What data do we mean?
Personal data is information about an identified or identifiable natural person. It is therefore primarily about data that allows you to be identified, including your name, telephone number, email address, correspondence address and occupation.
Personal Data Controller
Your personal data is controlled by the various KRUK Group entities, depending on which of these entities has a debt or contract with respect to which you are contacting us:
You may address your query to any of the above-mentioned Controllers by sending it to KRUK S.A., ul. Wołowska 8, 51-116 Wrocław, or to the e-mail address info@kruksa.pl.
Data Protection Officer
Each of the aforementioned Controllers has appointed a Data Protection Officer with whom you can contact on all matters relating to the processing of your personal data and your rights in this regard. You may write to him at the following address: Data Protection Officer, KRUK S.A. ul. Wołowska 8, 51-116 Wrocław, or contact by e-mail: dpo@kruksa.pl.
Why and on what basis do we process your personal data?
Your personal data may be processed by us on the basis of a legitimate interest pursued by the controller (Article 6(1)(f) GDPR) for the following purposes:
We may also process your data for the following purposes:
How long do we keep your personal data?
The duration of the Controller's processing of your personal data depends on the purpose of the processing. In the case of debt recovery, it usually arises from:
If you have given your consent to the processing of personal data, e.g. for the purpose of marketing products and services, your personal data will be processed until you withdraw it.
To whom may we pass your personal data?
Your data is processed by KRUK S.A. with its registered office in Wrocław (51-116), ul. Wołowska 8, which manages the receivables of all KRUK Group entities on the basis of a personal data processing agreement within the meaning of Article 28 GDPR, and by its subcontractors.
Your data may be shared with entities that support the debt recovery process, such as law firms, notary's offices, bailiff's offices, document storage and archiving companies, business information agencies, detective agencies, telephone number offices, telecommunications operators, IT, ICT and cloud service providers, postal and courier service providers, real estate offices, real estate brokers, property managers, municipal and local government offices, tax offices, as well as our consultants or auditors.
KRUK S.A. may transfer your personal data to other KRUK Group entities to the extent that it is authorised or obliged to do so by law, including in particular anti-money laundering and counter-terrorist financing regulations.
Do you have to give us your personal information?
Your provision of personal data is voluntary. To the extent that the processing of your personal data takes place for the purpose of handling our customer's case, the consequence of failing to do so will be that the case cannot be handled due to the failure to correctly identify your person.
From whom may we receive your data?
In principle, we receive your data directly from you as a result of your customer engagement. In certain situations, we obtain your personal data by means other than directly from you, e.g. when our customer provides us with contact details for you or we receive a relevant notification from a court, penitentiary facility, etc.
In the event that enforcement proceedings for your debt have been initiated or are pending, we may also obtain or update your data on the basis of information received from bailiffs in connection with the enforcement proceedings. There are cases where we receive your data from people who were given as contact persons in the original creditor.
In the above cases, we generally obtain the following categories of your personal data: name, address and contact details, numerical identification data (such as: PESEL, NIP, Regon, identity card number and series), information on the debt (such as the amount, components and title of the debt), information on the course of debt collection (including agreements concluded, complaints lodged, court and enforcement proceedings), information on payments made, information on securities for debt repayment, information on the financial and asset situation (such as sources and amount of income, assets, including real estate and movable property owned).
Profiling and automated decision making
Please be informed that in the course of our activities your data will be processed by automated means, including profiling. We do not make automated decisions in relation to you.
Transfer of your personal data outside the European Economic Area (EEA)
We use suppliers and partners outside the EEA and it is therefore possible to transfer personal data to countries outside the EEA. Such transfer of personal data may take place on the basis of a decision stating the appropriate level of protection or subject to appropriate safeguards, Art. 45, 46 GDPR. Information on the EU Commission's adequacy decisions is available here: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/adequacy-decisions_en
What rights do you have in relation to your data and how can you exercise them?
In our business, we ensure that you can exercise your rights under the GDPR.
Under the GDPR you have the right to:
You can also request:
Please note that, in accordance with the GDPR, we will not delete your personal data to the extent that its processing is necessary for us to establish, assert or defend our claims, e.g. a request for payment of a debt, or we have a legal obligation to process it, e.g. an obligation to keep accounting documents. If, on the other hand, we restrict the processing of your data at your request, we will still be able to process your data to establish, assert or defend our claims.
Where your consent is the basis for the processing of your personal data, you may withdraw it at any time. However, this will not affect the lawfulness of the Company's use of your data prior to the withdrawal of such consent.
If you wish to exercise the above rights, you may submit a request to us by:
You also have the right to lodge a complaint with the data protection supervisory authority, i.e. the President of the Office for Personal Data Protection.