MIRITSOFTWARE HOUSE

MIRIT SOFTWARE HOUSE

Privacy Policy

Last updated: 06.11.2026

This Privacy Policy explains how we collect, use and protect personal data in accordance with Regulation (EU) 2016/679 (GDPR) and the Polish Act on the Protection of Personal Data of 10 May 2018.

1. Data controller

  • The controller of your personal data is MIRIT SOFTWARE HOUSE Sp. z o.o., ul. Edwarda Horoszkiewicza 1, 63-300 Pleszew, KRS 0000996483, NIP 6080121713, REGON 523373992.
  • Contact in data protection matters: info@mirit-soft.com, phone +48 62 768 81 90.

2. What data we process

  • Data provided in the contact form: name, email address, phone number, company name and message content.
  • Data required to conclude and perform contracts: company details, tax identification numbers, billing and payment data.
  • Data required for AML/KYC verification: identity of representatives and beneficial owners, as described in our AML Policy.
  • Technical data: IP address, browser type, pages visited and cookie identifiers, subject to your cookie preferences.

3. Purposes and legal bases

  • Responding to inquiries and preparing offers — Art. 6(1)(b) and (f) GDPR.
  • Performing contracts and providing services — Art. 6(1)(b) GDPR.
  • Fulfilling legal obligations (accounting, tax, anti-money laundering) — Art. 6(1)(c) GDPR.
  • Establishing, pursuing or defending claims and ensuring IT security — Art. 6(1)(f) GDPR.
  • Analytics and marketing cookies — your consent, Art. 6(1)(a) GDPR.

4. Retention period

  • Inquiry data — up to 12 months after the last contact, unless a contract is concluded.
  • Contract and accounting data — 5 years from the end of the calendar year in which the tax obligation arose.
  • AML documentation — 5 years from the end of the business relationship, as required by the AML Act.
  • Data processed on the basis of consent — until consent is withdrawn.

5. Recipients

  • Hosting, cloud and IT service providers, accounting and legal advisors, banks and payment providers — only to the extent necessary and on the basis of data processing agreements.
  • Public authorities, where required by law (e.g. tax authorities, the General Inspector of Financial Information).

6. Transfers outside the EEA

  • Where a provider is located outside the European Economic Area, we transfer data only on the basis of an adequacy decision or the European Commission's Standard Contractual Clauses.

7. Your rights

  • You have the right to access, rectify, erase and restrict processing of your data, the right to data portability, the right to object and the right to withdraw consent at any time without affecting the lawfulness of prior processing.
  • You may lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

8. Voluntary provision and automated decisions

  • Providing data is voluntary but necessary to respond to an inquiry or conclude a contract. We do not make decisions based solely on automated processing, including profiling.

9. Security

  • We use encryption (TLS), access control, regular backups and staff confidentiality obligations to protect personal data.