Privacy Policy

1. Data Controller

The data controller is ARIAN INVEST SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (trading as Valuta.com.pl), registered at Aleje Jerozolimskie 47, 00-697 Warsaw, Poland, KRS 0001004559, NIP 5213994406, REGON 523759467. Second branch: ul. Starowiślna 42, 31-035 Kraków.

Contact us regarding personal data by phone: +48 571 333 510 (Warsaw), +48 793 083 319 (Kraków), or in person at a branch.

The controller has not appointed a Data Protection Officer (DPO). For all matters concerning the processing of personal data and the exercise of your rights, please contact the controller directly: ARIAN INVEST Sp. z o.o., Aleje Jerozolimskie 47, 00-697 Warsaw, email: kantorvaluta.waw@gmail.com.

2. What data we collect

• Exchange request data: first and last name, email address, phone number, chosen branch, currencies and amount, optional comment.
• Account data: email address and login credentials, if you create an account on the site.
• Transaction data: information about the completed exchange and — where required by AML regulations — identity document data.
• Technical data: IP address, device and browser type, on-site events, cookie identifiers.

We do not knowingly collect data about children and do not target our services at persons under 18.

3. Purposes and legal bases for processing

• Handling requests and completing exchanges — Art. 6(1)(b) GDPR (performance of a contract or steps prior to entering into one).
• Sending the 6-digit request code and communication — Art. 6(1)(b) GDPR.
• AML/CFT, tax and accounting obligations — Art. 6(1)(c) GDPR.
• Site security, fraud prevention, pursuing claims — Art. 6(1)(f) GDPR (legitimate interest).
• Statistics and marketing based on cookies — Art. 6(1)(a) GDPR (consent, which may be withdrawn at any time).

4. Retention period

• Unfulfilled requests — up to 12 months from submission.
• Transaction data and AML documentation — 5 years from the end of the year in which the transaction took place, in accordance with applicable regulations.
• Account data — until the user deletes their account.
• Analytics and marketing cookie data — up to 12 months or until consent is withdrawn.

5. Recipients of data

Data may be entrusted only to entities that support us in providing our services: hosting and infrastructure providers, transactional email provider (sending request codes), accounting office, legal services, and — to the extent required by law — authorised public authorities. We do not sell personal data and do not share it with third parties for advertising purposes.

6. Transfers outside the EEA

Some technical services may be provided by vendors operating outside the European Economic Area. In such cases, transfers are based on standard contractual clauses approved by the European Commission or another mechanism provided for in Chapter V of the GDPR.

7. Your rights

You have the right to: access your data, rectify it, erase it, restrict processing, data portability, object to processing based on legitimate interest, and withdraw consent at any time (without affecting the lawfulness of processing carried out before withdrawal). You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

The extent to which some requests can be fulfilled may be limited by obligations arising from AML and tax regulations.

8. Cookies

The valuta.com.pl website uses three categories of cookies:

• Necessary — session, login, security, remembering language preference. Always active.
• Analytics — anonymous statistics on visits and traffic on the site. Require consent.
• Marketing — tailoring content and advertising. Disabled by default, require consent.

The choice made in the cookie banner is saved locally in your browser. You can change it at any time by clearing your browser's site data and making a new choice.

9. Security

We use encrypted connections (HTTPS), server-side access control, and limit employee permissions to what is necessary to serve customers of a given branch.

10. Changes to this policy

We update this policy whenever our services or applicable regulations change. The new version applies from the date of publication on the site. Our exchange rate rules are described separately in the Pricing Policy.