Legal · Last updated 10 Nov 2026
Privacy Policy
This policy explains how we process personal data in line with Regulation (EU) 2016/679 (GDPR) and the Polish Act of 10 May 2018 on the Protection of Personal Data.
1. Data controller
The controller of your personal data is BOIDRA Sp. z o.o., ul. Księcia Witolda 49/15, 50-202 Wrocław, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) under no. 0001258462, NIP 8982336905, REGON 545418720. Contact: +48 511 051 045, or via the contact form on this website.
2. What data we process
Identification and contact data you provide (name, e-mail, company, phone, message content); order and invoicing data; data required for customer due diligence under AML law (e.g. company registration data, beneficial owners, ID document data of representatives); technical data (IP address, browser type, cookie identifiers).
3. Purposes and legal bases
Answering enquiries and preparing offers — Art. 6(1)(b) and (f) GDPR; performing contracts — Art. 6(1)(b); accounting and tax obligations and AML/CTF obligations — Art. 6(1)(c); establishing and defending claims — Art. 6(1)(f); analytics and marketing — only on the basis of your consent, Art. 6(1)(a).
4. Retention
Enquiry data — up to 12 months after the last contact; contract and accounting data — 5 years from the end of the financial year; AML documentation — 5 years from the end of the business relationship, as required by the Polish AML Act; consent-based data — until consent is withdrawn.
5. Recipients and transfers
We share data only with trusted processors (hosting, e-mail, accounting, IT support) under data processing agreements, and with public authorities where the law requires it. Where data is transferred outside the EEA, we rely on European Commission adequacy decisions or Standard Contractual Clauses.
6. Your rights
You have the right to access, rectify, erase, restrict and port your data, to object to processing, and to withdraw consent at any time without affecting prior processing. You may lodge a complaint with the President of the Personal Data Protection Office (PUODO), ul. Stawki 2, 00-193 Warsaw.
7. Security
We apply encryption in transit, role-based access control, regular backups and staff confidentiality obligations. We do not use automated decision-making that produces legal effects for you.