Dear Sirs, In our continuous effort to ensure the best possible protection of your personal data, we would like to assure you that we protect your personal data at the highest level and in this document you will find all the information about what your personal data we process and for what purpose.
§1 Data controller
The Administrator of your Personal Data is Interior Capital sp. z o. o. with its registered office in Wrocław (53-676), Sokolnicza Street 7/17 lok. 6, NIP: 8971863222, REGON: 382390433, entered in the register of entrepreneurs kept by the District Court for Wrocław-Fabryczna in Wrocław, VI Economic Department of the National Court Register under the KRS number: 0000767986, hereinafter also referred to as the “Company”.
§2 How to contact the Company?
If you have any questions or comments regarding data processing, please
contact us: at e-mail address: biuro@cashify.eu or by correspondence: 7 Sokolnicza St., premises 17, 53-676 Wrocław. The request to correct or delete personal data should be reported to us at: biuro@cashify.eu.
§3 What data do we collect and for what purpose?
The scope and purpose of our data collection, depends on the scope of your cooperation with us. Customers who purchase virtual currencies within the company. Administrator to whom the provisions of the Law of March 1, 2018 on the prevention of money laundering and financing of terrorism(“AML Law”) apply: Customers of the Administrator who are natural persons.
Scope of data processed:
a) first and last name,
b) nationality,
c) PESEL number or date of birth - if no PESEL number has been assigned and country of birth,
d) series and number of the person's identification document,
(e) address of residence,
f) name (company), TIN and address of the main place of business - in the case of a natural person engaged in business;
Persons authorized to act on behalf of the Client who is a legal person or an organizational unit without legal personality
Scope of processed data:
a) first and last name,
b) nationality,
c) PESEL number or date of birth - if no PESEL number has been assigned and country of birth,
d) series and number of the person's identification document;
Beneficiaries in rem within the meaning of the AML Act
Scope of data processed:
a) first and last name,
b) nationality, and in case of having such data, also:
c) PESEL number or date of birth - if no PESEL number has been assigned, and country of birth,
d) series and number of the person's identification document,
e) address of residence.
We process the data of Clients, persons authorized to act on behalf of Clients and real beneficiaries in order to: perform statutory obligations, resulting in particular from the need to make settlements and archive documents, and from the need to apply security measures by the administrator, as an obliged institution, resulting from the AML Act - the basis for processing is a legal obligation incumbent on the administrator (Art. 6 ust. 1 lit. c RODO) arising from the AML Act of potentially pursuing or defending against claims, as well as identifying persons authorized to represent clients - the legal basis for processing is the legitimate interest of protecting our rights (Art. 6 ust. 1 lit. f RODO) In cases where the AML Act requires it, providing data is a condition for entering into a contract. Without their provision, the administrator will not be entitled to provide the currency exchange service.
§4 Personal data of other Customers (if provided)
In the case of Customers to whom the provisions of the AML Act do not apply, if personal data is provided by the Customer, we process it in order to: perform the contract (including the examination of any complaints) - the legal basis for processing is the necessity of processing to perform the contract; in order to fulfill the statutory obligations incumbent on the administrator, resulting in particular from tax and accounting regulations, consisting, inter alia, in the following. in order to issue an invoice or other accounting evidence and its archiving - the legal basis for processing is a legal obligation; in order to identify persons authorized to represent the Company's clients - the legal basis for processing is the legitimate interest, consisting in the proper implementation of the subject matter of the contract; in order to possibly establish, investigate or defend against claims - the legal basis for processing is the legitimate interest, consisting in protecting our rights;
§5 Personal data of persons who are potential customers
We process the data of potential customers, including, for example, name and contact information in order to:
to offer our services or those of our partners, which is our legitimate interest (Article 6(1)(f) RODO); for the purpose of possibly establishing, investigating or defending against claims - the legal basis for processing is the legitimate interest of protecting our rights. In addition, in the case of your use of https://cashif.eu/, (the “Service”), the purposes and grounds for processing depend on the extent to which you use its functionality:
§6 Newsletter
In the event that you provide the administrator with your e-mail address for this purpose, we provide you with newsletter services, i.e. the provision of commercial information regarding the products or services offered by the administrator. Providing this data is voluntary, but necessary to send the newsletter.
Personal data is processed: in the case of directing marketing content to you within the newsletter - the legal basis for processing, is the legitimate interest; for the purpose of possible establishment, investigation or defense against claims - the legal basis for processing is the legitimate interest of protecting our rights.
§7 Contact form
When you contact us via the contact form, you are asked to provide identifying information, i.e. your name and email address. You may be asked to provide additional data only if it is necessary to handle the matter to which you are contacted. The legal basis in such a case is our legitimate interest of having to resolve the reported matter related to the Service.
§8 Data of users of social media profiles
Our profile on the services: Facebook, Instagram, X, TikTok, YouTube LinkedIn, Luma is public. Users who visit our profiles provide us with their personal information (e.g., account name, comments, likes, Internet IDs, and IP address of the device they are using).
This data is processed in order to: (i) to enable us to effectively maintain our profile on a particular website or application in connection with our promotion of various events, services and products, and (ii) to communicate with users. The legal basis for the processing of personal data is our legitimate interest in promoting our brand, improving the quality of our services, and ongoing communication with fanpage users.
