Polityka Prywatności

1. Introduction

Inwestycja Bank Polski ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website, use our services, or interact with us.

By using our services, you consent to the data practices described in this policy. If you do not agree with the practices described, please do not use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name, date of birth, and identification documents
• Contact information (address, phone number, email)
• Financial information (account numbers, transaction history, credit information)
• Employment and income information
• Tax identification numbers and other regulatory identifiers
• Biometric data (where required for security purposes)

2.2 Automatically Collected Information

When you visit our website or use our digital services, we automatically collect:

• IP address and device identifiers
• Browser type and version
• Operating system information
• Pages visited, time spent, and navigation patterns
• Cookies and similar tracking technologies
• Location data (with your consent)

2.3 Information from Third Parties

We may receive information about you from credit bureaus, identity verification services, government databases, and other financial institutions to comply with legal obligations and assess risk.

3. How We Use Your Information

We use the collected information for the following purposes:

• Service Delivery: To provide, maintain, and improve our banking and financial services
• Account Management: To process transactions, manage accounts, and provide customer support
• Legal Compliance: To comply with anti-money laundering (AML), know-your-customer (KYC), and other regulatory requirements
• Risk Management: To assess creditworthiness, detect fraud, and manage financial risks
• Marketing: To send you promotional materials (with your consent) and personalize your experience
• Security: To protect our systems, prevent fraud, and ensure the security of your accounts
• Analytics: To analyze usage patterns and improve our services

4. Information Sharing and Disclosure

We may share your information in the following circumstances:

• Service Providers: With third-party vendors who perform services on our behalf (payment processors, cloud storage, analytics)
• Legal Requirements: When required by law, court order, or regulatory authority
• Business Transfers: In connection with mergers, acquisitions, or sale of assets
• Credit Bureaus: To report account activity and credit information
• With Your Consent: When you explicitly authorize us to share information
• Fraud Prevention: To prevent fraud and protect against security threats

We do not sell your personal information to third parties for their marketing purposes.

5. Data Security

We implement comprehensive security measures to protect your information:

• Encryption of data in transit and at rest using industry-standard protocols
• Multi-factor authentication for account access
• Regular security audits and penetration testing
• Access controls and employee training on data protection
• Secure data centers with physical and logical security measures
• Incident response procedures for data breaches

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but are committed to maintaining the highest standards.

6. Your Rights and Choices

Depending on your jurisdiction, you may have the following rights:

• Access: Request a copy of the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information (subject to legal retention requirements)
• Portability: Request transfer of your data to another service provider
• Objection: Object to processing of your information for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, please contact us using the information provided in the "Contact Us" section below. We will respond to your request within 30 days.

7. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services and maintain your account
• Comply with legal, regulatory, and tax obligations (typically 5-7 years for financial records)
• Resolve disputes and enforce agreements
• Protect against fraud and security threats

When information is no longer needed, we securely delete or anonymize it in accordance with our data retention policies.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure that appropriate safeguards are in place, including:

• Standard contractual clauses approved by data protection authorities
• Adequacy decisions recognizing equivalent data protection standards
• Binding corporate rules for intra-group transfers

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child, we will take steps to delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will:

• Post the updated policy on our website with a new "Last Updated" date
• Notify you of material changes via email or through our services
• Obtain your consent where required by law

Your continued use of our services after changes become effective constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or wish to exercise your rights regarding this Privacy Policy, please contact us:

12. Regulatory Information

Inwestycja Bank Polski is regulated by the appropriate financial services authority. You have the right to lodge a complaint with your local data protection authority if you believe we have not addressed your privacy concerns adequately.