Disclosure Statement – KSEF

Privacy Notice for Business Partners regarding the processing of personal data in the National e-Invoice System (KSeF)

 

Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (GDPR), we hereby inform you that:

  1. The controller of your personal data is ZPC SKAWA SA, with its registered office in Wadowice at the following address: 34-100 Wadowice, ul. Młyńska 66.
  2. For all matters related to personal data protection, you may contact us via email atiod@skawa.com.pl or by phone at33 823 30 71109.
  3. Your personal data will be processed pursuant to Article 6(1)(c) of the GDPR, i.e., processing

is necessary to fulfill the legal obligation imposed on the controller in connection with
the provisions of the Act of March 11, 2004, on the Tax on Goods and Services, and the regulation

Regulation of the Minister of Finance dated December 27, 2021, on the Use of the National e-Invoice System

in order to fulfill the controller’s obligations regarding the performance of activities related to
within the IT system of the Head of the National Tax Administration, i.e., the National e-Invoice System (issuing and receiving structured invoices).

 

  1. Your personal data may be shared with:
  • authorities and other entities, including public entities, authorized to process such data pursuant to applicable laws;
  • entities that provide support for the controller’s operations (e.g., IT service providers, maintenance service providers, law firms);
  • To the Head of the National Tax Administration, regarding the issuance of structured invoices in KSeF;

 

  1. Your personal data will be retained until the tax liability expires; personal data (contained in invoices) will also be retained in KSeF for a period of 10 years from the end of the year in which they were issued.

 

  1. You have the right to access your personal data, as well as the right to have it corrected, deleted
    in cases provided for by law, and to restrict its processing.

 

  1. You have the right to file a complaint with the supervisory authority—the President of the Personal Data Protection Office—if you believe that the processing of your personal data violates the provisions of the GDPR.
  2. Providing personal information is a legal requirement. Failure to provide personal information may result in the inability to issue or receive an invoice through the National e-Invoice System.