Privacy and Cookies Policy

§1. General information

This Privacy and Cookies Policy sets out the rules for the processing of personal data and the use of cookies on the website www.zmianakrs.pl (hereinafter: the “Website”), operated by Krystian Karpiuk Kancelaria Radcy Prawnego, ul. Wschodnia 24/3, 62-030 Luboń, Poland, NIP: 669-217-69-58 (hereinafter: the “Controller”).

The Website and the services provided are intended exclusively for entrepreneurs within the meaning of Article 43 of the Polish Civil Code. The Controller does not provide services to consumers.

The Controller does not provide electronic services within the meaning of the Act of 18 July 2002 on the provision of electronic services.

Use of the Website constitutes acceptance of this Privacy and Cookies Policy.

§2. Personal data controller and contact details

The controller of personal data is Krystian Karpiuk Kancelaria Radcy Prawnego, ul. Wschodnia 24/3, 62-030 Luboń, Poland, NIP: 669-217-69-58, e-mail: biuro@zmianakrs.pl, telephone: +48 572 234 779.

In matters related to the protection of personal data, contact may be made using the above e-mail address or by telephone.

§3. Purposes and legal bases for data processing

The Controller processes personal data for the purpose of:

• performance of services related to handling entries and changes in the National Court Register (KRS), incorporation of companies and preparation of documentation (Article 6(1)(b) GDPR),
• compliance with legal obligations (Article 6(1)(c) GDPR),
• contact and communication with the User (Article 6(1)(b) and (f) GDPR),
• direct marketing of the Controller’s own services (with consent – Article 6(1)(a) GDPR),
• ensuring security and administration of the Website (Article 6(1)(f) GDPR).

Data are processed solely to the extent necessary to achieve the above purposes.

§4. Types of processed data

Personal data include: first and last name, company name, e-mail address, telephone number, company registration data, registered office address, power of attorney data, IP address, technical data of the device and browser, as well as other data necessary for the provision of services.

Data may be provided directly by the User or obtained automatically during use of the Website (e.g. cookies).

§5. Data recipients and transfer of data outside the EEA

Data may be transferred to:

• entities processing data on behalf of the Controller (IT service providers, hosting providers, accounting offices, law firms, notaries, etc.),
• public authorities on the basis of applicable legal provisions,
• technological partners (including Google, Meta, Hotjar, Smartsupp) to the extent necessary for the provision of services.

Transfer of data outside the European Economic Area takes place exclusively on the basis of a European Commission adequacy decision or standard contractual clauses.

§6. Transfer of personal data to registry systems and registry courts

In the course of providing services, the Controller transfers personal data to registry systems, including the S24 electronic platform operated by the Ministry of Justice, the Court Registers Portal (PRS), and directly to registry courts, in order to submit applications and perform obligations arising from legal provisions, in particular the Act on the National Court Register.

Transfer of such data is necessary for the performance of the agreement and provision of services and is not possible without making such data available to the competent registry authorities.

The Ministry of Justice and registry courts are personal data controllers with respect to the processing of personal data in the S24 and PRS systems and in registry courts.

§7. Data retention period

Personal data are stored for the period necessary to achieve the purposes of processing, including the duration of the agreement and periods required by applicable law.

After expiry of the retention period, data are deleted or anonymized.

§8. Rights of data subjects

The User has the right to:

• access their data,
• rectify data,
• erase data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the supervisory authority (President of the Polish Personal Data Protection Office – UODO).

Requests regarding the exercise of rights may be submitted by e-mail to: biuro@zmianakrs.pl.

§9. Data security

The Controller applies technical and organizational measures ensuring data security, including SSL encryption, access control and audits.

Personal data are not used for profiling or automated decision-making.

§10. Cookies and tracking technologies

The Website uses cookies for the following purposes:

• necessary for the proper functioning of the Website (do not require consent),
• analytical,
• marketing.

The User gives informed consent to the use of cookies other than necessary ones through an active action (e.g. clicking “Accept” in the cookie banner).

The User may change cookie settings at any time in the browser or via the panel available on the Website – footer link “Change cookie settings”.

§11. Changes to the Privacy and Cookies Policy

The Controller reserves the right to amend this Policy for important reasons. Users will be informed of any changes on the Website.

The current version of the Policy is always available on the Website.

§12. Contact

Any questions regarding the protection of personal data and cookies should be directed to the following e-mail address: biuro@zmianakrs.pl.