Acting on behalf of A+V Sp. z o.o., with its registered office in Wrocław, at ul. Sucha 2, 50-086 Wrocław, entered into the Register of Entrepreneurs maintained by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register under KRS No. 0000481335, NIP No. 8992747780, REGON No. 022272974, with a share capital of PLN 26,800.00 (hereinafter referred to as the „Company” or the „Controller”), pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (the „GDPR”), we hereby inform you that:
1. The Controller of your personal data is A+V Sp. z o.o., with its registered office in Wrocław, ul. Sucha 2, 50-086 Wrocław, entered into the Register of Entrepreneurs maintained by the District Court for Wrocław-Fabryczna in Wrocław, 6th Commercial Division of the National Court Register under KRS No. 0000481335, NIP No. 8992747780, REGON No. 022272974.
2. If you have any questions regarding the processing of your personal data, you may contact the Controller by email at: biuro@aplusv.pl or by post at: ul. Sucha 2, 50-086 Wrocław, Poland.
3. Your personal data will be processed:
a) for the purpose of performing a contract with the Contractor or taking steps prior to entering into a contract at the Contractor’s request (Article 6(1)(b) GDPR – with respect to the Contractor; Article 6(1)(f) GDPR – with respect to a person acting on behalf of or for the benefit of the Contractor);
b) for accounting, bookkeeping and financial reporting purposes (Article 6(1)(c) and (f) GDPR);
c) for the fulfilment of other legal obligations imposed on the Controller (Article 6(1)(c) GDPR).
4. Your personal data may also be processed for the purposes of the Controller’s legitimate interests (Article 6(1)(f) GDPR), including:
a) establishing, pursuing and defending legal claims;
b) statistical purposes related to improving operational efficiency, service quality and adapting services to the needs of recipients.
5. As a rule, we process personal data provided directly by you. If you have not provided us with your personal data, we have obtained it from our Contractor or from a person acting on behalf of or for the benefit of our Contractor. We collect personal data only to the extent necessary for entering into and performing a contract. Such data most commonly includes: first name, surname, postal address, email address, telephone number, order-related information and invoicing details. Where a contract is concluded in writing, we may also process your PESEL number or identity card number. In the case of cooperation conducted through an IT system, we may additionally process your username, password and cooperation history.
6. Recipients of your personal data may include:
a) companies within the A+V group;
b) clients of A+V Sp. z o.o. and the A+V group;
c) advisory and auditing service providers;
d) subcontractors and suppliers;
e) providers of IT services and technological solutions;
f) document archiving and destruction service providers;
g) banks and other financial and payment institutions;
h) public authorities receiving data in connection with the Controller’s legal obligations;
i) courier and postal service providers.
7. As a rule, your personal data will not be transferred outside the European Economic Area („EEA”). However, due to the use of subcontractors providing IT support services and IT infrastructure, the Controller may entrust certain tasks to reputable service providers operating outside the EEA, which may result in the transfer of personal data outside the EEA.
8. Recipients located outside the EEA ensure an adequate level of data protection where recognized by a European Commission adequacy decision. Where recipients are located in countries not covered by such decisions, the Controller enters into agreements based on the Standard Contractual Clauses adopted by the European Commission pursuant to Article 46(2)(c) GDPR.
9. A copy of the Standard Contractual Clauses may be obtained by contacting the Controller using the contact details provided above. The safeguards applied by the Controller comply with Chapter V of the GDPR. You may request further information regarding the safeguards used, obtain a copy of such safeguards and information on where they are available.
10. Your personal data will be stored for the period required by applicable law or until the expiration of limitation periods for claims arising from the contract with the Contractor, whichever period is longer.
11. In cases provided for by law, you have the right to:
a) access your personal data and obtain a copy thereof;
b) rectify inaccurate or incomplete personal data;
c) request the erasure of personal data;
d) request the restriction of processing;
e) data portability, where the legal basis for processing is consent (Article 6(1)(a) or Article 9(2)(a) GDPR) or a contract (Article 6(1)(b) GDPR);
f) withdraw consent at any time where consent is the legal basis for processing, without affecting the lawfulness of processing carried out before withdrawal;
g) object to processing where the legal basis for processing is the Controller’s legitimate interest (Article 6(1)(f) GDPR).
12. If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warsaw, Poland.
13. Providing personal data such as your name, surname, contact details, address details, PESEL number or identity card number is necessary for the performance of the contract. Failure to provide such data may result in the inability to perform the contract (applies to persons identified in the contractual parties section).
14. Your personal data will not be subject to profiling or automated decision-making.
Last updated: 1 June 2026