PRIVACY POLICY

§ 1. General information

1. The controller of personal data is:
   Instytut Księgowości i Podatków Karkonoskiej Izby Gospodarczej Spółka Jawna
   Aleja Lipowa 37, 53-124 Wrocław
   NIP: 8993044454
   REGON: 543531441
   KRS: 0001212329
   email: biuro@ikip.net.pl
2. The Controller processes personal data in accordance with:
   Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
   the Polish Personal Data Protection Act,
   other applicable provisions of law.
3. This Privacy Policy sets out the rules for processing the personal data of website users and clients using accounting services.

§ 2. Scope and purposes of data processing

Personal data are processed for the following purposes:

1. Entering into and performing an agreement for the provision of accounting services
   (legal basis: Article 6(1)(b) of the GDPR)
2. Compliance with legal obligations arising from tax, accounting and insurance legislation
   (Article 6(1)(c) of the GDPR)
3. Contact and handling enquiries submitted through the form or by email
   (Article 6(1)(f) of the GDPR — the Controller’s legitimate interest)
4. Marketing the Controller’s own services (where consent has been given)
   (Article 6(1)(a) of the GDPR)

§ 3. Categories of data processed

The Controller may process the following data:

• first name and surname,
• company name,
• NIP, REGON, KRS,
• registered office address and correspondence address,
• email address,
• phone number,
• PESEL number (to the extent necessary to provide the services),
• employee data provided for HR and payroll services,
• data contained in accounting documents.

The contact form requires an email address, the type of enquiry and the message content. You may optionally provide the company or organisation name, a phone number, business type and monthly number of documents. These data are used to handle the enquiry; the legal basis for processing is specified in § 2, point 3. The form does not require a NIP number or the submission of accounting documentation. The enquiry is stored in the website’s system and is accessible to authorised administrators.

Providing data is voluntary. Fields marked as required are necessary to send and handle an enquiry through the form. If an Agreement is entered into, the data required are determined by its performance and by legal obligations.

§ 4. Recipients of data

Data may be disclosed to:

• entities working with the Controller (e.g. accounting system and hosting providers),
• partner accounting firms,
• public authorities (Tax Office, ZUS, courts) — to the extent required by law,
• IT service providers.

The Controller enters into appropriate data processing agreements with processors.

§ 5. Data retention period

Personal data are retained:

• for the duration of the agreement,
• after the agreement ends — for the period required by law (in particular tax and accounting legislation),
• for marketing — until consent is withdrawn.
• for enquiries — for the time needed to handle the enquiry and related correspondence. If an enquiry leads to an Agreement, we retain the data necessary to perform it in accordance with the rules applicable to the Agreement. After the retention period ends, an authorised administrator deletes the enquiry records.

§ 6. Rights of the data subject

Every person has the right to:

• access their data,
• rectify their data,
• erasure of their data (the right to be forgotten),
• restriction of processing,
• data portability,
• object to processing,
• withdraw consent at any time (where processing is based on consent),
• lodge a complaint with the President of the Polish Personal Data Protection Office.

To exercise your rights, contact the Controller at: biuro@ikip.net.pl.

§ 7. Data security

The Controller applies appropriate technical and organisational measures to protect the personal data processed, in particular:

• IT system security measures,
• encryption of data transmission,
• data access controls,
• regular system updates.

§ 8. Cookies and browser storage

1. The website may use cookies to:
   ensure that the website functions correctly,
   analyse website traffic,
   improve the website’s functionality.
2. Users may change their browser’s cookie settings at any time.
3. The website saves the user’s preference for enabling or disabling animations in browser storage. This setting remains saved until it is changed or the website’s data are deleted in the browser.

§ 9. Changes to the Privacy Policy

1. The Controller reserves the right to amend the Privacy Policy if the law or the scope of the services provided changes.
2. The current version of the Policy is available on the website.