NOTE: the above information does not apply to the processing of your personal data by the administrator of Facebook, Instagram, X, TikTok, YouTube, LinekdIn and Luma.
§9 How long does the Company process personal data?
The period of data processing depends on the legal basis and purpose of processing.
We process the data of Customers who have entered into an agreement with us (established business relations or performed an occasional transaction), under the conditions indicated in the AML Law: in the case of fulfillment of legal obligations - the data retention period is5 years, counting from the date of termination of business relations with the customer or from the date of performance of an occasional transaction, unless an authorized authority requires the retention of records for a longer period (Article 49, paragraphs 1 and 3 of the AML Law); Data of all Customers (if the data has been provided): For the period of retention of financial and accounting documents as indicated by law.
In the case of processing of personal data on the basis of our legitimate interest, data are processed as a rule until an objection is filed.
The period of data processing may be extended if the processing is necessary to establish, assert or defend against possible claims, and after this period, only if and to the extent required by law.
§10 What rights do customers have with respect to their personal data?
We guarantee the realization of all the rights of people whose data we process, including the right to: access data, including obtaining a copy; rectification of data; deletion of data; limitation of processing data portability; lodge an objection; lodge a complaint with the President of the Office for Personal Data Protection; IF YOU WANT TO USE YOUR RIGHTS, PLEASE CONTACT US FIRST.
§11 To whom is personal data shared?
Personal data on the basis of relevant contracts are transferred to entities that process data on behalf of the Company. Such entities shall process the data only in accordance with our instructions, with confidentiality and security. We have the right to control the processing of the data entrusted to us.
In other cases, personal data may be disclosed to entities authorized only by law. In particular, data may be disclosed to the General Inspector of Financial Information and other competent authorities if we are required to do so under the AML Act.
Transfers of data outside the EEA The Administrator transfers personal data outside the EEA in the use of subcontractors such as Microsoft Corporation, Google Inc., Hotjar Ltd. and Facebook. We make due efforts to ensure an adequate level of protection of personal data, after careful consideration of the data security offered by the subcontractors, and the transfer of data is based on standard contractual clauses approved by the European Commission.
Social Media. The Service uses plug-ins and other social media tools provided by social networks such as Facebook, Instagram, X, TikTok, YouTube, LinekdIn and Luma.
In connection with the use of the Site, which includes such a plug-in, your browser establishes a direct connection with the servers of the administrators of social networks (service providers). The content of the plug-in is transmitted by the respective service provider directly to your browser and integrated into the Site. Thanks to this integration, the service providers receive information that your browser has displayed the Site, even if you do not have a profile of the successful service provider or are not logged in at the time. Such information (along with the IP address) is sent by your browser directly to the server of the given service provider (some servers are located in the USA) and stored there.
If you have logged in to one of the social networks, this service provider will be able to directly attribute your visit to the Service to your profile on the given social network. If you use a particular plug-in, such as the “Like” button, then the corresponding information will also be sent directly to the server of the respective service provider and stored there. In addition, this information will be published on the respective social network and will appear to the people added as your contacts.
The purpose and scope of data collection and its further processing and use by service providers, as well as the possibility of contacting you and your rights in this regard and the possibility of making settings to ensure the protection of your privacy are described in the privacy policies of individual service providers.
Facebook - https://www.facebook.com/privacy/explanation
Instagram - https://help.instagram.com/519522125107875
X - https://x.com/pl/privacy
TikTok - https://www.tiktok.com/legal/page/eea/privacy-policy
YouTube - https://policies.google.com/privacy
Luma - https://lu.ma/privacy-policy
LinkedIn - https://pl.linkedin.com/legal/privacy-policy
If you do not want social networks to attribute the data collected during your visit to the Site directly to your profile on a particular site, it is necessary to log out of that site before visiting the Site. It is also possible to completely prevent plug-ins from loading on the Site by using appropriate extensions for your browser, such as blocking scripts.
§12 Cookies Policy
The website uses so-called cookies. These are small text files placed on your devices (e.g. computers) via web browsers. These files allow certain information to be stored on your device and then read by the service that created the files. Cookies usually contain, in addition to the domain name of the website from which they originate, the time they are stored on your terminal device and a unique number.
Cookies are used by us in order to: adjust the content of the website to the individual preferences of the User and to optimize the use of the websites (cookies allow, in particular, to recognize your device and to display the website appropriately, so that it is best adapted to individual needs), to maintain the session within the website after logging in, to create statistics (so that we can better understand how the Users of our website use the websites, and consequently we can improve the structure and content of these pages);to provide you with advertising content corresponding to your individual preferences. The website does not store any information about your computer's hardware configuration or programs installed on your computer.
§13 Changing the cookie settings
Usually, your web browser allows cookies to be stored on your terminal device by default. However, you have the possibility and the right to change your cookie settings at any time. In order to change your cookie settings, you should refer to the detailed information on the possibilities and ways of handling cookies, which are available in your browser settings.
If you do not agree to the placement of cookies on your device, you can block their placement by configuring your web browser accordingly. You can find information on how to do this in the help files of your web browser. If you block cookies from the Website, the Administrator cannot guarantee its correct operation. If you do not change your settings regarding cookies, the files will be placed on your terminal device. This means that the Administrator will store information in the end device and access this information.