← Back to homepage

Privacy Policy

Last updated: January 2026

1. Data Controller

The controller of your personal data is Kantor Elado, located at ul. Sławkowska 16, 31-014 Kraków, Poland (hereinafter: "Exchange", "we"). You can contact us at [email protected] or by phone: +48 691 763 473.

2. Data we collect

Depending on the nature of the interaction, we process the following data:

  • Identity data (name, ID document number, PESEL, date of birth) — collected for transactions subject to Anti-Money Laundering (AML) requirements;
  • Contact data (phone number) — voluntarily provided to book an exchange rate or confirm a transaction;
  • Technical data (IP address, browser data, session cookies) — collected automatically when using the website.

3. Purpose and legal basis of processing

  • Currency exchange transactions — Art. 6(1)(b) GDPR (performance of a contract) and Art. 6(1)(c) (legal obligation under AML regulations);
  • Phone contact and rate reservation — Art. 6(1)(b) GDPR (pre-contractual measures);
  • Website operation — Art. 6(1)(f) GDPR (legitimate interest of the controller — ensuring proper functioning of the service).

4. Retention periods

  • Transaction data (AML) — 5 years from the date of the transaction, as required by AML regulations;
  • Contact data — until the reservation is fulfilled or consent is withdrawn;
  • Technical data (session cookies) — for the duration of the browser session or until cookies are deleted by the user.

5. Recipients of data

Your data may be disclosed only to:

  • state authorities (General Inspector of Financial Information, law enforcement agencies) — to the extent required by AML law;
  • IT and hosting service providers — only to the extent necessary to maintain the website.

Data is not transferred to third countries or international organisations outside the European Economic Area.

6. Your rights

Under GDPR, you have the following rights:

  • Right of access to your data (Art. 15 GDPR);
  • Right to rectification of inaccurate or incomplete data (Art. 16 GDPR);
  • Right to erasure ("right to be forgotten") — in cases specified in Art. 17 GDPR;
  • Right to restriction of processing (Art. 18 GDPR);
  • Right to data portability (Art. 20 GDPR);
  • Right to object to processing based on legitimate interest (Art. 21 GDPR).

To exercise these rights, please contact us: [email protected].

7. Right to lodge a complaint

You have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.

8. Cookies

The website kantorelado.pl uses only technically necessary session cookies to remember the selected language. We do not use cookies for analytics, tracking or advertising purposes. We do not use Google Analytics or any third-party tracking tools.

9. Changes to this policy

We reserve the right to update this privacy policy. For significant changes, we will update the date shown at the top of this document. Continued use of the website after changes constitutes acceptance of the updated policy.

10. Contact regarding data protection

Kantor Elado
ul. Sławkowska 16, 31-014 Kraków, Poland
Email: [email protected]
Phone: +48 691 763 473