Privacy Policy

This Privacy Policy sets out the rules for the processing of personal data by Bilansis Accounting Office, which is the Personal Data Administrator within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016 (GDPR).

1. Personal Data Controller
The Personal Data Controller is Bilansis, located at ul.Komisji Edukacji Narodowej 12 lok. 7, contact email address: bilansis.biuro@gmail.com.

2. Legal basis for data processing
Personal data is processed on the basis of:
• Article 6(1)(b) of the GDPR — performance of a contract or steps taken prior to entering into a contract;
• Article 6(1)(c) of the GDPR — compliance with a legal obligation (in particular accounting and tax obligations);
• Article 6(1)(f) of the GDPR — legitimate interest of the Administrator;
• Article 9(2)(g) of the GDPR — processing of special categories of data within the limits of legal requirements.

3. Categories of data processed
The following data are processed, in particular:
• identification and contact details;
• business activity data;
• accounting, tax, and financial documents;
• data necessary for the performance of obligations under tax and accounting law.

4. Data recipients
Personal data may be transferred to:
• tax and other government authorities;
• banks, financial institutions;
• IT providers (hosting, accounting systems) on the basis of processing agreements (Article 28 of the GDPR).

5. Storage period
Data is stored for the periods specified in tax, accounting, and civil law, in particular in accordance with Article 74 of the Accounting Act of the Republic of Poland.

6. Rights of data subjects
The data subject has the right, in accordance with Articles 15-22 of the GDPR:
• to access the data;
• to correct it;
• to restrict processing;
• to object;
• to lodge a complaint with the President of the Personal Data Protection Office (UODO).

7. Transfer of data outside the EU
Personal data shall not be transferred outside the European Economic Area, unless this is necessary for the nature of the services and complies with the requirements of Chapter V of the GDPR.