Personal Data Controller

Your personal data is controlled by individual KRUK Group entities, depending on which of these entities you are indebted to, with which you have entered into an agreement or to which you have given your consent to the processing of your data. These may include:

• KRUK S.A. with its registered office in Wrocław (51-116), ul. Wołowska 8,
• PROKURA NFW FIZ  with registered office in Wrocław (51-116), ul. Wołowska 8, phone (+48) 71 790 61 61,
• P.R.E.S.C.O. Investment NFW FIZ with its registered office in Wrocław (51-116), ul. Wołowska 8,
• Bison NFW FIZ  with its registered office in Wrocław (51-116), ul. Wołowska 8,
• Presco Investments S.a.r.l. with its registered office in Luxembourg, 15 Boulevard F.W. Raiffeisen L-2411 Luxembourg,
• SeCapital S.a.r.l. with its registered office in Luxembourg, 1B rue Jean Piret, L-2350 Luxembourg,
• Kancelaria Prawna RAVEN P. Krupa, sp. komandytowa, with its registered office in Wrocław (51-116), ul. Wołowska 8,
• Novum Finance with its registered office in Wrocław (51-116), ul. Wołowska 8,

To each of the above. Administrators, you can send your inquiry to the following address: KRUK S.A., ul. Wołowska 8, 51-116 Wrocław or to the e-mail address info@kruksa.pl.

Data Protection Officer

We have appointed a Personal Data Inspector with whom you can contact in all matters relating to the processing of your personal data and your rights in connection with it. You can write to him at the following address: Data Protection Inspector, KRUK S.A. street Wołowska 8, 51-116 Wrocław, or contact us by e-mail: dpo@kruksa.pl.

Where did we obtain your data?

We obtained your personal data in the form of contact details and identification data directly from you as the person submitting the complaint, inquiry or GDPR request.

Why and on what basis do we process your personal data?

Your personal data is processed in order to answer:

- a complaint or inquiry submitted by you, which constitutes the legitimate interest of the administrator (Article 6(1)(f) of the GDPR),

- your GDPR request, which constitutes a legal obligation (Article 6(1)(c) of the GDPR)

Your personal data will also be processed in order to prove the facts after responding to a complaint, inquiry or request of the GDPR based on the legitimate interest of a given administrator (Article 6(1)(f) of the GDPR).

More information on the processing of your data (if you are a debtor, attorney, third party) can be obtained here https://pl.kruk.eu/dane-osobowe

Who are the recipients of your personal data?

Your data is processed by KRUK S.A., which, on behalf of itself or the above-mentioned administrator, responds to complaints, inquiries and GDPR requests as a data processor.

Your data may also be made available to entities supporting our activities, such as companies from the capital group, entities providing legal and accounting services, telecommunications operators, entities providing postal and courier services, entities supporting our IT infrastructure, our consultants or auditors and law enforcement authorities, and also to other authorities and entities, if the obligation to provide data results from legal provisions.

Personal data storage period (data retention)

Your personal data will be processed for the period necessary to achieve the purpose for which they were obtained, i.e. to respond to a complaint, inquiry or ROD request and to prove facts after the cessation of the original purpose for a period of up to 5 years (Article 6(1) letter f GDPR).

Profiling and automated decision-making

Your personal data in order to respond to a complaint, inquiry or GDPR request will not be subject to automated decision-making, including profiling.

Transfer of your personal data outside the European Economic Area (EEA)

We use suppliers and partners outside the EEA and it is therefore possible to transfer personal data to countries outside the EEA. Such transfer of personal data may take place on the basis of a decision stating the appropriate level of protection or subject to appropriate safeguards, Art. 45, 46 GDPR. Information on the EU Commission's adequacy decisions is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en

What rights do you have in relation to your data and how can you exercise them?

In our business, we ensure that you can exercise your rights under the GDPR. 
Under the GDPR you have the right to:

• Receive information about our processing of your personal data and a copy of it,  
• Transfer the personal data provided by you in connection with the conclusion of a contract or processed by us on the basis of your consent, 
• Object to the processing of your personal data (request to stop processing your personal data), in particular on grounds relating to your particular situation. Exercising the right to object generally prevents the processing of your data. Please note, however, that this effect will not occur where we demonstrate that there are valid, legitimate grounds for their processing overriding the grounds for objection, or we demonstrate that there are grounds for establishing, asserting or defending our claims that we have against you.

You can also request: 

• Correction of your data if we have incorrect data, e.g. outdated or incomplete data,
• Erasure of your data ("right to be forgotten") when: the data are no longer necessary for the purposes for which they were collected or otherwise processed; the data will be unlawfully processed; the obligation to erase your data arises from the provisions of the law; you object to the processing of your data; you withdraw your consent to the processing of your data.
• Restriction of the processing of your personal data, i.e. mark your stored personal data to limit future processing, where: you question the accuracy of your personal data - for a period of time to allow us to check the accuracy of the data; the processing is unlawful but you do not want it deleted; you no longer need the data but need it to defend or assert your claims; you object to the processing of your data - until it is determined whether the legitimate grounds for processing override the reasons for the objection. 

Please note that, in accordance with the GDPR, we will not delete your personal data to the extent that its processing is necessary for us to establish, assert or defend our claims, e.g. a request for payment of a debt, or we have a legal obligation to process it, e.g. an obligation to keep accounting documents. If, on the other hand, we restrict the processing of your data at your request, we will still be able to process your data to establish, assert or defend our claims. 

Where your consent is the basis for the processing of your personal data, you may withdraw it at any time. However, this will not affect the lawfulness of the Company's use of your data prior to the withdrawal of such consent.

If you wish to exercise the above rights, you may submit a request to us by: 

   • e-mail to: info@kruksa.pl
   • by telephone by calling: 800 700 020
   • by post to the following address: KRUK S.A., ul. Wołowska 8, 51-116 Wrocław
   • in person, when contacting our advisor or at KRUK S.A.'s registered office in Wrocław at ul. Wołowska 8.

You also have the right to lodge a complaint with the data protection supervisory authority, i.e. the President of the Office for Personal Data Protection.