Legal

Privacy Policy

This policy explains what personal data Payroll Poland collects, why we collect it, who we share it with and the rights you have under the GDPR and the CCPA/CPRA. Last updated: 1 January 2026.

1. Who we are

Payroll Poland ("we", "us") operates payrollpoland.com as an independent lead generation platform for payroll services in Poland. We are the data controller for the personal data collected through this website. Contact us via the form on our homepage for any privacy request.

2. Data we collect

Contact data you submit voluntarily: first name, last name, company, email address, and optionally phone number and the content of your message. Technical data: IP address, browser type, device type, referring page and pages viewed, collected through cookies and server logs. We do not knowingly collect data from children and we do not collect special categories of personal data.

3. How we use your data

To respond to your enquiry and prepare a payroll proposal, to deliver our payroll services, to maintain and secure the website, and to measure aggregate site usage. We do not use your data for automated decision-making or profiling.

4. Legal bases (GDPR)

Consent (Article 6(1)(a)) for non-essential cookies and for processing your enquiry; steps taken at your request prior to entering into a contract (Article 6(1)(b)); and our legitimate interest (Article 6(1)(f)) in operating and securing the website and responding to business enquiries.

5. Sharing your data

Enquiries submitted through our forms are handled directly by the Payroll Poland team, so that we can prepare and deliver a proposal and contact you. We also use hosting, email and analytics providers acting as processors on our instructions. We never sell your personal data.

6. International transfers

Payroll Poland and some of our providers are located outside the European Economic Area. Where personal data is transferred outside the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses or an adequacy decision, together with appropriate supplementary safeguards.

7. Retention

Enquiry data is retained for up to 24 months after our last contact with you, unless a longer period is required for legal or accounting purposes. Cookie and analytics data is retained for a maximum of 14 months. You can ask us to delete your data sooner at any time.

8. Your GDPR rights

You have the right to access, rectify, erase, restrict or object to the processing of your personal data, the right to data portability, and the right to withdraw consent at any time without affecting processing carried out before withdrawal. You may also lodge a complaint with your local supervisory authority. We respond to requests within one month.

9. Your California (CCPA/CPRA) rights

California residents may request disclosure of the categories and specific pieces of personal information collected, request deletion or correction, and limit the use of sensitive personal information. We do not sell or share personal information for cross-context behavioural advertising, so no "Do Not Sell or Share My Personal Information" opt-out is required. We will not discriminate against you for exercising these rights. Requests can be made through our contact form and may be submitted by an authorised agent.

10. Cookies

We use essential cookies required to operate the site and, with your consent, analytics cookies to understand how the site is used. You choose your preference in the cookie banner when you first visit and can change it at any time by clearing your browser storage for this site.

11. Security and changes

We use encryption in transit, access controls and provider due diligence to protect your data. No method of transmission is completely secure. We may update this policy from time to time; the revision date at the top of this page shows when it last changed.