Privacy policy

AIB S.A. is the data controller within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR). All questions regarding the processing of personal data should be directed to: biuro@aib.pl.

We process your personal data exclusively for specified, legitimate purposes:

• Performance of contracts and enquiries — processing is necessary for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract (Art. 6(1)(b) GDPR).
• Commercial and technical communications — responding to messages sent via the contact form, email or telephone (Art. 6(1)(b) or (f) GDPR).
• Direct marketing — sending information about AIB S.A. products and offers on the basis of consent or the legitimate interest of the controller (Art. 6(1)(a) or (f) GDPR).
• Fulfilment of legal obligations — issuing invoices, maintaining accounting records and meeting tax requirements (Art. 6(1)(c) GDPR).
• Legitimate interest of the controller — analysis of website traffic, ensuring system security, and the pursuit or defence of claims (Art. 6(1)(f) GDPR).

Depending on the purpose, we process the following categories of data:

• Identification data: first and last name, company name, position.
• Contact data: email address, telephone number, postal address.
• Technical data: IP address, browser type, operating system, time of visit (collected automatically via cookies and the server).
• Data provided voluntarily in the content of messages or forms.

We do not process special categories of personal data (so-called sensitive data) within the meaning of Art. 9 GDPR.

We retain personal data for the period necessary to fulfil the purposes for which it was collected:

• Data for contract performance — for the duration of the contract and for the legally required period after its termination (as a rule, 5 years from the end of the tax year in which the contract expired).
• Data from contact forms — until the end of correspondence or the provision of a response, for no longer than 3 years.
• Marketing data — until consent is withdrawn or an effective objection is raised.
• Cookie data — in accordance with browser settings or until deleted (see § 6 for details).

Under the GDPR, you are entitled to the following rights:

• Right of access — you may obtain information on whether and what data we process (Art. 15 GDPR).
• Right to rectification — you may request the correction of inaccurate data or the completion of incomplete data (Art. 16 GDPR).
• Right to erasure — you may request the erasure of data when it is no longer necessary for the purposes for which it was collected (Art. 17 GDPR).
• Right to restriction of processing — you may request the restriction of processing in cases specified in Art. 18 GDPR.
• Right to data portability — you may receive your data in a structured, machine-readable format (Art. 20 GDPR).
• Right to object — you may object to processing based on the legitimate interest of the controller (Art. 21 GDPR).
• Right to withdraw consent — you may withdraw consent at any time without affecting the lawfulness of processing carried out prior to withdrawal.
• Right to lodge a complaint — you have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.

To exercise your rights, please contact us at: biuro@aib.pl. We will respond without undue delay, and no later than one month from receiving your request.

Our website uses cookies — small text files stored on the user’s device to ensure the proper functioning of the service and to analyse traffic.

We use the following categories of cookies:

• Essential — required for the proper functioning of the website. They cannot be disabled, as the site will not function correctly without them.
• Analytical — allow us to measure the number of visits and traffic sources (e.g. Google Analytics), enabling us to improve the site. Data is collected anonymously.
• Preference — remember settings chosen by the user, such as language or region.

You can manage cookies through your browser settings. However, deleting or blocking cookies may limit the functionality of the service.

Your personal data may be transferred to the following categories of recipients:

• IT and hosting service providers — solely to the extent necessary for the provision of technical services.
• Accounting and legal service providers — to the extent required by law.
• Public authorities — only in cases specified by law (e.g. tax authorities, law enforcement).

As a rule, data is processed within the European Economic Area (EEA). Where data is transferred outside the EEA, we ensure an adequate level of protection, including through the use of standard contractual clauses approved by the European Commission.

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure. These measures include, in particular, data transmission encryption (SSL/TLS), access controls and regular security audits.

If you have questions regarding the processing of your personal data or wish to exercise any of your rights, please contact us:

We endeavour to respond to your enquiry within 30 days of receipt.