Who is the controller of your data?

The administrator of your personal data is AURA PIOTR KOWALCZYK, Palestyńska Street, No. 5B, lok. 2, postal code 03-321 Warsaw, NIP: 5242104970, REGON: 012831890, (hereinafter: “Administrator”).

Why do we process your Data?

In connection with the services provided through qodesz.com consisting in the sale of products, i.e. in order to conclude or perform a contract (Article 6(1)(b) of the Regulation), your data will be stored until the contract is performed
To fulfill any legal obligations incumbent on us in connection with the cooperation undertaken (Article 6(1)(c) of the Ordinance), this purpose is related to legal obligations to store certain documents for the time indicated by law, e.g.:

  • 74 (2) points 1-8 of the Accounting Act of 29.09.1994 (Journal of Laws of 2017, item 1858);
  • 34 (1) of the Law of March 1, 2018 on Anti-Money Laundering and Countering the Financing of Terrorism (Journal of Laws 2018, item 723);
  • 86 §1 and 2 of the Act of August 29, 1997. – Tax Ordinance (Journal of Laws 1997 No. 137 item 926).
  • For the purpose of possible establishment, investigation or defense against claims, which is our legitimate interest (the basis of Article 6(1)(f) of the Regulation). Data will be processed until the statute of limitations for claims
  • If you have given your consent, your data will be processed within the limits and for the purpose indicated in your consent (basis of Article 6(1)(a)). Data will be processed until you withdraw your consent.

What data are subject to processing?

  1. To conclude a contract, we require you to provide data on the contract form (if you do not provide them, we will not conclude the contract). In addition, we may ask for optional data that does not affect the conclusion of the contract (if we do not receive them, we will not be able, for example, to call a contact number).
  2. During the course of the contract, while providing services, we come into possession of your other data. The appearance of your personal data with us is a consequence of the operation of our services that you use.

To whom will the data be shared?

  1. Public authorities, to the extent that they do not receive data as part of a specific proceeding under the law
  2. Entities that process your personal data on behalf of the Company on the basis of a contract concluded with the Company for the entrustment of personal data processing (so-called processors). These will include, but are not limited to: banking and payment service providers, hosting companies.
  3. Third-party data controllers (so-called Parallel Administrators to whom data is shared, such as courier or postal service providers, debt buyers – in case you fail to pay our invoices on time),

Is the Data profiled?

Please be advised that your data will not be subject to profiling, i.e. automated analysis of your data and development of predictions about your preferences or future behavior (profiling means, for example, in the case of marketing profiling, determining which offer you may be most interested in based on your previous choices).

What rights do you have?

  1. The right to access the personal data we process
    (Article 15 of the Regulation),
  2. The right to rectify the personal data entrusted to us, including the correction of such data
    (Article 16 of the Ordinance),
  3. The right to delete personal data from our systems, the so-called “right
    to be forgotten” – if, in your opinion, there are no grounds for us to process your data, you may request that we delete it (Article 17 of the Ordinance),
  4. The right to restrict the processing of personal data – You may request that we restrict the processing of your personal data only to the storage of your data or the performance of activities agreed with you, if we have incorrect data about you or are processing it unduly; or you do not want us to delete it because you need it to establish, assert or defend a claim; or for the duration of an objection raised by you against the processing (Article 18 of the Ordinance),
  5. Right to data portability – You have the right to receive from us in a structured, commonly used, machine-readable format (e.g., “.csv” format) personal data relating to you that we hold pursuant to a contract or consent you have given. You will be entitled to this right if we hold the data in electronic format – if you hold the data only in paper form, you will not be able to exercise this right. You may instruct us to send the data directly to another entity (Article 20 of the Regulation),
  6. The right to withdraw consent to the processing of personal data – at any time you have the right to withdraw your consent to the processing of personal data that we process on the basis of consent – Article 7(3) of the Ordinance. Withdrawal of consent will not affect the lawfulness of processing that was carried out on the basis of consent before its withdrawal. Withdrawal of consent occurs by sending an email to: biuro@qodesz.com
  7. Right to object – you may object to the processing of your data if the basis for the use of your data is our legitimate interest – Article 21 of the Regulation. In such a situation, after considering your request, we will no longer be able to process the personal data subject to the objection on this basis, unless we demonstrate the existence of a legitimate basis for processing that is deemed to override your interests, rights and freedoms
  8. If, in your opinion, the processing of your personal data violates the provisions of the Regulation, you have the right to lodge a complaint to the supervisory authority, i.e. the President of the Office for Personal Data Protection


If you need additional information related to data protection or wish to exercise your rights, please contact us by email at biuro@qodesz.com