case whether providers ensure an adequate level of personal data protection.
Personal data is not disclosed to third parties for marketing purposes.
11. Final information
The Controller reserves the right to amend this Policy.
The current version of the document is always available on the Controller's website.