Privacy policy

We want you to know what happens to your data. Below we explain it without legal jargon — and where the law requires precision, we give the legal basis.

The controller is Agencja Detektywistyczna Detectum sp. z o.o., ul. Podolska 21, 81-321 Gdynia, Poland, entered in the National Court Register under KRS 0001202919, VAT ID PL5862423698, REGON 543131428.

For any matter concerning personal data write to biuro@detectum.pl or call +48 666 607 600. We have not appointed a data protection officer — we are not required to, and data matters are handled directly by the management board.

We collect only what you give us yourself, plus what your browser sends automatically when you visit the site.

• From the contact form: your name, phone number, e-mail address and the message you write.
• From a phone call or e-mail: whatever you tell us when describing your matter.
• Automatically: IP address, date and time of the request, browser and system type — recorded in server logs.
• From analytics and marketing cookies — but only if you consent in the banner. Details are in the cookie policy.

We do not ask for special category data (health, beliefs, religion, sex life). If you describe such information yourself, we process it only to the extent needed to answer your enquiry.

Answering an enquiry from the form

The basis is your consent — Article 6(1)(a) GDPR. You give it by ticking the box next to the form; it is voluntary, and withholding it only means we cannot reply that way. You may withdraw consent at any time by writing to biuro@detectum.pl. Withdrawal does not affect the lawfulness of processing before it.

Entering into and performing a contract

If you decide to instruct us, we process data to conclude and perform the contract — Article 6(1)(b) GDPR.

Legal obligations

Accounting, tax and the duties imposed by the Polish Detective Services Act of 6 July 2001, including keeping records of assignments — Article 6(1)(c) GDPR.

Our legitimate interest

Establishing or defending legal claims, keeping the site secure, and analysing traffic to the extent you have consented to — Article 6(1)(f) GDPR.

This is a situation specific to our line of work, so we state it plainly. When carrying out an assignment we also process data of the persons the work concerns — people who are not our clients and did not give us their data themselves.

The basis is then the legitimate interest of the client and of ourselves — Article 6(1)(f) GDPR — pursued within the limits of the Detective Services Act. Under Article 14(5) GDPR we do not inform those persons about the processing, because doing so would make the purpose of the processing impossible or seriously impair it, and the duty of confidentiality follows directly from statute.

Such data is used solely for the specific assignment. We do not build databases from it and do not pass it to anyone other than the client and — where the law requires — law enforcement and the courts.

We do not sell data and do not share it for third-party marketing. Data may reach only those parties without whom the business cannot run:

• hosting and e-mail providers — under data processing agreements,
• our accountants and the law firm servicing the company,
• analytics and advertising providers (Google Ireland Limited, Meta Platforms Ireland Limited, Microsoft Ireland Operations Limited) — only within the scope of your cookie consent,
• public authorities, where disclosure is required by law.

Google, Meta and Microsoft tools may process data outside the EEA, including in the United States. This takes place under the European Commission's adequacy decision within the Data Privacy Framework, supplemented by standard contractual clauses. If you do not consent to analytics and marketing cookies, no such transfer occurs at all — those scripts are never loaded.

• Correspondence from the form and e-mail — up to 12 months from the last contact, unless you withdraw consent earlier.
• Assignment records — for the period required by the Detective Services Act and accounting law.
• Accounting documents — 5 years from the end of the tax year they concern.
• Data needed to defend against claims — until the limitation period expires.
• Server logs — per the hosting provider's policy, typically up to 12 months.
• Cookie consent — 12 months from the moment it is given.

You can exercise them at any time by writing to biuro@detectum.pl. We reply without undue delay and within one month at the latest.

• The right of access to your data and to obtain a copy.
• The right to rectify inaccurate data and complete incomplete data.
• The right to erasure, unless a legal obligation prevents it.
• The right to restriction of processing.
• The right to object to processing based on legitimate interest.
• The right to data portability where processing is based on consent or contract.
• The right to withdraw consent at any time.
• The right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.

No. Providing data is entirely voluntary, but without a name, phone number or e-mail address we have no way to answer your enquiry. Concluding a contract requires the data prescribed by law — without it no contract can be made.

We do not take decisions about you based solely on automated processing, including profiling, that would produce legal effects or similarly significantly affect you. Analytics and advertising tools may build profiles for statistics and ad targeting, but only after you consent and without affecting your legal position.

The site runs over an encrypted HTTPS connection. Only authorised persons have access to correspondence, and a Polish detective is additionally bound by statutory professional secrecy covering sources of information, the circumstances of a case and the very fact that an assignment was placed — also after it ends.

We may amend this policy when the law or the way the site works changes. The current version is always available at this address, and the date it takes effect is shown at the top of the page.