Effective Date: July 8, 2025
1. Who We Are
ARGENTARII SP. Z O. O. is the data controller for all data collected via our website and services, unless stated otherwise.
If our service is used to verify your identity on behalf of a client (e.g., a company verifying its users), we act as a data processor, and the client is the data controller.
2. What Data We Collect
We may collect and process the following types of personal data:
a. Identification and Contact Data
– Full name
– Date of birth
– Nationality
– Email address, phone number
– Government-issued ID (passport, driver’s license, ID card)
– Selfie or video recording for liveness detection
b. Technical Data
– Device information
– IP address
– Browser type, language settings, time zone
– Geolocation data
– Cookies and tracking data
c. Verification and Compliance Data
– AML/KYC results
– Risk scoring
– Background screening information (if applicable)
3. Purpose of Processing
We process personal data to:
– Verify your identity or documents
– Prevent fraud and impersonation
– Comply with anti-money laundering (AML) and know-your-customer (KYC) obligations
– Communicate with you about the verification process
– Improve our services and technology
4. Legal Grounds
We process your data based on:
– Consent (e.g., when you provide documents voluntarily)
– Performance of a contract (e.g., access to services)
– Legal obligation (e.g., AML/KYC compliance)
– Legitimate interest (e.g., security, fraud prevention)
5. Who We Share Data With
We may share your personal data with:
– The company requesting your verification (data controller)
– Our cloud storage, analytics, or document-checking providers (under DPA agreements)
– Law enforcement or regulators (if legally required)
6. International Data Transfers
Some data may be stored or processed outside the EU. We ensure lawful safeguards such as:
– Standard Contractual Clauses (SCCs)
– Adequacy decisions by the European Commission
– Vendor assessments and security reviews
7. Data Retention
Your data will be stored only as long as necessary for the purpose of verification, regulatory compliance, and fraud prevention. Typically:
– Up to 5 years after last activity, unless law requires otherwise
– Shorter durations for cookies or browser data
8. Your Rights
You have the right to:
– Access your data
– Correct or update inaccurate information
– Request erasure (“right to be forgotten”)
– Restrict or object to certain processing
– Withdraw consent
– Request a copy of your data (data portability)
– Lodge a complaint with a supervisory authority in Poland or your country
To exercise your rights, contact us at: legal@jatoja.pl
9. Security
We use appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse, including encryption, access controls, and regular audits.
10. Children’s Data
Our services are not intended for individuals under 16. We do not knowingly process children’s data.
11. Cookies & Analytics
We use cookies and tracking technologies for:
– Website functionality
– Usage analytics
– Security purposes
You can control cookies via browser settings. For full details, see our Cookies Policy.
12. Updates to this Policy
We may revise this Privacy Policy from time to time. The latest version will always be available on https://jatoja.pl with the effective date indicated above.
13. Contact Us
For any questions or to exercise your data rights, contact us at:
ARGENTARII SP. Z O. O.
MODLIŃSKA 247
03-120 WARSAW
POLAND
Email: legal@jatoja.pl