Privacy and cookies policy
Here we explain what data goes to the ZeroPożyczki.pl website, what purposes we use it for and how you can manage your privacy.
1. Data administrator
The administrator of personal data is ULTRASOFT GROUP, address: Zbożowa 42b, 40-657 Katowice, Poland, NIP: PL2220897401. In matters of personal data, write to kontakt@zeropozyczki.pl or send correspondence to the indicated address.
The document concerns the ZeroPożyczki.pl website. Excludes linked bank, lender and partner websites. The information of their administrators applies to these websites.
2. What data do we process and for what purposes?
We do not require you to create an account to read articles and view offers. The scope of data depends on the function you are using. Do not send your PESEL number, ID scan, bank login details or payment card number in a comment or regular form.
| Situation | Data and purpose | Basis |
|---|---|---|
| Browsing the website | The IP address, request date, subpage address and browser technical data may be recorded in the server logs. They are used to ensure operation, diagnostics and protection against abuse. | Art. 6 section 1 letter f GDPR - legitimate interest in maintaining and securing the website. |
| Contact | Name or signature, email address, message content, optional telephone and IP address. We use them for replies and to protect the form from spam. | Art. 6 section 1 letter f GDPR - handling correspondence; when the message concerns the conclusion or performance of a contract, Art. 6 section 1 letter b GDPR. |
| Comments and opinions | Author's signature, content, date, subpage, optional e-mail and IP address. We publish the signature and content of the opinion with information about the time of publication. Email and IP address are not publicly displayed. | Art. 6 section 1 letter b GDPR - providing the commenting function; art. 6 section 1 letter f - spam prevention and reporting. |
| Newsletter, if you use it | E-mail address, token and registration confirmation. The confirmation message does not constitute publication of the address or consent to any marketing. | Art. 6 section 1 letter a GDPR and prior consent required by Art. 398 Electronic Communications Laws. Consent is voluntary. |
| Statistics and transitions to offers | The website saves information about transitions to offers, offer ID and referring page. Summary reports help assess interest in offers. Google Analytics is a separate, optional measurement described below. | Art. 6 section 1 letter f GDPR in the scope of personal data needed to handle redirections and settlements; for optional analytics - agreed. |
| Pursuing claims and legal obligations | Necessary data regarding correspondence or events related to a legal obligation or dispute. | Art. 6 section 1 letter c GDPR, when a specific provision requires storage, or point f - establishing, pursuing or defending claims. |
Providing data in the forms is voluntary, but the lack of an e-mail address or message content will prevent the form from responding. Phone number is optional. We do not make automatic decisions on granting a loan based on data from the website, nor do we assess creditworthiness.
3. Recipients of data and links to offers
Access to the data, to the extent necessary to perform tasks, may be provided to the Zenbox hosting provider, mail and technical service providers, and authorized persons operating the website. Data may be disclosed to competent authorities when required by law. The use of Google Analytics and Google / YouTube content involves the participation of these providers on the terms described below.
Clicking on a link to an offer may lead you through the affiliate partner's system. The affiliate and the target lender receive connection data, including the IP address and information provided by the browser. The content of the contact message is not automatically included in such redirection. You complete the loan application on the recipient's website - read the separate privacy policy there.
4. How long we store the data
The period depends on the purpose: we store correspondence for the time necessary to handle it, and then only to the extent necessary for legal obligations or claims; comments - for the period of their publication and handling of related reports; subscription data - to withdraw consent or terminate the newsletter. Your opt-out information may remain on the resend blocklist to respect your choice.
We retain technical logs and anti-spam identifiers to the extent necessary for security and incident investigation. Data involved in a specific dispute may be retained until the dispute is resolved. This does not mean the right to indefinite storage of all data. You can request information about the period or criteria for your case. Aggregated statistics that do not identify an individual may be retained for longer periods of time.
5. Your rights
Under the terms and exceptions resulting from the GDPR, you may request access to your data and their copies, rectification, deletion or limitation of processing. The right to transfer applies to data processed automatically on the basis of consent or contract. Where the basis is legitimate interest, you may object to your particular situation. You can object to direct marketing at any time.
You can withdraw your consent as easily as you expressed it. Withdrawal does not affect the compliance of previous processing. Send the application to the administrator's address. We generally respond within a month; possible extension, its reasons and other exceptions result from Art. 12 GDPR. In case of reasonable doubts, we may ask for information needed to confirm your identity, without collecting excessive data.
You have the right to submit a complaint to the President of the Personal Data Protection Office. Information and how to submit a complaint can be found at uodo.gov.pl.
7. Google Analytics, maps and videos
Google Analytics is used to analyze visits, the popularity of subpages and how the website is used. It may use cookie identifiers, device information, visit source and events. Starting the measurement requires consent to the analysis; the tool can be provided by Google Tag Manager. Refusal does not limit reading the content and viewing offers.
Embedded maps and videos link to Google/YouTube after consenting to external content. The provider then receives your connection details and can associate the visit with your account if you remain logged in. Google services in the EEA are associated with Google Ireland Limited and processing may also involve entities of the Google group outside the EEA.
Przy przekazywaniu danych poza EOG zastosowanie mają mechanizmy rozdziału V RODO: odpowiednia decyzja Komisji Europejskiej, w tym EU–US Data Privacy Framework wyłącznie dla odbiorców objętych ważną certyfikacją, albo inne właściwe zabezpieczenia, np. standardowe klauzule umowne. You will receive information about security and the ability to obtain a copy of it from the administrator. This does not mean that every transfer to the US is automatically allowed.
8. Contact and changes to the document
Please direct concerns, requests and information about privacy issues to kontakt@zeropozyczki.pl. We update the document when the website's functions, processing method or regulations change. Changing the document does not replace new consent, if it is required. The principles of services are also described website regulations.
Last updated: October 22, 2026