Privacy policy

Who is the administrator of your data?

The administrator of your personal data is Ipapus limited liability company, Piekary 447, Kraków, Poland, REGON: 381485580, NIP: 6762555685, KRS: 0000751754 (hereinafter referred to as “the Company”).

Why do we process your data?
In connection with services rendered through the Company, i.e. in order to conclude or perform a contract (Article 6 (1) (b) of the Regulation), your data will be stored until the contract has been performed
In connection with services rendered through the Beneficiaries of the Company, i.e. in order to conclude or perform a contract (Article 6 (1) (b) of the Regulation), your data will be stored until the contract has been performed
For marketing and promotion of products offered by the Company which are our legitimate interest (Article 6 paragraph 1 letter f of the Regulation). Your data will be processed until you object
Compliance with all legal obligations incumbent on us in connection with the cooperation we have undertaken (Article 6 (1) (c) of the Regulation), this purpose is related to the legal obligations of storing specific documents for the time specified in legal regulations, e.g.
Art. 74 section 2 points 1-8 of the Accounting Act of 29.09.1994 (Journal of Laws of 2017, item 1858);
Art. 8b paragraph 3 in relation from art. 9k of the Act of November 16, 2000. on counteracting money laundering and financing of terrorism (Journal of Laws 2000 No. 116 item 1216);
Art. 86 §1 and 2 of the Act of August 29, 1997 – Tax Code (Journal of Laws of 1997 No. 137, item 926).
In order to possibly determine, investigate or defend against claims, which is our legitimate interest (the basis of Article 6 (1) (f) of the Regulation). The data will be processed until the claims expire
In the event of consent, your data will be processed within the limits and purpose indicated in the consent (basis from Article 6 (1) (a). The data will be processed until the consent is withdrawn

What data is processed?

To conclude the contract, we require data provided on the contract / order form (if you do not provide it, we will not conclude the contract / we will not complete the order). In addition, we can ask for optional data that does not affect the conclusion of the contract (if we do not receive it, we will not be able to, e.g. call the contact number).
During the term of the contract, we provide other data about you when providing services. The appearance of your personal data with us is a consequence of the operation of our services that you use.

Who will the data be shared with?

Public authorities, to the extent that they do not receive data as part of specific legal proceedings;
Entities that process your personal data on behalf of the Company on the basis of a contract entrusted with the Company for entrusting the processing of personal data (so-called processing entities). These will include: Beneficiaries of the Company, IT specialists, archiving companies, entities providing banking and payment services, hosting companies;
External data administrators (the so-called Parallel Administrator to whom the data is made available, e.g. legal advisors and lawyers, entities conducting courier or postal activities, entities purchasing receivables – if you do not pay our invoices on time),
We do not transfer your data outside of Poland, the European Union and the European Economic Area (including the European Union, Norway, Liechtenstein and Iceland). But it may turn out that during the term of the contract we will decide to transfer data outside the EEA – only to the extent permitted by law. This transfer will only occur if the third country ensures adequate protection of your personal data. You will be notified of such a situation by e-mail or telephone.
In the event of transferring your personal data to a third country that has not been recognized by the European Commission as a state providing an adequate level of protection, we will ask you for express consent to such transfer, informing you of the prior risk associated with such transfer pursuant to art. 40 clause 1 lit. a) Regulations.

Is the data profiled?

Please be advised that your data will not be subject to profiling, i.e. automated analysis of your data and development of predictions about preferences or future behaviors (profiling means, e.g. in the case of marketing profiling, determining which offer you might be most interested in based on for your earlier election).

What are your rights?

The right to access personal data processed by us
(Article 15 of the Regulation),
The right to rectify the personal data entrusted, including its correction
(Article 16 of the Regulation),
The right to delete personal data from our systems, the so-called “right
to be forgotten “- if you think there are no grounds for us to process your data, you can request that we delete it (Article 17 of the Regulation),
The right to limit the processing of personal data – you can request that we limit the processing of personal data only to their storage or performance of activities agreed with you, if we have incorrect data about you or we process them unreasonably; or you do not want us to remove them because you need them to determine, pursue or defend claims; or for the duration of the objection to data processing (Article 18 of the Regulation),
Right to data portability – You have the right to receive from us in a structured, commonly used machine-readable format (e.g. “.csv” format) personal data about you in which we are under a contract or consent. You will have this right if you have data in electronic format – if you only have data in paper form, you will not be able to exercise this right. You can order us to send this data directly to another entity (Article 20 of the Regulation),
The right to withdraw consent to the processing of personal data – at any time you have the right to withdraw consent to the processing of personal data that we process on the basis of consent – art. 7 item 3 of the Regulation. Withdrawal of consent will not affect the lawfulness of the processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent occurs by sending an email to:
Right to object – you can object to the processing of your data if the basis for the use of data is our legitimate interest – art. 21 of the Regulation. In such a situation, after examining your application, we will no longer be able to process the personal data covered by the opposition on this basis, unless we prove that there are legitimate grounds for data processing that are considered to prevail over your interests, rights and freedoms.
If in your opinion the processing of personal data violates the provisions of the Regulation, you have the right to lodge a complaint to the supervisory body, i.e. the President of the Office for Personal Data Protection


If you need additional information related to the protection of personal data or want to exercise your rights, please contact us at