Privacy Policy
Last updated: 2026-06-08
Personal Data Protection
The protection of personal data is one of the key tasks carried out by KFE Holding Sp. z o.o., with its registered office in Warsaw (71 Czerniakowska Street, 00-718 Warsaw, KRS number 0000255059). We will keep you informed of important changes in the law, including the rights of data subjects. In 2016, the European Parliament adopted Regulation 2016/679 on the protection of personal data, known as the GDPR. It has applied in the European Union since 25 May 2018.
Processing of Personal Data
Frequently asked questions arising from the information obligation:
What is the GDPR?
GDPR stands for the General Data Protection Regulation. Among other things, the GDPR introduces new rights for individuals whose data is processed. One of the obligations of controllers that process personal data is to inform individuals about the processing of their personal data.
Can you access your data?
Yes. You may have full access to your personal data. You may also manage your consents to data processing to the extent that personal data is collected on their basis.
Who is the controller of your personal data?
The controller of your personal data is KFE Holding Sp. z o.o., with its registered office in Warsaw (71 Czerniakowska Street, 00-718 Warsaw, KRS number 0000255059). You may identify us with the brands we own, namely: Batieu Plus, Batieu, Legal Building. For matters concerning personal data protection, you may contact the Controller by email at rodo@batieu.plus, by telephone at +48 22 465 90 09, or contact the Data Protection Officer.
How can you contact the Data Protection Officer?
You may contact the Data Protection Officer appointed by the Controller by email at rodo@batieu.plus.
For what purpose do we process your personal data?
We process all personal data for purposes related to cooperation, maintaining mutual relations or the intention to establish cooperation in the future. In addition, we may process data for marketing and informational purposes, for example to provide information about our company's current activities through the newsletter service.
The legal basis for processing your data is:
- Consent (Article 6(1)(a) GDPR) - where we have not yet established a business relationship and wish to inform you about our activities or offer;
- A legal obligation (Article 6(1)(c) GDPR) - where you submit a complaint concerning services provided by our company or where legislation, in particular tax law, requires us to retain information for evidential purposes;
- A contract (Article 6(1)(b) GDPR) - where we have established cooperation and under a personal data processing agreement, for example where we process your employees' data when this is necessary for the proper performance of a service;
- Our legitimate interest (Article 6(1)(f) GDPR):
- a) where you have already become our client and, as part of our ongoing cooperation, we still wish to keep you informed about our company's activities and offer (marketing of our own products or services),
- b) where our cooperation has ended, we will continue to retain certain information for the possible establishment, defence or pursuit of mutual claims (archival purposes).
Who receives your data?
Your personal data may be transferred to entities to which we entrust personal data processing under agreements and to entities authorised to obtain personal data under the law. Personal data processed through our website is entrusted to the entity providing hosting services to us. We will also disclose your personal data to our authorised employees and associates so that they can perform their duties.
How long will we retain your personal data?
We will retain your personal data for:
- the period specified by tax law (i.e. for a maximum of 5 years from the end of the year in which the business event occurred);
- or until you request deletion of the data (where this right can be exercised effectively);
- in other situations, no longer than is necessary to achieve the intended purpose.
What rights do you have?
In connection with our processing of personal data, you have the right to:
- access your data (Article 15 GDPR),
- rectify your data (Article 16 GDPR),
- erase your data (Article 17 GDPR),
- restrict the processing of your data (Article 18 GDPR),
- data portability (Article 20 GDPR),
- object to the processing of your data (Article 21 GDPR),
- not be subject to decisions based on automated processing, including profiling (Article 22 GDPR).
With whom can you lodge a complaint?
If you believe that the Controller's processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office.
Is providing personal data voluntary or mandatory?
Providing your data is voluntary, but necessary for the provision of services. Failure to provide data may often make it difficult or completely impossible to handle matters in accordance with your expectations. Where data is processed under Article 6(1)(c) GDPR, i.e. a legal obligation, providing the data is mandatory.
