Stay safe! Warning about fake requests for identity verification and sharing financial data
X

Privacy and Cookies policy

PRIVACY POLICY

I. DATA CONTROLLERS

The joint Data Controllers of personal data of individuals visiting the website are:

  • Kontomatik sp. z o.o., based in Warsaw at ul. Prosta 51, 00-838 Warsaw, registered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under number: 0000338706, tax identification number (NIP): 5213542911, statistical number (REGON): 142043500, and
  • Kontomatik UAB, based in Vilnius at Didžioji 18, LT-01128, Lithuania, company code: 304852516, tax number: LT100011837810, with a share capital of 10,000 EUR.

These entities are collectively referred to as "Joint Controllers" or individually as "Controller."

If you have any questions regarding the processing of your personal data, you have the right to contact us by sending an email to: contact@kontomatik.com.

II. DATA PROTECTION OFFICER

For questions regarding the processing of your personal data and your rights, you can also contact our Data Protection Officer (Anna Walosińska) via:

  • Email: iod@kontomatik.com;
  • Postal mail: ul. Prosta 51, 00-838 Warsaw.
III. PURPOSES, LEGAL BASIS, AND DURATION OF PERSONAL DATA PROCESSING

Visitors to our website can learn about the services or products we offer and contact us for additional information, share suggestions regarding our services or products, or take steps toward entering into a contract.

You can contact us through:

  • Scheduling a meeting via the external service https://calendly.com/
  • Sending a message to an email address within the kontomatik.com domain
  • Filling out a contact form specific to the service

The legal basis for the processing of personal data by the Controller in these cases is Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller, which is to handle the messages and inquiries sent. The collected personal data will be processed for the time necessary to handle the inquiries. Providing data is voluntary but necessary to handle the inquiry or arrange a meeting.

In addition, personal data may also be processed based on Article 6(1)(b) of the GDPR, i.e., processing is necessary to take steps at the request of the data subject before entering into a contract when contact is initiated with the aim of entering into a contract for our services. The collected personal data will be processed for the time necessary to prepare and enter into the contract. Providing personal data is voluntary but necessary for preparing the contract.

IV. RIGHTS OF INDIVIDUALS IN RELATION TO THE PROCESSING OF THEIR PERSONAL DATA

Every individual whose data is processed by the Controller has the following rights:

  • Access to the data and obtaining a copy (Article 15 of the GDPR);
  • Rectification or correction of data (Article 16 of the GDPR);
  • Erasure of data (Article 17 of the GDPR);
  • Restriction of processing (Article 18 of the GDPR);
  • Objection to the processing of personal data (Article 21 of the GDPR);
  • Lodging a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw) regarding irregularities in the processing of personal data (Article 77 of the GDPR).
V. SHARING PERSONAL DATA

As the Data Controller, we use the services of companies that help us ensure the highest standard of service to our clients. These companies may be tasked with processing your data on our behalf. Data is shared mainly in cases of collaboration with a specific service provider (e.g., a data storage provider, or providers of tools used for online communication). In such cases, the transfer of data does not grant other entities the right to freely process it, only to use it for the purposes explicitly indicated by us. In no case does sharing data release us, as the Data Controller, from responsibility for its processing.

As a rule, personal data will not be transferred outside the European Economic Area (EEA). However, considering the services provided by the Controller’s subcontractors in supporting telecommunication and IT services, the Controller may assign certain activities or tasks to recognized subcontractors operating outside the EEA. This may result in the transfer of your data outside the EEA. Certain non-EEA countries, where your personal data may be processed, are considered by the European Commission to provide an adequate level of data protection (in line with EEA standards). In cases where data is processed in countries not deemed to offer adequate protection, the Controller ensures that appropriate agreements with recipients of your personal data are in place. These agreements are based on standard contractual clauses issued by the European Commission under Article 46(2)(c) of the GDPR.

VI. AUTOMATED DECISION-MAKING

Personal data decisions will not be made automatically, nor will profiling take place.

VII. PERSONAL DATA SECURITY

As joint Controllers of your personal data, we ensure its security by implementing procedures that grant access to personal data only to authorized individuals and only to the extent necessary for them to perform their duties. We have implemented organizational and technical measures to ensure that all operations on personal data are recorded and performed only by authorized and confidential individuals.

We take all possible measures to protect users from unauthorized access, unauthorized modifications, disclosure, and destruction of the personal data we hold. Specifically:

  • We use SSL encryption;
  • We monitor our personal data processing methods, including physical security measures, to protect against unauthorized access to systems;
  • We ensure that subcontractors and other entities cooperating with us guarantee appropriate security measures whenever they process personal data on our behalf. We continuously assess risks and monitor the adequacy of data protection mechanisms in light of identified threats. When necessary, we implement additional measures to increase data security.

COOKIES POLICY

This Policy applies to "cookies," understood as IT data, particularly text files stored on users' end devices, designed for using websites. These files allow the website to recognize the user's device and properly display the website tailored to their individual preferences. "Cookies" usually contain the name of the website they come from, the storage time on the end device, and a unique number.

Information about the legal grounds for data processing and the rights granted can be found in our Privacy Policy.

I. DATA CONTROLLERS

The joint controllers of your personal data are:

  • Kontomatik sp. z o.o., based in Warsaw at ul. Prosta 51, 00-838 Warsaw, registered in the Register of Entrepreneurs maintained by the District Court for the Capital City of Warsaw, under number: 0000338706, NIP: 5213542911, REGON: 142043500, with share capital of 250,000.00 PLN; and
  • Kontomatik UAB, based in Vilnius at Didžioji 18, LT-01128, Lithuania, company code: 304852516, NIP: LT100011837810, with a share capital of 10,000.00 EUR.

They are collectively referred to as “Joint Controllers” or individually as “Controller.”

II. DATA PROTECTION OFFICER

For questions regarding the processing of your personal data and your rights, please contact our Data Protection Officer (Anna Walosińska) via:

III. PURPOSE OF COOKIES
  • Necessary: These cookies are essential for the proper functioning of the website. They are installed primarily to remember login sessions or form submissions, and to remember whether you have been informed about the use of cookies.
  • Statistical: These cookies help track visit numbers and traffic sources. They are used to study website statistics and improve performance.
  • Marketing: These cookies allow for the tailoring of displayed advertising content to user interests, both on our website and beyond. They may be installed by advertising partners, and the information gathered from these cookies and user activity in other services helps build a profile of user interests.
IV. LIFETIME OF COOKIES

There are two main types of cookies used on the website:

  • Session cookies – temporary files that are stored on the user's end device until they log out, leave the website, or close the browser.
  • Persistent cookies – files stored on the user’s end device for a specified time defined in the cookie parameters or until deleted by the user.
V. WITHDRAWING CONSENT

Some cookies are downloaded by the web browser when visiting a website. To block the downloading of cookies, you should use the methods available for your particular browser:

  • Firefox
  • Chrome
  • Microsoft Edge
  • Safari

We also offer the option to manage consent via the Cookiebot tool at the bottom of the website.

Blocking the ability to save/read cookies may result in incomplete or incorrect website operation, although using the site will still be possible.

VI. COOKIE MANAGEMENT