Privacy Policy

Last updated: 10 September 2026

I. General Provisions

This Privacy Policy sets out the rules for the processing of personal data and the use of cookies and similar technologies in connection with the use of the website intaxwise.eu (hereinafter: the “Website”).

Users’ personal data is processed in accordance with applicable law, in particular:

  • Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (“GDPR”);

  • the Polish Act of 10 May 2018 on the Protection of Personal Data;

  • the Polish Electronic Communications Law of 12 July 2024.

The Controller makes every effort to ensure that the scope of personal data processed is adequate, relevant and limited to what is necessary for the purposes for which it is processed.

II. Data Controller

The controller of personal data is:

INTAX WISE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
ul. Chmielna 73B / 14
00-801 Warsaw, Poland
KRS: 0001158608
NIP: 5273153892
REGON: 541014457
e-mail: intaxwise@gmail.com

hereinafter referred to as the “Controller”.

For matters relating to the processing of personal data and the exercise of rights under the GDPR, you may contact the Controller using the e-mail address indicated above.

III. Scope of Personal Data Processed

Depending on how the Website is used, the Controller may process the following categories of personal data:

  1. Data provided through the contact form, in particular:

    • name;

    • e-mail address;

    • telephone number, if voluntarily provided;

    • message content;

    • other data voluntarily provided by the User in the form or in subsequent correspondence.

  2. Technical and usage data related to the use of the Website, in particular:

    • IP address;

    • date and time of using the Website;

    • information about the device, operating system and browser;

    • pages visited;

    • referring page address;

    • information about interactions with the Website;

    • identifiers related to cookies and similar technologies.

  3. Analytics and marketing data, where the User has given the relevant consent to the use of such technologies.
    The Controller does not require Users to provide special categories of personal data referred to in Article 9 GDPR via the Website. Users should not provide such data unless it is necessary to handle their inquiry.

IV. Purposes and Legal Bases for Processing

Personal data may be processed for the following purposes:

  1. Handling inquiries and communication with the User
    Data provided through the contact form or by e-mail may be processed in order to respond to an inquiry, conduct correspondence and provide information about the Controller’s services.
    The legal basis for processing is:

  • Article 6(1)(b) GDPR — where the communication is intended to lead to the conclusion of a contract or relates to actions taken at the User’s request before entering into a contract;

  • Article 6(1)(f) GDPR — the Controller’s legitimate interest in conducting communication, responding to inquiries and handling correspondence — in other cases.

  1. Ensuring the proper operation and security of the Website
    Technical data may be processed in order to ensure the proper functioning of the Website, maintain security, prevent abuse, diagnose errors and protect IT infrastructure.
    The legal basis is Article 6(1)(f) GDPR — the Controller’s legitimate interest in ensuring the security and proper functioning of the Website.

  2. Analytics and statistics
    If the User consents to analytical cookies or similar technologies, data may be processed for the purposes of:

  • analysing how the Website is used;

  • measuring traffic and the popularity of individual pages;

  • analysing traffic sources;

  • measuring User interactions with the Website;

  • improving the Website’s operation, structure and content;

  • preparing aggregated statistics.
    The legal basis for processing personal data is Article 6(1)(a) GDPR — the User’s consent.

  1. Marketing, advertising effectiveness measurement and remarketing
    If the User consents to marketing cookies or similar technologies, data may be used for the purposes of:

  • measuring the effectiveness of advertising campaigns;

  • tracking conversions;

  • creating audience groups;

  • conducting remarketing activities;

  • limiting the number of times advertisements are displayed;

  • tailoring advertisements to the User’s potential interests;

  • analysing the effectiveness of the Controller’s marketing activities.
    The legal basis for processing personal data is Article 6(1)(a) GDPR — the User’s consent.

  1. Establishing, pursuing or defending claims
    Data may also be processed for the purpose of establishing, pursuing or defending claims related to the use of the Website or communication with the Controller.
    The legal basis is Article 6(1)(f) GDPR — the Controller’s legitimate interest in protecting its rights.

V. Voluntary Provision of Data

Providing personal data is voluntary.

