Privacy Policy

Last updated: 12 November 2026

This is a courtesy translation of the Polish original. In case of any discrepancy, the Polish version prevails.

MOOY – Financial Expert Elwira Szczęch

This Privacy Policy applies to the following websites:

This document sets out the rules for processing the personal data of website users, using the contact form and providing credit intermediation services.

1. Personal data controller

The personal data controller is:

es4you Elwira Szczęch, a sole proprietor operating under the brand MOOY – Financial Expert Elwira Szczęch.

Controller's details:

Business name: es4you Elwira Szczęch
Tax ID (NIP): 9491818156
REGON: 241342828
Business address: ul. Stefana Starzyńskiego 5 lok. 99, 42-224 Częstochowa, Poland
E-mail: kontakt@elwiraszczech.pl
Phone: 500 434 891

The Controller is responsible for the lawful processing of the personal data of users of both websites.

2. What personal data do we process?

Depending on how you use the websites and the scope of our cooperation, the Controller may process the following data:

first and last name;
phone number;
e-mail address;
the content of a message sent via the contact form;
information provided during phone calls, meetings and correspondence;
data on your financial, income, professional and property situation – if you use credit intermediation services;
technical data resulting from the connection to the website itself, in particular the IP address and information about the browser and device.

The Controller processes only the data necessary to achieve the specified purposes.

Providing data is voluntary, but it may be necessary to answer an enquiry or provide the chosen service.

3. Purposes and legal bases of processing

Personal data is processed for the following purposes:

3.1. Handling the contact form

To answer enquiries, make contact with persons interested in the services and present information about the offer.

Legal basis:

Art. 6(1)(b) GDPR – taking steps at the request of the data subject prior to entering into a contract;
Art. 6(1)(f) GDPR – the Controller's legitimate interest in handling correspondence and enquiries.

3.2. Providing credit and financial intermediation services

To analyse the client's needs, present financing options, prepare credit proposals and handle the credit process.

Legal basis:

Art. 6(1)(b) GDPR – performance of a contract or taking steps prior to entering into it;
Art. 6(1)(c) GDPR – compliance with legal obligations, where applicable;
Art. 6(1)(f) GDPR – the Controller's legitimate interest, where applicable.

3.3. Complying with legal obligations

To fulfil tax, accounting and other obligations arising from applicable law.

Legal basis:

Art. 6(1)(c) GDPR.

3.4. Establishing, pursuing or defending against claims

To protect the Controller's legal interests.

Legal basis:

Art. 6(1)(f) GDPR.

3.5. Ensuring the operation and security of the websites

To display the websites, including downloading fonts, and to ensure their security and proper operation.

Legal basis:

Art. 6(1)(f) GDPR – the Controller's legitimate interest in maintaining and securing the websites.

4. Contact form

The websites allow you to contact the Controller via a contact form.

Data provided in the form is used to:

answer the enquiry sent;
make contact with a person interested in the services;
present information about financial and credit services;
take steps related to a possible start of cooperation.

Sending the contact form does not automatically mean consent to receive marketing information.

Consent to marketing communication, if offered, is voluntary and separate from contacting us about an enquiry.

5. Recipients of personal data

Personal data may be passed to entities cooperating with the Controller, solely to the extent necessary to achieve the specified purposes.

Recipients of data may include in particular:

Credipass Polska S.A. – to the extent described in section 6;
banks and financial institutions;
hosting and IT service providers, including Netlify, Inc. (hosting of the website and handling of contact form submissions);
e-mail service providers;
Google – as the provider of fonts displayed on the websites (section 7);
entities providing accounting and legal services;
authorised public authorities, where the obligation to pass on data results from law.

Data passed to banks and financial institutions is disclosed to the extent necessary to provide the services and in accordance with the relevant legal basis.

Personal data is not sold to other entities.

6. Cooperation with Credipass Polska S.A.

The Controller provides credit intermediation services as part of her own business, as an agent of Credipass Polska S.A., under a cooperation agreement on credit intermediation.

