Skip to content

Autenti’s Partner Programme

Information clause


Information obligation pursuant to Article 13 of the GDPR

The personal data controller is Autenti spółka z ograniczoną odpowiedzialnością, with its registered office in Poznań, ul. Święty Marcin 29/8, entered into the register of entrepreneurs kept by the District Court Poznań - Nowe Miasto and Wilda in Poznań under KRS number: 0000436998 (hereinafter "Autenti") - operator of the Internet service provided under the name "Autenti" - an online platform available at (hereinafter "Autenti Platform").

The personal data that Autenti processes may come directly from the Customer or Autenti Partner of another entity contacting Autenti, acting on behalf of the Affiliate, or from publicly available sources - in particular, the National Court Register and the Court and Economic Monitor.

Categories of personal data of persons associated with commercial law companies or other entities (e.g., members of bodies of these entities), including beneficial owners, are the same as categories derived from publicly available sources (e.g., the National Court Register) or categories provided by an Autenti customer or contractor or by another entity contacting Autenti.

What is the purpose and legal basis for the processing of personal data by Autenti?

Autenti processes personal data for the following reasons:

  1. Undertaking contact and concluding or performing a contract between Autenti and an entity with which the individual is affiliated or on whose behalf they are acting, as well as for the verification of that entity (e.g., the Client) and ongoing contact with that entity - (Article 6(1)(b) and (f) of the GDPR);

  2. Performing activities resulting from generally applicable provisions of law in connection with conducting business activity - in particular, in connection with the fulfilment of obligations arising from tax and accounting regulations, as well as regulations governing the conduct of proceedings by authorised bodies - (Article 6(1)(c) of the GDPR);

  3. Pursuing or securing claims or defending against it - (Article 6(1)(f) of the GDPR);

  4. Archival (evidence) consisting of securing information in the event of the need to prove facts or demonstrate the fulfilment of an obligation incumbent on Autenti - (Article 6(1)(f) of the GDPR).

Rights against Autenti with respect to the processed data

Pursuant to the GDPR, a natural person has the right to:

  • access to the content of their data and the right to rectify it;

  • deletion;

  • processing restrictions;

  • data portability;

  • object to data processing based on Autenti's legitimate interest or to processing for direct marketing purposes;

  • the right to withdraw the consent given to us at any time without affecting the lawfulness of the previous processing (if the processing is based on consent);

  • lodge a complaint with the supervisory authority when you consider that the processing of your personal data violates the provisions of the GDPR.

If you have any questions, want to exercise the above rights or have any other doubts, please contact the Data Protection Officer. The data can be found below.

Who do we share personal data with?

Personal data may be shared with the following entities:

  1. Public authorities, institutions or third parties authorised to request access or receive personal data based on applicable law;

  2. Entities to which Autenti entrusted the processing of personal data or made such data available based on concluded contracts (e.g., IT service providers) or technical services providers (e.g., hosting companies), debt collection companies, consulting and auditing companies, law firms, companies providing postal or courier services, and accounting offices.

How long do we keep personal data?

Personal data will be stored for the period necessary to establish cooperation and then for the duration of the contract and after its expiry, depending on the purpose for which the data is processed. The period for which personal data will be kept is calculated based on the following criteria:

  • accounting, for a period of 5 years from the beginning of the year following the financial year in which operations, transactions or proceedings related to the concluded contract were finally completed, repaid, settled or expired;

  • tax, for a period of 5 years, counting from the end of the calendar year in which the tax obligation arising from the settlement of the concluded contract arose;

  • in the scope of Autenti's performance of activities resulting from generally applicable legal regulations - for the period resulting from these regulations;

  • in the scope of fulfilling Autenti's legitimate interests constituting the basis for this processing for the period necessary to fulfil this purpose or until an objection to such processing is raised, unless there are legally justified grounds for further data processing by Autenti;

  • in the scope of establishing and pursuing own claims or defending against reported claims - until the statute of limitations for potential claims arising from the contract or other title.

Your personal data will be processed in the IT environment, which means that it may also be temporarily stored and processed to ensure the security and proper functioning of IT systems (e.g., in connection with making backup copies, testing changes in IT systems, detecting irregularities or protecting against abuses and attacks).

Do we transfer data to countries outside the European Economic Area?

Your personal data may be transferred outside the European Economic Area (EEA) to entities that meet an adequate level of protection through:

  1. Cooperation with processors of personal data in countries for which a relevant decision of the European Commission has been issued;

  2. The use of standard contractual clauses issued by the European Commission;

  3. Application of binding corporate rules approved by the relevant supervisory authority;

  4. Other safeguards that meet the appropriate degree of protection based on the relevant legal safeguards.

How long do we keep your personal data?

Your personal data is processed to perform the contract concluded with the Autenti Partner, lead to the conclusion of the contract for the provision of services with the Customer and in order to fulfil the legal obligation, they will be stored for the duration of the contract, if it is concluded, and after its expiry for a period no longer than is required by the legitimate interest of Autenti (i.e., pursuing or securing any claims or other demands of third parties, including public authorities (Article 6(1)(f) of the GDPR)).

Your personal data will be processed in the IT environment, which means that it may also be temporarily stored and processed to ensure the security and proper functioning of IT systems (e.g., in connection with making backup copies, testing changes in IT systems, detecting irregularities or protecting against abuses and attacks).

Do we process personal data automatically (including through profiling) in a way that affects the rights of the data subject?

Autenti does not process personal data in an automated manner.

How can you contact us for more information about processing your personal data?

Contact Autenti's designated data protection officer using their contact information indicated below in writing:

  • Data Protection Officer: Agata Kolorz

  • e-mail address:

  • mailing address: Data Protection Supervisor Autenti sp. z o.o., ul. Leona Henryka Sternbacha 1 (Building L1), 30-394 Kraków