Privacy policy

Last updated: 6 October 2026

1. Data controller

The data controller is Kiran Sp. z o.o., with registered office in Pruszków (05-808), ul. Działkowa 95/10, Poland - registered with the Polish National Court Register under KRS 0000723560, Tax ID (NIP) 5342580173, REGON 369709340.

2. Contact

For any matters related to personal data processing please contact us by email at info@kiran.pl or phone +48 533 899 965.

3. Scope and purposes of processing

• handling enquiries received by email, phone or the on-site chat (basis: Art. 6(1)(f) GDPR - legitimate interest);
• performing GDPR consulting, training, SaaS, software development and website development and hosting agreements (Art. 6(1)(b) GDPR);
• issuing invoices and keeping accounting records (Art. 6(1)(c) GDPR);
• keeping the site working, including remembering your cookie decision (Art. 6(1)(f) GDPR);
• the chat and site analytics - only with your consent (Art. 6(1)(a) GDPR). We do not currently run site analytics.

4. Retention period

We retain data only for as long as required to fulfil the purpose for which it was collected and for the period required by law (e.g. tax data - 5 years from the end of the relevant tax year).

5. Data subject rights

You have the right to access your data, request rectification, erasure or restriction of processing, data portability and to object to processing. Where processing is based on consent, you may withdraw it at any time. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO).

6. Cookies

kiran.pl uses cookies in accordance with the rules described in detail in our Cookie policy. Necessary cookies are always active; the chat and analytics and marketing cookies are activated only with your voluntary consent given in the banner. The chat runs on our own enuchat.com application and is loaded from the api.enuchat.com server. You can change your decision at any time using the "Cookie settings" button in the footer.

7. Data sharing

Data may be entrusted to hosting, accounting, legal and IT service providers under data processing agreements compliant with Art. 28 GDPR. As a rule we do not transfer data outside the European Economic Area. The chat may be an exception: if an AI assistant replies in the conversation, message content may be processed by an external language-model provider, including outside the EEA - with the safeguards required by Chapter V GDPR.

8. Updates

This privacy policy may be updated from time to time. Each change will be published on this page with the date of the last update.