After the Controller presents an offer, the client gives separate consent to the processing of their personal data by Credipass Polska S.A. The rules on data processing by Credipass Polska S.A. are presented to the client in connection with this consent.

Data sent through the contact form on these websites is not passed to Credipass Polska S.A. before this consent is given.

7. Google Fonts and technical data

The websites use fonts provided by the Google Fonts service. When a page is displayed, the user's browser downloads font files from Google's servers, so Google receives technical data, in particular the user's IP address.

The hosting provider may also record standard technical data resulting from the connection to the website (including the IP address) in server logs, in order to ensure its operation and security.

The websites do not use analytics or advertising tools.

Detailed information on data processing by Google is available at: https://policies.google.com/privacy

8. Transfer of data outside the European Economic Area

In connection with the use of external providers, in particular Google services and the hosting provider, personal data may be transferred outside the European Economic Area.

In such a case, the Controller ensures that appropriate safeguards provided for in the GDPR are applied, in particular adequacy decisions or standard contractual clauses, where required.

9. Data retention period

Personal data is stored for the period necessary to achieve the purpose for which it was collected.

In particular:

contact form data – for the time the enquiry is handled, and then for the period necessary to secure possible claims;
data related to the provision of services – for the duration of cooperation and the archiving period required by law;
accounting and tax data – for the period resulting from applicable law;
data processed on the basis of consent – until the consent is withdrawn, unless there is another legal basis for further processing;
technical data in server logs – for the period set by the hosting provider.

10. Rights of data subjects

Every person whose personal data is processed has the rights arising from the GDPR:

The right to access their personal data.
The right to obtain a copy of the data.
The right to rectification of data.
The right to erasure of data, where the conditions provided for in the GDPR are met.
The right to restriction of processing.
The right to data portability, where applicable.
The right to object to the processing of data.
The right to withdraw consent at any time, where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before its withdrawal.

The data subject also has the right to lodge a complaint with the President of the Personal Data Protection Office.

Contact details of the Office:

President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych)
ul. Stanisława Moniuszki 1A
00-014 Warsaw, Poland

Website: https://uodo.gov.pl

To exercise your rights, you can contact the Controller at: kontakt@elwiraszczech.pl

11. Cookies

The websites elwiraszczech.pl and mooy.pl do not set their own cookies and do not use analytics, marketing or advertising cookies. For this reason, no cookie consent banner is displayed on the websites.

Users can manage cookies and site data themselves using their web browser settings.

If tools requiring consent (e.g. analytics) are launched on the websites in the future, consent will be collected before they are launched and the Privacy Policy will be updated accordingly.

12. Security of personal data

The Controller applies appropriate technical and organisational measures to ensure the security of the personal data processed.

Data is protected against:

unauthorised access;
loss or destruction;
unauthorised alteration;
disclosure to unauthorised persons.

Access to data is granted only to authorised persons, to the extent necessary to perform the duties entrusted to them.

13. Automated decision-making and profiling

The Controller does not make decisions about users of the websites based solely on automated processing of data, including profiling, that would produce legal effects or similarly significantly affect users.

Please note that banks and financial institutions may apply their own procedures for assessing creditworthiness and making credit decisions, on the terms set by those entities.

14. Links to external websites

The websites may contain links to other websites, including the Controller's Google profile with client reviews.

The Controller is not responsible for the privacy practices of the owners of those websites.

We recommend reading the privacy policies of the websites you visit via the links provided.

15. Changes to the Privacy Policy

The Controller reserves the right to update this Privacy Policy, in particular in the event of changes in law, technological changes or changes in how the websites operate.

The current version of the Privacy Policy is available on the websites elwiraszczech.pl and mooy.pl.

16. Contact

In matters concerning the protection of personal data and the exercise of rights under the GDPR, you can contact the Controller:

es4you Elwira Szczęch
MOOY – Financial Expert Elwira Szczęch
NIP: 9491818156
REGON: 241342828
ul. Stefana Starzyńskiego 5 lok. 99, 42-224 Częstochowa, Poland
E-mail: kontakt@elwiraszczech.pl
Phone: 500 434 891