This document is a translation of the Polish version of the Privacy Policy. In case of any ambiguity or discrepancy, the Polish version shall prevail. If you have any questions, please contact us.
PRIVACY POLICY OF MKSIEGOWA.PL
What terms do we use in the Privacy Policy?
Controller/We– EUROsaas sp. z o.o., with its registered office in Brwinów, at ul. Otrębuska 42b, KRS 0000350155, entered into the Register of Entrepreneurs of the National Court Register kept by the District Court in Warsaw, 12th Commercial Division of the National Court Register, REGON: 142319177, NIP: 5222943383.
Personal data – data of an individual who can be identified using this data. This Privacy Policy explains how we use the personal data you entrust to us.
Recipients of your data – entities to which we may transfer part of your personal data in connection with their performance of certain activities or services on our behalf. These entities cannot do anything with your personal data unless instructed by us and only within the scope specified by us. They will store your personal data securely and only for the period specified by us or required by applicable law.
Cookies - small text files saved by the server on the computer's hard drive.
Privacy Policy – this policy setting out the rules regarding cookies as well as the rules for processing and protecting personal data.
Terms and Conditions - Terms and Conditions of the mKsiegowa.pl Website
DPA Terms – means Terms of the Personal Data Processing.
GDPR – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation).
Website - means the mksiegowa.pl website available at mKsiegowa.pl enabling the electronic use of Services referred to in § 2 of the Terms and Conditions.
Who will be the controller of your data?
The Controller of your Personal Data will be: EUROsaas sp. z o.o. with its registered office in Brwinów (hereinafter "Controller" or "we"). We decide the purposes for which your personal data provided to us is processed. We want you to know that we make every effort to keep your personal data secure. We do not sell or share for payment the Personal Data entrusted to us. You can contact us directly regarding personal data protection matters at: biuro@mksiegowa.pl
What data are we talking about?
This refers to Personal Data collected as part of your use of our services, including websites and other functionalities made available by the Controller on the Website, as well as saved in cookies installed on our Website. If you subsequently decide to cooperate with us, this will additionally include all personal data you provide to us.
For what purpose, on what legal basis, and for how long do we process personal data?
In connection with our business operations, we process personal data for various purposes, to varying extents, and on different legal bases specified in the GDPR. In order to provide you with the most transparent information, we have grouped this information according to the legal basis for processing your personal data.
We guarantee that your personal data will not be processed for a period longer than required by law or provided for in our internal regulations. The criteria for determining the processing duration for specific purposes are described below, separately for each legal basis for processing.
- Personal data processed in connection with a contract concluded with us (Art. 6(1)(b) GDPR)
If you decide to register on our Website, we will process your personal data to the extent necessary to perform the agreement binding us (the detailed scope of data required for registration on our Website is specified in § 3 para. 4 of the Terms and Conditions).
Furthermore, if in connection with the concluded contract it becomes necessary for us to process personal data made available or entrusted to you (data of your Clients), we will process this personal data on your behalf in accordance with the provisions of the DPA Terms. If you hold an account on the mksiegowa.pl website, your data will be processed for the duration of your account usage, and in the event of its deletion, expiration, or termination of the agreement for the provision of electronic services (regardless of the cause and basis of termination), no longer than necessary for the purposes of handling complaints and claims related to the use of our services (statutory limitation period for claims).
- Data processed based on the Controller's legitimate interest (Art. 6(1)(f) GDPR)
We process your personal data for the purposes indicated below based on the legitimate interest of the Controller, which is:
- conducting marketing activities directed at you, including marketing the Controller's own services;
- contacting you, including answering questions submitted via the Website (e.g. through a contact form or chat), as well as via email, social media networks, or other available communication channels, in particular and with your consent, by email and telephone;
- ensuring the security of services provided electronically, including preventing fraud and abuse and ensuring traffic safety;
- conducting research and analysis, including estimating the main interests and needs of visitors to our websites;
- debt collection; conducting mediation, judicial, and arbitration proceedings;
- conducting statistical analyses;
- storing data for archiving purposes and ensuring accountability.
We store personal data for the above purposes until you object to such processing or until the legal basis for processing (legitimate interest) ceases to exist.
- Personal data processed based on legal obligations (Art. 6(1)(c) GDPR)
Additionally, legal regulations require us to process your data for tax and accounting purposes. We will store this data for the period required by law.
- Personal data processed based on your consent (Art. 6(1)(a) GDPR)
If you give your consent, we will process your personal data to save data in cookies and collect data from websites.
