I. General information
This Privacy Policy explains how we process personal data and use cookies within:
www.lagrin.pl
www.kancelariawierzytelności.pl
www.monitoringplatnosci.pl
(the “Service”).
Data Controller: Kancelaria Wierzytelności Marek Krawczyk, ul. Puławska 145, 02-715 Warsaw, NIP: 9512116839, REGON: 140498425.
Contact for data protection: kontakt@lagrin.pl.
The Controller has not appointed a Data Protection Officer.
II. Scope and sources of data
1. Scope of processed data
- data you provide voluntarily (contact forms, e-mails, account registration),
- data from public registers: KRS, CEIDG and REGON/NIP—insofar as needed to assess the payment credibility of entrepreneurs,
- system logs (IP address, date, browser, operating system).
2. Sources and legal basis
Data from public registers include information about companies, their bodies, partners and authorised representatives. These data are public. Processing is based on access to public information regulations and Art. 6(1)(f) GDPR (legitimate interest—risk analysis, transparency of commerce).
III. Purposes and legal bases
- Handling inquiries and contacting the user – Art. 6(1)(f) GDPR.
- Providing services and risk reports – Art. 6(1)(b) and (f) GDPR.
- Compliance with legal obligations – Art. 6(1)(c) GDPR.
- Direct marketing and commercial information – Art. 6(1)(a) GDPR as well as applicable e-privacy laws.
- Legitimate interest of the Controller, including: Service security, fraud prevention, credibility analysis and visit statistics.
IV. Information duty for data from public registers
When processing personal data from KRS, CEIDG or other public sources, the Controller informs that:
- data are processed for credit risk analysis and to present business reports,
- the source of data is the relevant public register,
- data subjects may exercise the rights described in section V,
- individual notice is not required if it would involve disproportionate effort (Art. 14(5)(b) GDPR)—this information is published in this Policy.
V. Rights of individuals
Every data subject has the right to:
- access, rectification, erasure or restriction of processing,
- object to processing (Art. 21 GDPR),
- withdraw consent at any time,
- data portability,
- lodge a complaint with the supervisory authority.
Requests can be sent to: kontakt@lagrin.pl.
VI. Data recipients
Data may be entrusted to:
- IT and hosting providers,
- payment operators,
- electronic communication providers,
- entities authorised by law.
When transferring data outside the EEA, we use the European Commission’s Standard Contractual Clauses.
VII. Retention
- Contact forms – until the case is closed + 3 years (for evidence purposes).
- Marketing data – until consent is withdrawn or an objection is raised.
- Public register data – for as long as the information remains current and to maintain business reports.
- Accounting data – according to legal obligations (up to 6 years).
VIII. Profiling and automated decisions
We do not use automated decision-making or profiling.
IX. Cookies
1. What cookies are
Small files saved on the user’s device.
2. Types
- session,
- persistent,
- analytics,
- marketing.
3. Legal basis
Necessary cookies – local telecom/e-privacy laws. Analytics and marketing – only with the user’s consent.
4. Managing cookies
A consent banner appears at first visit. You can withdraw consent anytime in the cookie settings or via your browser.
X. Final provisions
We may update this Policy to reflect changes in law or our operations. Material changes will be announced on the Service homepage.