This policy explains how we process the personal data of people who contact us through the audyt-plus.pl website, by phone or by email, and what information the website stores in your browser. This policy is also available in Polish: Polityka prywatności.
Data controller
The controller of your data is Kancelaria Biegłych Rewidentów „AUDYT PLUS” Sp. z o.o., ul. Portowa 43/87, 30-709 Kraków, Poland, KRS 0000128652, NIP (tax ID) 945-196-28-46. Contact on data protection matters: biuro@audyt-plus.pl, tel. +48 12 429 33 77.
What data we process and why
- Quote forms and contact form: company details (name, tax ID, address, REGON, KRS), the name of the contact person, email address, phone number and the information provided in the questionnaire, e.g. financial data and the scope of the audit. We process them to prepare a quote and respond to your enquiry (Article 6(1)(b) GDPR) and in our legitimate interest in conducting correspondence (Article 6(1)(f) GDPR). From the questionnaire data we create a PDF summary, which is sent to our mailbox together with the message.
- Email and telephone correspondence: the data you provide to us, for the same purposes and on the same legal bases.
- Recruitment: data from the CV you send us, for the purpose of recruitment. Data required by law (first name and surname, date of birth, contact details, education, professional qualifications, employment history) are processed under Article 6(1)(c) GDPR in conjunction with Article 221 of the Polish Labour Code. Any other data you choose to include in your CV are processed on the basis of consent expressed by sending them (Article 6(1)(a) GDPR); you may withdraw your consent at any time. Please do not include special categories of data, e.g. health data, in your CV.
- Website security: the web server automatically records technical connection data, such as the IP address and time of access, to protect the website against abuse and attacks (Article 6(1)(f) GDPR).
Article panel for staff
At /admin/ there is a panel in which our staff publish Knowledge base articles. It is not intended for website visitors.
- Login: staff members log in with their company email address and email password. The password is verified by the Zenbox mail server; we do not store it.
- Login log: every login attempt is recorded on the Zenbox server (email address, time, result of the attempt, IP address). The purpose is the security of the panel, including the detection of unauthorised access attempts, which is our legitimate interest (Article 6(1)(f) GDPR). Entries are kept for 12 months.
- External services: the panel editor runs from our server but loads interface fonts and icons from cdn.jsdelivr.net and connects to GitHub (GitHub, Inc., USA), where we keep the website code and content. These services receive the IP address of the staff member's browser, and GitHub also receives the content of saved changes. Data are transferred to GitHub, Inc. on the basis of the European Commission's adequacy decision under the EU-US Data Privacy Framework, in which the company participates.
The connections described in this section concern the panel only. The public part of the website does not connect to cdn.jsdelivr.net or GitHub.
Filling in company details from the tax ID (NIP)
After you enter a Polish tax ID (NIP) in a form, your browser retrieves the company's name, address and VAT status from the public Register of VAT Taxpayers (the "white list") maintained by the Polish Ministry of Finance (wl-api.mf.gov.pl). Only the tax ID you entered is sent to the Ministry, together with your browser's IP address, as with any internet connection. We do not send any other form data there. If you do not want to use this feature, you can enter the company details yourself.
How long we keep data
We keep enquiry data until we respond and for the period needed to conclude a possible contract, but no longer than 12 months. If we conclude a contract, we keep the data for its duration and for the period required by law, including the Polish Act on Statutory Auditors. Recruitment data are deleted once the recruitment is completed, unless the candidate agrees to take part in future recruitments. The login log of the article panel is kept for 12 months. Technical connection data (server logs) are kept by the hosting provider for a short period resulting from its security policy.
Recipients of data
The website, the forms and our email run on servers of Zenbox sp. z o.o. in Poland, which provides hosting services to us under a data processing agreement. Messages from the forms go directly to our mailbox and are not stored on the website server. Apart from the article panel for staff described above (GitHub, Inc.), we do not transfer data outside the European Economic Area. We do not sell data or share it for marketing purposes.
Your rights
You have the right to access your data, to have it rectified or erased, to restrict its processing, to data portability and to object. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland. We do not make decisions by automated means, including profiling (Article 22 GDPR). Providing data is voluntary, but without contact details we cannot respond to your enquiry.
Cookies and browser storage
The website does not use cookies, analytics, advertising or tracking tools. The public part of the website does not load scripts, fonts or images from external services – all of them are served from our server. The only connection to another service is the company details lookup by tax ID described above. This is why we do not display a cookie consent banner.
The only information stored in your browser is the state of the checklists in Knowledge base articles, i.e. which items you have ticked. It is saved only when you click a box, stays only on your device (the browser's local storage) and is not sent to us. It serves only the function you request, so it does not require consent (Article 399(2) of the Polish Electronic Communications Law). You can delete it by clearing the site data in your browser settings. In the article panel, the staff member's browser also stores the login session key, which is necessary for the panel to work.
The "Show on map" link and the LinkedIn icon are ordinary links. Google and LinkedIn open only when you click them, and their privacy policies then apply.
Last updated: 13 October 2026.