However, providing the data necessary to submit the contact form is required in order for the Controller to receive and respond to the inquiry.

Consent to analytical or marketing cookies is voluntary. Refusal to provide such consent should not prevent the use of the basic functions of the Website.

VI. Data Retention Period

Personal data is retained for no longer than necessary for the purposes for which it was collected.
In particular:

  1. data related to an inquiry or correspondence is retained for the period necessary to handle the matter and, where justified, thereafter for the period necessary to protect against possible claims;

  2. data related to the conclusion or performance of a contract may be retained for the duration of the contract and subsequently for the period required under applicable law, including rules relating to limitation periods, tax obligations and accounting obligations;

  3. data processed on the basis of consent may be processed until the consent is withdrawn, provided that withdrawal does not affect the lawfulness of processing carried out before the withdrawal;

  4. data processed on the basis of legitimate interests may be processed until an effective objection is raised or the legitimate interest ceases to exist;

  5. the duration of individual cookies and similar identifiers may vary depending on the type of technology and its provider. Detailed information may be available in the consent management panel or cookie settings available on the Website.

VII. Recipients of Personal Data

Personal data may be disclosed to entities supporting the Controller in operating the Website and conducting its business activities, to the extent necessary for the relevant purpose.
Recipients of personal data may include in particular:

  • hosting and IT infrastructure providers;

  • e-mail service providers;

  • providers of tools used to operate forms and communication;

  • providers of security and Website maintenance services;

  • analytics and statistics providers;

  • advertising and marketing technology providers;

  • entities providing IT, technical, legal or other supporting services to the Controller.
    Depending on the functionalities used and the consents granted by the User, recipients of data may include in particular entities belonging to the following groups:

  • Google, in connection with the use of Google Tag Manager, Google Analytics 4 and other Google services;

  • Meta, where Meta Pixel or other Meta advertising tools are used;

  • LinkedIn, where LinkedIn Insight Tag is used;

  • TikTok, where TikTok Pixel or other TikTok for Business tools are used.
    The scope of data disclosed to individual providers depends on the Website configuration, the type of tool used and the consent given by the User.

VIII. Transfers of Data Outside the European Economic Area

Some technology providers used by the Controller may process personal data outside the European Economic Area, in particular in the United States.
Where personal data is transferred to a country outside the EEA, the Controller and its service providers use mechanisms provided for under the GDPR, in particular:

  • adequacy decisions issued by the European Commission;

  • the EU-U.S. Data Privacy Framework — where the relevant recipient participates in it;

  • Standard Contractual Clauses approved by the European Commission;

  • other lawful mechanisms ensuring an adequate level of data protection.
    Detailed information on the processing of personal data by individual providers can be found in their privacy policies and data protection documentation.

IX. Cookies and Similar Technologies

The Website uses or may use cookies and similar technologies, such as online identifiers, local storage, tags, scripts and pixels.
Cookies may be divided into the following categories:

  1. Necessary
    These are required for the proper functioning of the Website, security, remembering privacy settings or providing functions explicitly requested by the User.
    To the extent that they meet the conditions set out in the Electronic Communications Law, their use does not require the User’s consent.

  2. Analytical
    These allow the Controller to measure Website traffic, analyse how the Website is used and assess the effectiveness of specific functionalities.
    They may only be used after obtaining the User’s appropriate consent.

  3. Marketing
    These may be used to measure campaign effectiveness, track conversions, create audience groups, conduct remarketing and tailor advertisements.
    They may only be used after obtaining the User’s appropriate consent.
    The User may accept all optional technologies, reject them or select individual categories using the consent management mechanism available on the Website.
    Consent may be changed or withdrawn at any time as easily as it was given.
    Changing or withdrawing consent does not affect the lawfulness of earlier processing.
    Independently of the mechanism available on the Website, the User may also manage cookies through the settings of their web browser. Restricting certain cookies may affect the operation of selected Website functions.

