This notice is for people whose personal data is held in the Aminer database because it was disclosed in public registers. This applies in particular to sole traders registered in CEIDG and to board members, partners and commercial proxies of entities registered in the KRS. It fulfils our obligation under Art. 14 GDPR. The Polish version prevails in case of discrepancies.
1. Controller
The controller is Aminer sp. z o.o., Dawidy Bankowe, ul. Widok 8, 05-090 Raszyn, Poland, KRS 0000844699. For personal data matters, write to rodo@aminer.pl.
2. Where the data comes from
The data comes from publicly available sources:
- the National Official Business Register (REGON) kept by Statistics Poland,
- the Central Register and Information on Economic Activity (CEIDG),
- the National Court Register (KRS), including the Repository of Financial Documents,
- the Court and Commercial Gazette (Monitor Sądowy i Gospodarczy),
- official websites of businesses.
3. What data we process
- first name and surname,
- the function held, such as board member, commercial proxy or partner,
- business data disclosed in the register: name, address, tax ID (NIP), REGON, PKD activity code, start and end dates of the business,
- data of people who signed financial statements, to the extent disclosed in the statement.
4. Purposes and legal basis
We process the data on the basis of our legitimate interest (Art. 6(1)(f) GDPR), namely:
- statistical and market analysis of Polish businesses,
- developing, calibrating and validating credit risk models and industry benchmarks,
- providing consulting services that use these analyses,
- establishing, pursuing and defending claims.
We deliver analysis results to clients in aggregated form, without personal data. We do not take decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.
5. Recipients
We do not sell personal data from the database or share it with clients. Only our IT service providers, such as hosting and backup providers, may have access to it, acting on our instructions under a data processing agreement.
6. Transfers outside the EEA
We do not transfer this data outside the European Economic Area.
7. Retention
We keep the data for as long as it is needed for analytical purposes, including building the time series used in risk models. At least once a year we review the database and delete or anonymise data that is no longer needed.
8. Your rights
You have the right to object to the processing of your data at any time (Art. 21 GDPR). After an objection we will stop processing the data unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or the data is needed to establish, pursue or defend claims.
You also have the right to access, rectify and erase your data, to restrict processing and to lodge a complaint with the President of the Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warsaw, Poland).
Write to rodo@aminer.pl. To find your data, we may ask for the NIP, REGON or KRS number of the entity you are associated with.