Privacy policy

This Privacy Policy sets out the rules for processing and protecting personal data provided by users in connection with the getax.pl website and the services provided by GETAX.

The controller of personal data is BIURO RACHUNKOWE GETAX Sp. z o.o. (a Polish limited liability company), with its registered office at ul. Tysiąclecia 20A lok. 2, 41-933 Bytom, Poland, tax ID (NIP) 9542877939 (the "Controller").

The Controller takes particular care to protect the interests of data subjects and ensures that the data it collects is processed lawfully, in particular in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR).

The Controller may collect the following personal data:

• Full name
• Email address
• Phone number
• Company name and job title
• NIP, REGON and KRS numbers (for companies)
• Address (registered office or correspondence address)
• Information about your business needed to provide accounting services
• Information about how you use the website (cookies)

Personal data is processed for the following purposes and on the following legal bases:

1. Providing accounting and advisory services

Legal basis: processing is necessary for the performance of a contract to which the data subject is party, or to take steps at the request of the data subject prior to entering into a contract (Article 6(1)(b) GDPR).

2. Contact with clients and prospective clients

Legal basis: the legitimate interest of the Controller (Article 6(1)(f) GDPR) or the consent of the data subject (Article 6(1)(a) GDPR).

3. Direct marketing of our own services

Legal basis: the legitimate interest of the Controller (Article 6(1)(f) GDPR) or the consent of the data subject (Article 6(1)(a) GDPR).

4. Compliance with legal obligations of the Controller

Legal basis: compliance with a legal obligation to which the Controller is subject (Article 6(1)(c) GDPR).

5. Website analytics and statistics

Legal basis: the legitimate interest of the Controller (Article 6(1)(f) GDPR).

6. Establishing, exercising or defending legal claims

Legal basis: the legitimate interest of the Controller (Article 6(1)(f) GDPR).

Personal data is kept:

• For data processed under a contract: for the duration of the contract and afterwards for the period required by accounting and tax law (usually 5 years from the end of the calendar year in which the cooperation ended)
• For data processed on the basis of consent: until the consent is withdrawn
• For data processed on the basis of the Controller’s legitimate interest: until you object or the interest ceases (for example, data processed for direct marketing is processed until you object)
• For data processed to establish, exercise or defend legal claims: for the limitation period set by law

Personal data may be shared with the following categories of recipients:

• Entities processing data on behalf of the Controller (IT service providers, accounting software providers, hosting companies, technical support providers)
• Entities processing payment data (banks, payment operators)
• Providers of legal and advisory services
• Public authorities or other entities authorised by law

The getax.pl website uses cookies, which are small text files stored on your device. They allow the website to recognise your device and display the website according to your preferences.

Data subjects have the following rights:

Right of access

to obtain information about the processing of your personal data and a copy of the data

Right to rectification

to request correction of inaccurate data or completion of incomplete data

Right to erasure

to request deletion of your data in certain cases

Right to restriction of processing

to request that processing be restricted in certain cases

Right to data portability

to receive a copy of your personal data in a structured format and to have it transmitted to another controller

Right to object

to object to processing based on the Controller’s legitimate interest, in particular direct marketing

Right to withdraw consent

to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal

Right to lodge a complaint

with the supervisory authority, the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)

To exercise these rights, contact the Controller by email at biuro@getax.pl or in writing at the Controller’s registered office.

The Controller takes all necessary measures to ensure the security of the personal data it processes. These measures include:

• Encrypted data transmission (SSL)
• Access control and two-factor authentication
• Regular data backups
• Antivirus and anti-malware protection
• Regular security testing
• Data protection training for staff

The Controller reserves the right to change this Privacy Policy. Changes will be published on the getax.pl website. A new version of the Privacy Policy applies from the moment it is published.