Personal data collected based on consent will be stored until consent is withdrawn, the purpose of processing is achieved, or the data is no longer needed.
You may withdraw your consent to personal data processing at any time in a manner as easy as giving it, e.g. by sending an email to: biuro@mksiegowa.pl
To whom may we share the data?
In accordance with applicable law, we may share your data with other controllers or transfer it to entities processing it on our behalf, e.g., as part of technical or IT support (hosting services, email, IT system maintenance and servicing, online payments, OCR service provider, KSeF service provider) or legal services, as well as entities authorized to obtain data under applicable law, e.g., courts or law enforcement agencies – naturally only when requested based on an appropriate legal basis.
Is providing personal data voluntary?
Providing data by you is in most cases not voluntary. If you decide to write to us or enter into an agreement with us, we will need your data to be able to contact you, perform the agreement, and subsequently settle it (i.e., for accounting, tax purposes, or protection against claims). Apart from data marked as „mandatory”, providing other data is voluntary. Furthermore, you can decide whether to consent to saving data stored in cookies.
What are your rights regarding your data?
In connection with personal data processing, you have specific rights under personal data protection laws, including the GDPR, such as:
- right of access to data, i.e., the right to obtain confirmation from the Controller as to whether your personal data is being processed by us or to obtain a copy of your personal data. This allows you to be aware of and verify how the Controller uses your personal data. We may refuse to provide a copy of personal data where it would adversely affect the rights of another person;
- right to rectification, i.e., the right to request the Controller to promptly correct personal data if it is inaccurate or incomplete (e.g., when the Controller processes your incorrect name or address);
- right to erasure (also known as the „right to be forgotten”) – enables you to request the deletion of your personal data if, for example, the data was used unlawfully or your consent was withdrawn (where it was the sole basis for processing your data). However, the „right to be forgotten” does not constitute an absolute right to erase personal data, as there are certain exceptions, e.g., when we still need to use the data to establish, exercise, or defend legal claims, or to comply with a legal obligation (e.g., under accounting or tax laws);
- right to restriction of processing – you have the right to restrict us from further using your personal data where, for example, we are in the process of evaluating a request to rectify your data. In a situation of restricted processing, the Controller may continue to store your personal data, but may not actively use it further (e.g., to perform an agreement).
To the extent that the legal basis for processing your personal data is the pursuit of legitimate interests, you have the right to object to the processing of such data. However, the Controller may continue processing personal data if it can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if necessary to establish, exercise, or defend legal claims.
To the extent that consent is the legal basis for processing your personal data, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
If you wish to exercise any of these rights, simply email us at: biuro@mksiegowa.pl
Furthermore, you have the right to lodge a complaint regarding our processing of your personal data with the supervisory authority, which is: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), address: Urząd Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland.
Do we transfer your data to countries outside the European Economic Area?
Your personal data may be transferred outside the European Economic Area exclusively based on Standard Contractual Clauses (SCC) approved by the European Commission or to entities certified under the EU-US Data Privacy Framework.
Do we process your data automatically?
Please be advised that we do not engage in automated decision-making, including profiling.
What about Cookies?
We use Cookies on the User's terminal device (e.g. computer, tablet, smartphone). Cookies can be read by the Controller's IT system. We obtain access to information contained in Cookies for statistical purposes and to ensure the proper functioning of the website, in particular maintaining the session after logging in.
Importantly, we want you to know that:
- It is possible to configure your web browser to prevent the storage of Cookies on the User's terminal device.
- Cookies may be deleted by the User after being saved by the Controller through: appropriate web browser functions, software designed for this purpose, or using relevant tools available in the operating system used by the User. Please note, however, that changing web browser settings to block or limit Cookie storage on the User's terminal device may result in functional limitations of the provided services. Similar effects may occur from deleting Cookies during service provision.
- Below are links to information on how to delete Cookies in the most popular web browsers:
Use of Google Analytics for web analytics
The Controller informs that it uses Google Analytics to collect and analyze aggregated information about portal usage. More information regarding the rules under which this service collects and processes data can be found here.
How can we change the Privacy Policy?
In matters not covered by this Policy, applicable provisions of law shall apply, in particular: the Act on Providing Services by Electronic Means, the Personal Data Protection Act, the Civil Code, and the GDPR.
The Controller reserves the right to amend the Policy for important reasons. Important reasons include: introduction of new or amendments to existing legal provisions, adjustment to changes introduced by the Controller.
If necessary, the Controller may amend the provisions of this Policy. In such a case, §13 para. 2-4 of the Terms and Conditions shall apply accordingly.
The last change to the policy version dates from November 1, 2026.