Contact

KIR

ul. rtm. W. Pileckiego 65
02-781 Warszawa

KRS: 0000113064
NIP: 526-030-05-17
REGON: 012105474

Hotline
Monday – Friday,

from 08.00 A.M. till 06.00 P.M.
from a landline phone:
0 801 500 207
from a landline or mobile phone:
(+48) 22 545 55 55

Contact form

GDPR

Information on personal data processing at Krajowa Izba Rozliczeniowa S.A.

According to Article 13(1) and (2) and Article 14(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter "GDPR"), you are informed that:

  1. Krajowa Izba Rozliczeniowa Spółka Akcyjna (hereinafter “KIR”) with its registered office in Warsaw at ul. rtm. Witolda Pileckiego 65, 02-781 Warszawa, KRS (National Court Register number): 0000113064 is the controller of personal data processed by KIR in accordance with the rules laid down below;
  2. Personal data will be processed for the following purposes:
    1. providing trust services on the basis of a legal provision, which is Article 24 of Regulation (EU) No. 910/2014 of the European Parliament and of the Council of 23 July 2014 on electronic identification and trust services for electronic transactions in the internal market and repealing Directive 1999/93/EC, and on the basis of the trust services agreement and to the extent necessary for the performance thereof;
    2. providing the Paybynet service under a service agreement;
    3. determining the risk factor as regards using the activity of banks and SKOK credit unions for purposes connected with tax frauds pursuant to Article 119zn section 2 and Article 119zu section 2 and section 3 of the Tax Ordinance Act of August 29, 1997;
    4. servicing of requests constituting inquiries about services provided by KIR on the basis of the data subject's consent referred to in Article 6(1)(a) of GDPR;
    5. protection of such areas of data and information processing whose disclosure could expose KIR to damage, based on the legitimate interest of KIR.
  3. KIR may disclose the personal data processed to state authorities or other authorized entities on the basis of provisions of law. In particular, it may disclose the personal data processed for the purpose referred to in:
    1. point 2(1) to trusted partners, whose list can be found on the website www.elektronicznypodpis.pl;
    2. point 2(2) to the Ministry of Finance, Head of the National Revenue Administration, banks, credit unions and to the entrepreneur referred to in Article 116zi section 2 of the Tax Ordinance;
    3. point 2(5) to a trusted entity providing the service of video surveillance system maintenance.
  4. The personal data processed for the purpose referred to in:
    1. point 2(1) will be stored for a period necessary for the provision of trust services, and in the scope of the data referred to in Article 17(2) of the Act of September 5, 2016 r. on trust services and electronic identification, for the period required by law, which currently amounts to 20 years;
    2. point 2(2) will be stored for the period necessary for service provision;
    3. point 2(3) will be stored for a period of 5 years specified in Article 119zu section 3 of the Tax Ordinance;
    4. point 2(4) until the consent is withdrawn by the data subject;
    5. point 2(5) for a period of 3 months from data collection,
      with the reservation that should other legal grounds arise that authorize KIR to process personal data, the period may change according to the duration of such grounds.
  5. The persons whose personal data are processed for the purposes specified in point 2(1), (2), and (5) have the right to access the contents of their data and the right to rectify, erase, restrict the processing, the right to transfer their data, and the right to object to processing. The persons whose personal data are processed for the purpose specified in point 2(4) also have the right to withdraw their consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. The personal data processed for the purpose specified in point 2(3) are processed, pursuant to Article 119zu section 3 of the Tax Ordinance, without the knowledge and consent of the data subject.
  6. Everyone has the right to file a complaint with the President of the Office for Personal Data Protection, when he/she considers that the processing of personal data concerning him/her violates the provisions of the GDPR or other regulations on the protection of personal data.
  7. Providing personal data is necessary for the conclusion of a agreement, provision of services by KIR, and processing of a request. In case of failure to do so, the service cannot be provided and the request cannot be processed.
  8. The Data Protection Officer at KIR is Andrzej Rutkowski, e-mail: .