Privacy policy

We work with people's documents every day and understand how important it is that your data is safe. Here we explain in simple words who processes your personal data, why, and what rights you have under the General Data Protection Regulation (RODO / GDPR).

Who is the controller of your data

The controller depends on which service you use:

• marriages (marriage in Poland, via the USA, via Diia, ceremonies) — GroupX sp. z o.o., KRS 0001238848, NIP 5273217215, REGON 544626037;
• all other LegalX, PhinanceX and DomX services (legalization, documents, driver-related matters, business registration, accounting, loans, leasing, insurance, real estate) — JDG Diana Tkachuk LegalX, NIP 5243000511, REGON 527990150.

Correspondence address: ul. Piaskowa 16, 01-067 Warszawa. For any questions about your data, write to biuro@legalx.pl or call +48 451 018 797.

What data we process

• contact details — name, phone, email and messenger that you leave in a form on the website, send us in a message or give us by phone;
• data needed for the service — passport details, PESEL, address, information about your work, studies, family, income, property or car — only to the extent needed for your case;
• technical data — IP address, browser and device type, and cookie data if you have consented to it (more details in the Cookie policy).

If the service requires special categories of data (for example, health data for insurance), we process them only with your explicit consent or when required by law.

Why and on what legal basis

• to reply to your request and provide a consultation — steps taken at your request before entering into a contract (Art. 6(1)(b) RODO);
• to provide the service under a contract — performance of the contract (Art. 6(1)(b) RODO);
• to fulfil legal obligations — accounting and tax requirements, and for accounting services, the requirements of the anti-money laundering act (Art. 6(1)(c) RODO);
• to protect our rights and resolve possible disputes, and to stay in touch with clients — our legitimate interest (Art. 6(1)(f) RODO);
• website analytics and advertising — only with your consent to cookies (Art. 6(1)(a) RODO). You can withdraw your consent at any time.

Providing data is voluntary, but without the data needed for the service we will not be able to provide it.

Who we share data with

Only with those without whom the service cannot be provided, and only to the extent necessary:

• public authorities when we submit documents on your behalf: the Voivodeship Office, the USC, the vehicle registration department, ZUS, the tax office, CEIDG or KRS;
• sworn translators, notaries, couriers and the post office;
• banks, leasing and insurance companies — when you instruct us to find a loan, leasing or insurance;
• IT service providers: website hosting, email, CRM, messengers — who process data on our behalf and under a contract.

We do not sell your data and do not share it for other companies' advertising.

Transfers outside the EEA

Some of our IT providers (for example, Google, Meta — WhatsApp, Telegram) may process data outside the European Economic Area. In that case the transfer is based on a European Commission adequacy decision (including the EU-US Data Privacy Framework) or standard contractual clauses.

How long we keep data

• a request without a contract — up to 12 months from the last contact;
• contract data — for the duration of the contract and then until the limitation periods for claims expire;
• accounting and tax documents — 5 years from the end of the year in which the tax payment deadline passed;
• anti-money laundering data — 5 years, as required by law;
• data processed on the basis of consent — until consent is withdrawn.

Your rights

You have the right to:

• access your data and receive a copy of it;
• correct inaccurate data;
• request deletion of your data or restriction of its processing;
• transfer your data to another controller;
• object to processing based on our legitimate interest;
• withdraw consent at any time — this does not affect the lawfulness of processing before the withdrawal;
• lodge a complaint with the President of the Personal Data Protection Office (Prezes UODO, ul. Stawki 2, 00-193 Warszawa).

To exercise your rights, write to biuro@legalx.pl — we will reply within one month.

Automated decisions

We do not make automated decisions about you and do not create profiles that would have legal effects for you.

Cookies and fonts

Read about cookies and how to change your choice in the Cookie policy. The website fonts are hosted on our own server — the browser does not contact third-party services for them.

Changes to this policy

If anything changes in how we process data, we will update this page and the date at the top.