• Compliance Data: Data required for regulatory checks (KYC, AML, sanctions screening).
  • Identification Data: Full name, date of birth, national ID documents, etc.
  • Contact Details: Email address, phone number, postal address.
  • Financial Information: Bank details, transaction records, wallet/account details.
  • Technical Data: IP addresses, cookies, device identifiers, and geolocation data.
  • Contractual necessity (Art. 6(1)(b)): To provide financial services including wallets, payments, remittances, and customer support.
  • Legal obligation (Art. 6(1)(c)): Complying with Polish Payment Services Act, AML Act (Ustawa o przeciwdziałaniu praniu pieniędzy oraz finansowaniu terroryzmu), and GDPR.
  • Legitimate interests (Art. 6(1)(f)): Fraud prevention, network security, and internal administration.
  • Consent (Art. 6(1)(a)): Marketing, communications, analytics (consent can be withdrawn at any time).
  • Regulatory authorities including the Polish Financial Supervision Authority (KNF) and General Inspector for Financial Information (GIFI) upon legitimate requests.
  • Partners and service providers necessary to deliver financial and technical services.
  • Third parties performing AML, compliance, auditing, and cybersecurity services on our behalf.
  • Strong encryption methods and secure VPN connections.
  • Multi-factor authentication (2FA).
  • Regular security audits and compliance training.
  • Business continuity and disaster recovery plans including secure off-site backups.
  • Financial transactions and AML-related data: at least 5 years after transaction completion as mandated by Polish AML law.
  • Contractual data: up to statutory limitations (typically 5–6 years in Poland).
  • sure: Right to request deletion of your personal data under specific circumstances.
  • Restriction of processing: Right to restrict processing of your personal data.
  • Data portability: Right to transfer your data to another controller.
  • Objection: Right to object to data processing.
  • Withdrawal of consent: You can withdraw consent at any time if consent is the basis for processing.
  • Complaint: Right to lodge a complaint with the Polish Data Protection Authority (UODO).