Who is responsible for your data
The controller of your personal data is Taxalia Group Sp. z o.o., a limited liability company with its registered office in Warsaw, ul. Zygmunta Słomińskiego 7 lok. 215, 00-195 Warszawa, entered in the register of entrepreneurs of the National Court Register under KRS number 0000578983, NIP 5252631435, REGON 362671691.
For matters concerning personal data, write to us using the form on the Contact page, by post to our office address or by email to the address shown by the button below.
Email addressShow address
The form and correspondence
When you write to us using the form or to our email address, we process the data you provide: your name, your email address and – if you enter them – your company name, your phone number and whatever the message contains.
We use this data to reply to your message and to continue the correspondence – including when it concerns working or cooperating with us. The legal basis is our legitimate interest, that is, being able to answer the questions sent to us (Article 6(1)(f) GDPR). If your message is about entering into a contract, the basis is also taking steps at your request prior to entering into it (Article 6(1)(b) GDPR).
Providing the data is voluntary, but without an email address we will not be able to reply.
How long we keep data
We keep messages until the correspondence has ended, and then until any claims connected with it become time-barred. After that, we delete them.
Who we share data with
Data from the form reaches the people in our firm who handle correspondence. We also use the services of an email provider and a hosting provider – they process the data only on our instructions, under a data processing agreement.
We do not sell data or make it available to anyone for their own purposes. We pass it on to public authorities only when the law requires it.
If a provider processes data outside the European Economic Area, it does so only in a country whose level of data protection has been confirmed by the European Commission, or on the basis of standard contractual clauses.
Server logs
The website runs on our hosting provider’s server. Like any server, it records basic technical data about visits in its logs: the IP address, the date and time, the address of the page opened and information about the browser and operating system.
This data is used solely to maintain the website and keep it secure – including protecting the form against automated spam (Article 6(1)(f) GDPR). We do not combine it with other information and do not use it to establish who a visitor is. The logs are kept for the period set by the hosting provider and are then deleted automatically.
To limit spam, the server keeps, for one hour, an irreversible hash of the IP address from which the form was sent – it does not store the address itself.
What we don’t do
The website does not store cookies, does not use analytics or advertising tools and does not load anything from external servers. We do not profile visitors or take automated decisions about them. You can read more in our Cookie policy.
Your rights
To exercise your rights, simply write to us – the ways to contact us are given at the top of this page. You have the right to:
- Access your data and receive a copy of it
- Have your data rectified
- Have your data erased
- Restrict processing
- Have your data transferred (data portability) – where the law provides for it
- Object to processing based on our legitimate interest
Complaints to the supervisory authority
If you believe that we are processing your data unlawfully, you can lodge a complaint with the President of the Personal Data Protection Office (UODO), the Polish supervisory authority.