Privacy Policy
PRIVACY AND COOKIES POLICY
I. General information
1. The company Krajowy Rejestr Długów Biuro Informacji Gospodarczej S.A. with its registered office in Wrocław at ul. Danuty Siedzikówny 12, 51-214 Wrocław (hereinafter: ‘KRD BIG S.A.’, ‘Controller’) respects the privacy of every person using the services of KRD BIG S.A., including visitors to the KRD BIG S.A. website, and ensures data security at every moment of the use of its websites.
2. This Privacy and Cookies Policy (hereinafter the ‘Policy’) sets out the rules for collection, processing and use of personal data, as well as information on cookies and other similar features used on KRD BIG S.A. websites.
3. KRD BIG S.A. is the controller of the personal data of users of KRD BIG S.A. websites and services.
4. As part of our operations, we have appointed a Data Protection Officer who is responsible for such issues as monitoring compliance with data protection legislation. For all data protection matters, please contact the Data Protection Officer at: Małgorzata Dulińska – Majkowska, email address: iod@krd.pl or at: Data Protection Inspector KRD BIG S.A., ul. Danuty Siedzikówny 12, 51-214 Wrocław.
II. Objectives and legal basis of personal data processing
A person using the KRD BIG S.A. website (hereinafter: ‘User’) who only browses the website and reads publicly available content does not have to inform us about their identity. However, cookies and other similar functions are used when accessing the Website. The information contained in cookies can indirectly identify a specific user of the website. Detailed rules on the use of cookies are described in the section on cookies (Item VIII COOKIE files Policy).
1. KRD BIG S.A. processes Users' personal data in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (hereinafter: ‘GDPR’), based on:
- Article 6(1)(a) of the GDPR – based on the consents given;
- Article 6(1)(b) of the GDPR – for the purpose of performing the Agreement, including the provision of services to users of the website;
- Article 6(1)(f) of the GDPR – that is for the purpose of pursuing the legitimate interests of KRD BIG S.A., namely the promotion of KRD BIG S.A.'s services, enabling communication, integrating content, examining traffic on KRD BIG S.A.'s websites, creating measurements and statistics, as well as for the purpose of asserting any claims or defending against claims.
III. Period of personal data processing
The duration of the processing of your personal data depends on the purpose for which the processing is carried out. KRD BIG S.A. processes personal data as long as the prerequisites indicated above exist. As regards the services we provide, your data shall be processed for the period during which the services are provided and, occasionally, after the services have been terminated, but only if this is permitted or required under applicable law, e.g. processing for statistical purposes or to assert claims. In this case, the data shall only be processed for the period necessary for such purposes. To the extent that your data is processed on the basis of the legitimate interests of KRD BIG S.A., it shall be stored until you object to its processing or for the period of the statute of limitations for claims that the data subject may have against the Controller.
IV. Voluntary data provision
Provision of any personal data is voluntary, however, it may be necessary for the performance of services provided by KRD BIG S.A.
V. Rights of Data Subjects:
The data subject has:
- the right of access to their data, which includes the right to obtain a copy of the data;
- the right to request the rectification of data;
- the right to erasure (in certain situations);
- the right to restrict data processing;
- the right to object to the processing based on our legitimate interest and to the disclosure of the data to other entities;
- the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Personal Data Protection Office, ul. Stawki 2, 00193 Warsaw.
To the extent that your data is processed as part of the service provided (the data is necessary for the purpose of providing the service), you may additionally exercise your right to personal data portability, i.e. to receive your personal data from the Controller, in a structured, commonly used machine-readable format. For the purpose of exercising the above rights, please contact us or our Data Protection Officer. The contact details are indicated above.
VI. Recipients of personal data
The data may be provided to entities of the Kaczmarski Group (kaczmarskigroup.pl/group), entities providing organisational and IT support, including ICT support, entities providing other services to KRD BIG S.A. to ensure proper functioning of the websites, courts, law enforcement agencies, banks, entities providing advisory services and legal assistance, and other entities indicated in generally applicable laws.
VII. Security of Personal Data
KRD BIG S.A. has a personal data security system in place that meets the requirements stemming from the GDPR.
VIII. COOKIE files policy
KRD BIG S.A. websites use cookie files (cookies). These are small pieces of information stored on the User's terminal device (e.g. laptop, phone) while browsing KRD BIG S.A. websites. KRD BIG S.A. websites may also use other tools with functionalities similar to cookies (e.g. pixels, beacons, tags).
Types of cookies used by KRD BIG S.A.
The websites of KRD BIG S.A. and third-party providers use:
- strictly necessary cookies that allow, for example, the correct display and proper functioning of the KRD BIG S.A. websites and ensure the security of use of the KRD BIG S.A. websites;
- optional cookies (Marketing, Measurement, Other) that allow, for example, to customise advertising, make available content tailored to the User's preferences on KRD BIG S.A. websites and other sites, integrate content, examine traffic on KRD BIG S.A. websites, create measurements and statistics, develop and improve KRD BIG S.A. services and create new products and services based on the User's interactions. The User may consent to the use of optional cookies.
A list of the cookies used is available here.
Cookies storage period
The cookie files used on the KRD BIG S.A. websites are divided into:
- persistent cookies – stored on the device until the User deletes them on their own or the time specified in the parameters of a given cookie has passed;
- session (temporary) cookies – stored on the device until the software is switched off or the browser session ends (until it is closed).
Entities using cookies on KRD BIG S.A. websites
Based on the users of cookies, we distinguish between:
- own cookies – cookies which are placed and accessed only by KRD BIG S.A.;
- third-party providers' cookies (such as Google Ireland Ltd, Consentmanager AB, LiveChat, Inc., Meta Platforms Ireland Limited).
Detailed information on the cookies used by KRD BIG S.A. and third-party providers is also available by clicking on the ‘Data protection settings’ widget.
How to disable cookies
Users can manage their cookie preferences directly in the settings of their own terminal device. In terms of the consents given, Users have the possibility to revoke them via the ‘Data Protection Settings’ widget. Moreover, through their web browser, Users can enable all cookies, disable the installation of cookies, delete cookies, or block cookies. Disabling, deleting or blocking cookies may adversely affect the quality of use of the KRD BIG S.A. websites.
If you wish to change your browser's cookie settings, you can use the instructions below:
IX. Final information
KRD BIG S.A. reserves the right to introduce changes to the Policy by posting the new Policy on KRD BIG S.A.'s website with due notice.