1. Who we are
The controller of your personal data is Invest in Poland, Stolarska 6, 31-043 Kraków, Poland (“we”). You can contact us about personal data by email at office@investinpoland.group, by post at the address above, or by telephone on +48 511 511 845.
2. What data we process
- Enquiries: the details you enter in the contact form — company name, your name, email address, telephone number, country, company website, area of interest and your message — and any information you send us by email or telephone.
- Clients and prospective clients: contact details of the people we work with, correspondence and information needed to prepare and perform an engagement.
- Technical data: when you visit the website our server automatically records the IP address, date and time, the page requested and browser information in log files.
3. Why we process it and on what legal basis
- To reply to your enquiry and take steps before entering into an agreement — Art. 6(1)(b) GDPR, and our legitimate interest in answering correspondence — Art. 6(1)(f) GDPR.
- To perform an agreement with you or the company you represent — Art. 6(1)(b) GDPR, or our legitimate interest in contacting the client's representatives — Art. 6(1)(f) GDPR.
- To meet legal obligations, for example accounting and tax rules and, where they apply, anti-money-laundering rules — Art. 6(1)(c) GDPR.
- To keep the website secure and working properly — Art. 6(1)(f) GDPR.
- To establish, pursue or defend legal claims — Art. 6(1)(f) GDPR.
4. Who receives the data
Your data may be processed on our behalf by providers of hosting (OVH), email and IT services, and by our legal, tax and accounting advisers, all bound by confidentiality. Where your matter involves finance arranged through partner institutions, we share information with a partner only with your agreement. We disclose data to public authorities only where the law requires it.
5. Transfers outside the European Economic Area
We do not intend to transfer your data outside the EEA. If a service provider does so, the transfer will be protected by an adequacy decision or the standard contractual clauses approved by the European Commission.
6. How long we keep it
- Enquiries that do not lead to an engagement: up to 12 months from our last contact.
- Client data: for the duration of the engagement and then until claims become time-barred under Polish law.
- Accounting documents: 5 years from the end of the financial year in which they were created.
- Server logs: up to 90 days, unless needed to investigate a security incident.
7. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent, you may withdraw it at any time without affecting earlier processing. To exercise these rights, write to office@investinpoland.group.
You may also lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
8. Is providing data required?
Providing data is voluntary, but without contact details we cannot reply to your enquiry. Where data is needed to conclude or perform an agreement, not providing it may prevent us from working together.
9. Automated decisions
We do not make decisions based solely on automated processing, including profiling.
10. Cookies
The news section links to articles on third-party websites, which have their own privacy and cookie policies.
11. Changes
We may update this notice. The current version is always available on this page.
Last updated: 5 October 2026