X. Google Tag Manager i Google Analytics 4

The Website may use Google Tag Manager, which allows technical management of tags and scripts used on the Website.
Other analytics or marketing tools may be launched through Google Tag Manager, provided that they are activated in accordance with the choices made by the User regarding consent to particular categories of technologies.
The Website may also use Google Analytics 4, an analytics tool provided by Google, in order to analyse how the Website is used, prepare statistics and measure the effectiveness of the Controller’s activities.
Depending on its configuration, Google Analytics may process, among other things:

  • pages visited;

  • traffic source;

  • time and manner of using the Website;

  • events and interactions on the Website;

  • device and browser information;

  • approximate location;

  • online identifiers and cookies.
    The Controller does not intend to send data such as name and surname, e-mail address, telephone number or contact form content to Google Analytics.
    For Users for whom consent is required, the relevant Google tool settings may be adjusted based on the User’s choices through consent management mechanisms, including solutions such as Consent Mode.

XI. Meta, LinkedIn and TikTok Advertising Tools

If the Controller implements the relevant tools and the User consents to marketing tracking technologies, the Website may use, among other things:

  • Meta Pixel — a tool provided by Meta;

  • LinkedIn Insight Tag — a tool provided by LinkedIn;

  • TikTok Pixel — a tool provided as part of TikTok for Business.

These technologies may enable, among other things:

  • determining whether the User visited a specific page;

  • recording certain interactions with the Website;

  • measuring conversions;

  • creating aggregated advertising statistics;

  • building audience groups;

  • conducting remarketing;

  • limiting the number of times the same advertisement is displayed;

  • evaluating the effectiveness of advertising campaigns.

Providers of these technologies may use their own identifiers and combine information about a visit to the Website with other information available in their systems, in accordance with their own privacy policies and the User’s account settings on the relevant platform.

The Controller does not intend to provide these providers with the content of contact forms or other data that is not necessary for analytical or marketing purposes.

XII. Consent Management

During the first visit to the Website, the User may be given the opportunity to make choices regarding the use of optional cookies and similar technologies.

Until the appropriate consent has been obtained, technologies requiring consent should not be used to the extent that consent is required under applicable law.

The User should be able to:

  • accept all optional categories;

  • reject all optional categories;

  • make a more detailed selection;

  • subsequently change or withdraw consent.

Information about the current method of consent management may be available in the privacy settings panel or cookie settings available on the Website.

XIII. Rights of Data Subjects

Under the conditions set out in the GDPR, the User may have the right to:

  • access their personal data;

  • receive a copy of the data;

  • rectify inaccurate data;

  • erase data;

  • restrict processing;

  • data portability;

  • object to processing based on Article 6(1)(f) GDPR;

  • withdraw consent at any time where processing is based on consent;

  • lodge a complaint with a supervisory authority.

Requests relating to the exercise of these rights may be sent to:

intaxwise@gmail.com

The Controller will respond to the request without undue delay and no later than within the time limits provided for under the GDPR.

If the User believes that their personal data is being processed unlawfully, they have the right to lodge a complaint with:

the President of the Personal Data Protection Office (PUODO).

XIV. Automated Decision-Making and Profiling

The Controller does not make decisions concerning Users which produce legal effects or similarly significantly affect them solely on the basis of automated processing of personal data within the meaning of Article 22 GDPR.

Where advertising technologies are used — after obtaining the appropriate consent — providers of such technologies may use automated mechanisms, including mechanisms for creating audience groups or tailoring advertisements.

Such activities do not mean that the Controller makes decisions concerning the User which produce legal effects or similarly significantly affect the User.

XV. Data Security

The Controller applies appropriate technical and organisational measures designed to protect personal data against loss, unauthorised access, disclosure, alteration or destruction, taking into account the nature, scope, context and purposes of processing as well as the risk to the rights and freedoms of natural persons.

XVI. Changes to the Privacy Policy

This Privacy Policy may be updated periodically, in particular in the event of:

  • changes in applicable law;

  • changes to the operation of the Website;

  • implementation of new analytics, marketing or technological tools;

  • changes concerning service providers used by the Controller.

The current version of the Privacy Policy is published on the Website together with the date of the latest update.