Privacy and Cookie Policy

Last updated: 6 August 2026

1. Data Controller

The controller of your personal data is:

Dan Exchange Poland Sp. z o.o.
KRS: 0000662773
NIP: 5223083221
ul. Mahatmy Gandhiego 8/42
02-645 Warsaw, Poland

E-mail: [email protected]

This Privacy and Cookie Policy explains how we process personal data collected through the website danexchange.pl, during contact with our branches and in connection with services provided by Dan Exchange.

2. Personal Data We Collect

We may process personal data that you provide to us when you:

• contact us through a form available on our website;
• contact us by e-mail or telephone;
• request information about exchange rates or currency availability;
• reserve an exchange rate by telephone;
• visit or complete a transaction at one of our branches;
• submit a complaint, enquiry or other request.

Depending on the situation, this data may include:

• first and last name;
• e-mail address;
• telephone number;
• the contents of your message;
• information concerning your requested currency or transaction;
• identification data required under applicable law.

When you visit our website, certain technical information may also be collected automatically, including:

• IP address;
• browser and device information;
• operating system;
• date and time of your visit;
• pages visited;
• referring website;
• information stored in server logs and cookies.

3. Purposes and Legal Bases for Processing

We process personal data for the following purposes:

Responding to enquiries

We process your contact details and the contents of your message in order to respond to your enquiry, provide information about our services and confirm currency availability.

The legal basis is taking steps at your request before entering into a transaction and our legitimate interest in communicating with customers.

Providing currency exchange services

We process data necessary to complete or prepare a currency exchange transaction.

The legal basis is the performance of a contract or taking steps before entering into a contract.

Compliance with legal obligations

In certain circumstances, we are legally required to identify customers and process additional information under anti-money laundering, accounting and tax regulations.

The legal basis is compliance with legal obligations applicable to Dan Exchange.

Website security and administration

Technical data and server logs may be processed to maintain website security, prevent abuse, identify technical problems and protect our legal rights.

The legal basis is our legitimate interest in maintaining a secure and properly functioning website.

Website analytics and marketing

Where required, analytical and marketing technologies are used on the basis of your consent. You may withdraw your consent at any time through the cookie settings available on the website.

4. Providing Personal Data

Providing personal data through the contact form is voluntary. However, without the information necessary to contact you, we may not be able to respond to your enquiry.

Providing identification data during certain currency exchange transactions may be required by law. Where identification is legally required and the necessary information is not provided, we may be unable to complete the transaction.

5. Recipients of Personal Data

Personal data may be made available only to entities that require access for legitimate purposes, including:

• hosting and website maintenance providers;
• IT and security service providers;
• providers of analytical, communication and customer service tools;
• accounting, legal and compliance service providers;
• public authorities where disclosure is required by law.

These entities receive only the information necessary to perform their services and are required to protect personal data appropriately.

We do not sell personal data.

6. External Services

Our website may use services provided by third parties, including:

• Google Analytics;
• Google Maps;
• HubSpot communication or customer service tools;
• hosting and website security services.

When these services are used, their providers may receive technical data such as your IP address, browser information and information about your interaction with the website.

Some providers may process information outside the European Economic Area. In such cases, personal data is transferred using safeguards required under applicable data protection law.

7. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected.

In particular:

• enquiries are retained until the matter has been resolved and, where necessary, for a period required to establish or defend legal claims;
• transaction, accounting and identification records are retained for periods required by applicable law;
• technical logs are retained for the period necessary to ensure website security and resolve technical problems;
• data processed on the basis of consent is retained until the consent is withdrawn or the purpose of processing ends.

8. Video Surveillance

Video surveillance may be used at Dan Exchange branches to protect customers, employees, cash and property and to prevent theft, fraud and other security incidents.

Recordings are normally retained for no longer than 60 days, unless a recording is required for a longer period in connection with an incident, legal claim or request from an authorised public authority.

9. Cookies

Cookies are small text files stored on your device when you visit a website.

Our website may use:

Necessary cookies

These cookies are required for the website to function correctly, maintain security and remember your privacy preferences.

Analytical cookies

These cookies help us understand how visitors use the website, which pages are visited and whether technical problems occur.

Functional and communication cookies

These cookies may support functions such as contact tools, maps or communication with customer service.

Marketing cookies

Marketing cookies may be used to measure advertising effectiveness and provide content more relevant to users.

Non-essential cookies should only be activated after you provide consent. You may change or withdraw your consent at any time through the cookie settings on the website. You may also restrict or delete cookies through your browser settings.

Disabling certain cookies may affect the operation of some website features.

10. Your Rights

Subject to the conditions provided by the GDPR, you have the right to:

• access your personal data and receive a copy;
• request correction of inaccurate data;
• request deletion of your data;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive your data in a structured, commonly used format where data portability applies;
• withdraw consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Requests concerning personal data may be sent to:

[email protected]

11. Right to Lodge a Complaint

If you believe that your personal data has been processed unlawfully, you have the right to lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office
Personal Data Protection Office
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland

12. Automated Decision-Making

We do not use personal data to make decisions producing legal or similarly significant effects based solely on automated processing.

13. Changes to This Policy

This policy may be updated when our services, website technologies or legal requirements change. The current version will always be published on this page together with the date of the latest update.