Privacy policy
How we process and protect your personal data
Table of contents
1. Data controller
Name: VKSIĘGOWOŚĆ spółka z ograniczoną odpowiedzialnością (limited liability company)
Address: ul. Marcina Kasprzaka 31/119, 01-234 Warszawa
Registry court: Sąd Rejonowy dla m.st. Warszawy w Warszawie, XIII Wydział Gospodarczy Krajowego Rejestru Sądowego (District Court for the Capital City of Warsaw, 13th Commercial Division of the National Court Register)
KRS: 0001156919, NIP: 5273152697, REGON: 540955488
Share capital: PLN 50,000
Phone: +48 791 699 299
E‑mail: kontakt@vksiegowosc.com
The personal data controller (the “Controller”) is responsible for processing your personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation – GDPR).
2. Scope of the privacy policy
This privacy policy sets out the rules for processing and protecting personal data provided by users in connection with using the services provided by VKSIĘGOWOŚĆ, including:
- Using the website vksiegowosc.com
- Contacting us through the contact form
- Using accounting and HR and payroll services
3. Types of data processed
3.1. Contact details
- Full name
- E‑mail address
- Phone number
- Company name
- Correspondence address
3.2. Technical data
- IP address
- Browser type
- Operating system
- Data on activity on the website
- Data on how you arrived at the website (landing page address, referring page, campaign parameters, click identifier from an advertising link)
- Cookies and similar technologies
3.3. Accounting and financial data
- Accounting documents
- Transaction data
- Information on tax settlements
- Employee data (as part of HR services)
4. Purposes of data processing
4.1. Provision of services
Processing data in order to perform the contract for accounting and HR and payroll services.
4.2. Contact with clients
Answering enquiries, providing information about services, customer service.
4.3. Marketing
Informing about new services and promotions (with the user’s consent).
4.4. Legal obligations
Fulfilling obligations under the law, including tax and accounting law.
4.5. Attributing an order to its traffic source
Determining how you reached our website (e.g. a search engine, another website, a campaign, an advertising link) and attributing the order placed and the agreement concluded to that source — based on the arrival data saved with the order and on server technical data — in order to assess the effectiveness of our marketing activities.
5. Legal bases for processing
Article 6(1)(a) GDPR
Consent of the data subject (marketing)
Article 6(1)(b) GDPR
Performance of a contract or steps taken before entering into it
Article 6(1)(c) GDPR
Compliance with a legal obligation (accounting, taxes)
Article 6(1)(f) GDPR
Legitimate interest (IT security, analytics, attributing orders to traffic sources and measuring the effectiveness of marketing activities — regardless of your choice in the consent banner)
6. Data retention periods
| Type of data | Retention period |
|---|---|
| Contact details | Until consent is withdrawn or cooperation ends |
| Accounting documents | 5 years from the end of the financial year |
| HR data | 10 years from the end of the employment relationship |
| Server technical data (IP address, browser, address of the visited page) | Up to 60 days |
| Arrival data saved with the order (including the click identifier) | For the retention period of the order data |
7. Data recipients
Your personal data may be transferred to the following categories of recipients:
Authorised entities
- Urząd Skarbowy (tax office)
- ZUS (Social Insurance Institution)
- Courts and law enforcement authorities
- Supervisory authorities
Subcontractors
- IT service providers
- Courier companies
- Providers of marketing services
- Cloud service providers
8. Rights of data subjects
Under the GDPR, you have the following rights:
9. Data security
We apply appropriate technical and organisational measures to ensure the security of the personal data we process, including:
Technical measures:
- Data encryption
- Server protection
- Regular backups
- System updates
Organisational measures:
- Staff training
- Access control
- Security procedures
- Security audits
11. Contact
If you have questions about the processing of personal data or want to exercise your rights, contact us:
01-234 Warszawa
Last updated: 8 November 2026.
We reserve the right to make changes to this privacy policy. We will announce any changes on this page.