Where did we obtain your personal data?
We obtained your personal data directly from you (in connection with concluded agreements) or from publicly available sources such as business registers: CEIDG or KRS. The data obtained in this way includes the company name, basic address and contact details, and the nature of the business activity.
Will your personal data be processed by automated means?
Your personal data will not be subject to decisions made by automated means, including profiling.
Rules for Handling Requests Concerning the Exercise of Client Rights in Relation to Personal Data
An individual Client and an institutional Client (a natural person conducting business activity, a civil-law partnership, a professional partnership or a registered partnership) is entitled to submit a request concerning the exercise of rights arising from the GDPR, and the Controller is obliged to consider it in accordance with the following rules:
- The Client may submit a request to the Controller at any time, starting from 25 May 2018.
- The Controller considers a request submitted by the Client or a person acting on their behalf:
- within one month of receiving the request,
- where the request or the number of the Client's requests is complex, the response period may be extended by a further two months; within one month of receiving the request, the Data Protection Officer will inform the Client in writing of the extension and state the reasons for the delay,
- where no action is taken in response to the Client's request, the Data Protection Officer will promptly - no later than within one month of receiving the request - inform the Client in writing of the reasons for not taking action and of the possibility of lodging a complaint with the supervisory authority and seeking a judicial remedy.
- The Client may submit a request to exercise their rights and freedoms. The Client's request should include address details and the type and details of the request.
- The Client may submit a completed request at the Controller's registered office or send it by email to: rodo@batieu.plus
- The period for considering the request begins on the date the Controller receives the Client's request.
- The Client is entitled to lodge a complaint if the Controller fails to meet the response deadline.
- On behalf of the Controller, the Data Protection Officer provides the Client with a written response to the submitted request by registered mail with acknowledgement of receipt or by email, if this is in accordance with the Client's wishes.
- The Controller does not charge any fees or commissions for accepting and considering the request.
If you have any questions concerning your request, please contact the Data Protection Officer by email at: rodo@batieu.plus
Legal basis: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (Official Journal of the European Union L 119 of 4 May 2016)
Cookie Policy
Effective date: 12 August 2026 Last updated: 12 August 2026
What are cookies?
This Cookie Policy explains what cookies are, how we use them, the types of cookies we use (i.e. what information we collect through them and how that information is used), and how to manage your cookie settings.
Cookies are small text files used to store small amounts of information. They are saved on your device when the website is loaded in your browser. They help ensure that the website functions correctly, improve security and user experience, and analyse performance to determine what works well and what needs improvement.
How do we use cookies?
Like most online services, our website uses both first-party and third-party cookies for various purposes. First-party cookies are primarily necessary for the website to function correctly and do not collect data that directly identifies the user.
Third-party cookies used on our website primarily help us understand how the website performs, track how you use it, maintain the security of our services, display relevant advertisements and improve the overall user experience, while also making your future interactions with our website faster.
Types of cookies we use
Necessary
Necessary cookies are required for the basic functions of this website, such as secure login or remembering consent preferences. These cookies do not store data that directly identifies the user.
| Cookie | Retention period | Description |
|---|---|---|
cookieyes-* |
1 year | CookieYes sets this cookie to manage user consent. |
Uncategorised
Other uncategorised cookies are currently being analysed and have not yet been assigned to any category.
| Cookie | Retention period | Description |
|---|---|---|
NEXT_LOCALE |
session | A description is not currently available. |
Managing cookie preferences
Consent preferences
You can change your cookie settings at any time by clicking the Consent Preferences button above. This will allow you to display the cookie consent banner again and update your preferences or withdraw your consent immediately.
In addition, different browsers offer different ways to block and delete cookies used by websites. You can change your browser settings to block or delete cookies. Links to help documentation on managing and deleting cookies in the most popular browsers are provided below.
If you use a different web browser, please consult its official help documentation.