Privacy Policy

Legal Basis for Processing

In accordance with Article 6 of GDPR, we process your personal data based on one or more of the following legal grounds:

• Consent: When you explicitly agree to the processing of your data
• Contract: When processing is necessary for services you've requested
• Legal Obligation: When required by Polish or EU law
• Legitimate Interests: When we have a justified business need

Data Collection

• Personal information (name, email, phone number)
• Identity documents for verification purposes
• Business information for company registration
• Technical data (IP address, cookies, device information)
• Usage data (pages visited, services accessed)

Data Use

We process your data for specific, documented purposes:

• Providing requested legal and business services
• Processing your applications and documents
• Communicating about your services and inquiries
• Complying with legal obligations
• Improving our services and user experience

Data Retention

We retain your data for specific periods:

• Service-related data: Duration of service plus 6 years
• Legal documents: As required by Polish law (minimum 5 years)
• Marketing communications: Until consent withdrawal
• Technical data: 12 months from collection

International Data Transfers

Data is stored in the EU. Any transfers outside the EU are protected by appropriate safeguards:

• Standard Contractual Clauses
• Adequacy decisions
• Binding Corporate Rules

Your GDPR Rights

Under GDPR, you have the following rights:

• Right to access your data
• Right to rectification
• Right to erasure ('right to be forgotten')
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with a supervisory authority such as the Polish UODO (https://uodo.gov.pl)

Cookie Policy

We use cookies for:

• Essential website functionality
• Analytics and performance
• User preferences
• Marketing (with consent)

You can manage cookie preferences in your browser settings

Third-Party Data Processing

We may share your personal data with licensed legal partners based in Szczecin who assist with immigration and residency services (e.g., karta pobytu applications). Currently, we do not share data with any third parties. Once partners are confirmed, this section will be updated. A list of partners will be made available upon request.

• Legal document processing services
• Government agencies (when required)
• Payment processors
• Analytics providers

All processors are bound by Data Processing Agreements compliant with GDPR Article 28

Data Security

We implement appropriate technical and organizational measures:

• Encryption in transit and at rest
• Access controls and authentication
• Regular security assessments
• Staff training on data protection

Contact Information

For privacy-related inquiries or to exercise your rights under GDPR, contact us at:

• Email: support@karta-pobutu-szczecin.com