GDPR Information Clause (Art. 13 and Art. 14)
Last updated: January 2025
1. Data Controller
The Data Controller is MICODE SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ (MICODE Ltd.), ul. Jana Heweliusza 11/811, 80-890 Gdańsk, Poland, KRS: 0001108050, NIP: 5833510147, REGON: 528740633. Contact: perevertkinma@gmail.com.
2. Purposes of Processing
We process your personal data for the following purposes: (a) providing AI-assisted accounting and bookkeeping services, including account management and wFirma integration; (b) payment processing and subscription management; (c) user communication — responding to queries and support requests; (d) handling complaints and pursuing claims; (e) compliance with legal requirements arising from tax and accounting regulations; (f) ensuring service security and preventing abuse.
3. Legal Bases for Processing
Art. 6(1)(b) GDPR — processing necessary to perform the electronic services contract or to take pre-contractual steps; Art. 6(1)(c) GDPR — compliance with the Controller's legal obligations (tax, accounting, AML); Art. 6(1)(f) GDPR — legitimate interests of the Controller: IT security, fraud prevention, claims; Art. 6(1)(a) GDPR — user consent (marketing, analytical cookies, newsletter).
4. Data Recipients
Your data may be disclosed to the following categories of recipients: (a) IT service providers — hosting, cloud infrastructure, system maintenance; (b) AI service providers (OpenAI) — solely to the extent necessary to provide AI Assistant functionality; (c) wFirma system — for accounting data integration based on your authorization; (d) data processors acting on our behalf — under data processing agreements; (e) public authorities — in cases provided by law (courts, law enforcement, tax authorities).
5. Retention Periods
We process data for the following periods: (a) account data and conversation history — for the duration of the contract and 3 years after termination (civil claims limitation); (b) financial data and accounting documents — 5 years from the end of the tax year in which the document was created (Accounting Act); (c) system and security logs — 12 months; (d) consent-based data — until consent is withdrawn; (e) tax-required data — for periods specified in the Tax Ordinance.
6. Your Rights
Under GDPR you have the following rights: right of access (Art. 15 GDPR) — you may request a copy of your data; right to rectification (Art. 16 GDPR) — you may request correction or completion of inaccurate/incomplete data; right to erasure (Art. 17 GDPR) — in specific cases you may request deletion; right to restriction of processing (Art. 18 GDPR); right to data portability (Art. 20 GDPR) — receive your data in a structured format; right to object (Art. 21 GDPR) — to processing based on legitimate interest; right to withdraw consent (Art. 7(3) GDPR) — without affecting prior lawful processing. To exercise your rights: contact via in-app chat or Administrator's e-mail.
7. Right to Lodge a Complaint
If you believe the processing of your personal data violates GDPR or other data protection regulations, you have the right to lodge a complaint with the supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (UODO): address: ul. Stawki 2, 00-193 Warsaw; phone: +48 606-950-000; e-mail: kancelaria@uodo.gov.pl; website: https://uodo.gov.pl.
8. Voluntary Nature of Data Provision and Automated Decision-Making
Providing personal data is voluntary but necessary to use the Service — failure to provide required registration data prevents account creation. Optional data (AI provider API keys, wFirma credentials) is only required to use additional features. We do not use automated decision-making, including profiling, that would produce legal effects or similarly significantly affect you.