PRIVACY POLICY

1. General provisions

1. 1.1. This Privacy Policy sets out the rules for processing and protecting the personal data of Users of the website operated by Argentarii Sp. z o.o., with its registered office at ul. Modlińska 247, 03-120 Warsaw, Poland, entered into the National Court Register, Tax ID (NIP): 5242973252, hereinafter referred to as the “Controller”.

2. 1.2. The Controller can be contacted at the following e-mail address: cookies@agkantor.pl.

3. 1.3. The Controller exercises the utmost care to ensure the protection of Users’ privacy and the processing of their data in accordance with applicable laws, in particular the GDPR and the laws on data protection and electronic services.

2. Scope of processed data

The Controller may process the following personal data of Users:

• first name and last name (if provided in the contact form),
• e-mail address,
• telephone number,
• data provided in the exchange rate reservation form (e-mail address, telephone number, amount and currency of the planned exchange),
• e-mail address and the voluntarily indicated source of information about the exchange office, if left on the tablet available at the exchange office,
• IP address,
• device, browser, and operating system data,
• data obtained via cookies, Google Tag Manager, and Meta Pixel,
• information voluntarily provided by the User in the content of a contact message.

In addition, when the exchange-rate reservation form available on the website is used, the Administrator processes: the e-mail address, phone number and details of the planned exchange (currencies, amounts, reserved rate).

If the User leaves an e-mail address on the tablet available at the exchange office, the Administrator processes the e-mail address and the voluntarily indicated source from which the User learned about the exchange office.

3. Purposes of processing personal data

Data is processed for the following purposes:

• enabling contact via the contact form,
• responding to User inquiries,
• handling exchange rate reservations – confirming the reservation and contacting the User on matters related to it,
• analysis of website traffic and optimization of its operation (Google Tag Manager and Meta Pixel),
• the Controller’s marketing activities (e.g., remarketing),
• ensuring the security and reliability of the website.

Data from the exchange-rate reservation form are processed in order to handle the reservation and to contact the User about it. The e-mail address provided in the reservation form (with separate, voluntary consent) or left on the tablet at the exchange office is processed for the Administrator’s marketing purposes, including by creating ad audiences in Google Ads and Meta tools (display of tailored ads). Consent may be withdrawn at any time by contacting the Administrator.

Data from the reservation form are processed in order to handle the reservation and to contact the User about it. The e-mail address provided in the reservation form (with separate, voluntary consent) or left on the in-store tablet is processed for the Administrator’s marketing purposes, including the creation of ad audiences in Google Ads and Meta tools (display of tailored ads). Consent may be withdrawn at any time by contacting the Administrator.

4. Legal basis for data processing

• Article 6(1)(a) GDPR – the consent of the data subject,
• Article 6(1)(b) GDPR – necessity for taking steps prior to entering into a contract or the performance of a contract,
• Article 6(1)(f) GDPR – the legitimate interests of the Controller (analytics, marketing, security).

5. Recipients of data

Data may be shared with:

• entities processing data on behalf of the Controller (hosting, IT, mailing systems),
• providers of analytical and advertising tools: Google Ireland Limited, Meta Platforms Ireland Limited,
• public authorities only when required by law.

Data may be transferred outside the EEA in connection with the use of Google and Meta tools under standard contractual clauses.

6. Data retention period

Data will be stored:

• for the period necessary to achieve the processing purpose,
• until consent is withdrawn (where processing is based on consent),
• for the period necessary to pursue claims or defend the Controller’s rights,
• cookies and analytical data – in accordance with browser settings or up to 24 months.

7. User rights

The User has the right to:

• access their data,
• rectify data,
• erasure of data (“right to be forgotten”),
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the President of the Personal Data Protection Office (UODO).

To exercise these rights, please contact us at: cookies@agkantor.pl.

8. Cookies and tracking technologies

1. 8.1. The website uses cookies to ensure proper operation, personalize content, analyze traffic, and carry out marketing activities.
2. 8.2. The User may change cookie settings in the browser, including blocking their storage.
3. 8.3. Restricting cookies may affect the functionality of the website.
4. 8.4. The website uses Google Tag Manager, Google Analytics, and Meta Pixel, which collect anonymous statistical data.

9. Data security

The Controller applies appropriate technical and organizational measures to protect data against unauthorized access, loss, or disclosure. Access to data is limited to authorized persons bound by confidentiality obligations.

10. Contact with the Controller

For matters related to the processing of personal data, please contact:

cookies@agkantor.pl
Argentarii Sp. z o.o., ul. Modlińska 247, 03-120 Warsaw, Poland

11. Changes to the Privacy Policy

The Controller reserves the right to amend the Privacy Policy. The amended version will be published on the website and will take effect upon publication.