Skip to content
+48 884 886 181

Privacy policy

This translation is provided for convenience. The binding version is the Polish one — Polityka prywatności.

1. Who controls your data

The controller of personal data is DIS Sp. z o.o., ul. Żelazna 51/53, 00-841 Warsaw, NIP 5223285278, KRS 0001082341.

For data matters, contact us at the address above or by phone at +48 884 886 181.

2. What data we collect

  • Rate reservation: phone number, email address, selected currencies, the amount to exchange, the calculated amount to receive, exchange rate, expiry time and reservation status.
  • Above-threshold transactions: data from your identity document — required by anti-money-laundering law.
  • Site statistics: anonymised visit data, and only if you have accepted analytics cookies.

3. Why, and on what legal basis

  • Rate reservation — to carry out your request (art. 6(1)(b) GDPR).
  • Identity document data — compliance with a legal obligation (art. 6(1)(c) GDPR).
  • Site statistics and security — our legitimate interest (art. 6(1)(f) GDPR).

We use reservation form data to handle your reservation and contact you about it. If you give separate, voluntary consent, we may use your email address to send information about Kantor X’s own services and offers, only within the scope you agreed to. Marketing consent is not required to reserve an exchange rate.

Marketing of our own services within the scope of separate, voluntary consent — art. 6(1)(a) GDPR; sending commercial information by email — prior consent under art. 398 of the Polish Electronic Communications Law.

4. How long we keep it

Data from above-threshold transactions is kept for 5 years, as the law requires. Personal data is not automatically deleted when a rate reservation expires. Analytics data is retained according to the settings of the statistics tool.

We keep email addresses used with your consent to market our own services until you withdraw consent, object to marketing, or the activities covered by your consent end, whichever happens first. This period is separate from the retention of documents that other laws require us to keep.

5. Who we share it with

Data may be processed by providers that run our infrastructure: the website hosting provider and the statistics tool provider. We do not sell personal data and do not pass it on for third-party marketing.

6. Cookies

The site uses necessary cookies so that it works correctly. Analytics cookies and the Google Maps embed load only after you agree. You can change your choice at any time in the privacy settings on the site.

7. Your rights

You have the right to access your data, rectify it, erase it, restrict processing, object to processing and receive your data in a portable form. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

For data we are legally required to keep, the right to erasure is limited until the retention period ends.

You may withdraw marketing consent at any time. You may also object to direct marketing. In either case, we will stop using your data for the marketing covered by your withdrawal or objection. Withdrawal does not affect the lawfulness of earlier processing or the handling of your reservation. You can contact us about this at kontakt@kantorx.pl.

8. Transfers outside the EEA

We do not transfer data outside the European Economic Area, except where the statistics provider does so under the mechanisms provided for in the GDPR.

9. Automated decisions

We do not make automated decisions and do not carry out profiling.

10. Contact

DIS Sp. z o.o., ul. Żelazna 51/53, 00-841 Warsaw, phone +48 884 886 181.