Privacy Policy

1. Data controller

The controller of your personal data is Krajowe Centrum Obsługi Długów sp. z o.o., ul. F. Nowowiejskiego 9/401, 10-162 Olsztyn, Poland, entered in the Polish National Court Register under KRS 0001019984, VAT ID PL7393980771 ("KCOD", "we"). Contact: office@debtrecoverypoland.com or by post at the address above. Data protection enquiries: DaneOsobowe@kcod.pl.

2. What data we process and why

• Enquiry and claim forms — identification and contact data (name, company, e-mail, phone), details of the claim and of the debtor you indicate. Purpose: responding to your enquiry, assessing the claim and preparing the service agreement — Art. 6(1)(b) GDPR (steps prior to entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in verifying counterparties and claims).
• Company verification — we verify the company identifier you provide against public registers, including the European Commission's VIES system. Legal basis: Art. 6(1)(f) GDPR.
• Contract performance — if we conclude an agreement, we process data necessary to provide the recovery service, including correspondence and settlement data. Legal basis: Art. 6(1)(b) GDPR; for accounting records, Art. 6(1)(c) GDPR.
• Debtor data — data of debtors (entrepreneurs and, where applicable, natural persons) is processed by KCOD as an independent controller for the purpose of pursuing claims, listing debts in our public debt registry (Polska Giełda Długów) and reporting to the BIG InfoMonitor credit information bureau, in accordance with the Polish Act on the provision of business information (ustawa o udostępnianiu informacji gospodarczych). Debtors receive the information notices required by Art. 14 GDPR and Polish law.

3. Recipients of data

Depending on the service stage, data may be disclosed to: our IT infrastructure and communication providers (hosting, e-mail and SMS delivery, electronic signature), postal operators, BIG InfoMonitor S.A., payment providers, professional advisers (lawyers, accountants) and public authorities where required by law. Providers acting on our behalf process data under data processing agreements compliant with Art. 28 GDPR.

4. International transfers

We store data within the European Economic Area. Where a provider processes data outside the EEA, the transfer is based on European Commission adequacy decisions or Standard Contractual Clauses.

5. Retention

Enquiry data is kept for up to 12 months after our last contact. Contract and settlement data is kept for the duration of the agreement and afterwards for the limitation periods of claims and the retention periods required by Polish tax and accounting law (as a rule, 5 full tax years).

6. Your rights

You have the right to access your data, rectify it, request erasure or restriction of processing, the right to data portability and the right to object to processing based on legitimate interest. You may lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warsaw) or with your local supervisory authority.

7. Cookies and analytics

This website uses only cookies necessary for its operation. If analytics or advertising tools are enabled in the future, they will run only with your consent, which you can withdraw at any time.