This notice fulfils the information obligation under Article 14 of Regulation (EU) 2016/679 (GDPR) towards individuals whose personal data we obtain not from them directly, but from public registers and official documents.
It applies solely to our analytical services — business intelligence, corporate financial analysis and due diligence reports. The processing of data of individuals who contact us through this website is described in our Privacy Policy.
Data controller
The controller is ZILIO Marzena Rewers, ul. Gliwicka 35, 42-600 Tarnowskie Góry, Poland (tax ID 645-170-59-93, statistical ID 386268500). For all matters concerning personal data, contact marzena@zilio.pl.
Who this notice concerns
Members of management and supervisory boards, holders of commercial power of attorney, shareholders disclosed in registers, and individuals participating in official acts recorded in filed documents — statutory auditors, notaries, attorneys and minute-takers.
Source of the data
Exclusively public and generally accessible sources: the Polish National Court Register (KRS), the Financial Documents Repository (RDF), the Central Register of Business Activity (CEIDG), the Court and Commercial Gazette and other official publications, as well as material provided by the client commissioning the analysis, which the client is entitled to share. We do not use non-public databases, surveillance techniques or investigative activities.
Scope of data
Limited to the professional role: full name, position or role held, the entity concerned and the period of office. Reports delivered to clients do not disclose national identification numbers, residential addresses or dates of birth, even where such data appears in the source.
Purpose and legal basis
Data is processed to prepare, on a client’s instruction, an analytical report on an enterprise — its financial standing, ownership structure, corporate links and the risk of commercial cooperation with it.
The legal basis is Article 6(1)(f) GDPR — the legitimate interests of the controller and of a third party, being the client. Those interests consist in counterparty verification, mitigation of trade credit risk and prevention of commercial fraud. Recital 47 GDPR expressly recognises fraud prevention as a legitimate interest. A balancing test is carried out before processing begins.
Recipients
The client commissioning the report. Data may also be entrusted to IT service providers (hosting, e-mail, document processing tools) under data processing agreements. We do not sell data, do not share it for marketing purposes and do not build databases intended for onward trading.
Transfers outside the EEA
Where we use tools of providers established outside the European Economic Area, any transfer takes place solely under the safeguards provided for in Chapter V GDPR — an adequacy decision of the European Commission or standard contractual clauses.
Retention period
For the duration of the engagement, and thereafter for the limitation period of claims arising from it and for the period required by tax and accounting law — as a rule no longer than six years from the end of the year in which the engagement was completed.
Your rights
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and to object to the processing on grounds relating to your particular situation (Art. 21 GDPR). Following an objection we will cease processing unless we demonstrate compelling legitimate grounds which override your interests and rights. You may also lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland.
Requests should be sent to marzena@zilio.pl. We respond without undue delay and no later than one month from receipt.
Automated decision-making
We do not take decisions based solely on automated processing, including profiling, which produce legal effects concerning data subjects or similarly significantly affect them. Assessments and conclusions in our reports are made by a human and concern enterprises, not natural persons.
Changes
This notice applies from 3 August 2026. Material changes will be published on this page.