Privacy policy
§ 1 General provisions
This privacy policy sets out how UnionNet takes care of your personal data and your rights.
§ 2 Definitions
MyInvoice - software designed for Apple devices running iOS and macOS.
Manufacturer - the manufacturer of the software is UnionNet Tomasz Muszyński, ul. Wczasowa 21c/1, 05-402 Otwock, Poland, Tax ID: PL5212774849.
Seller - the seller is Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
User - a private individual or business who purchased the MyInvoice application from the Seller through the App Store and uses the MyInvoice application as intended.
GDPR - General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data.
Service - access to selected online services necessary for the provision of selected features (e.g. downloading contractor data from REGON).
§ 3 Administrator of personal data
All personal data entered into the MyInvoice software is solely in your possession and may optionally be transferred to the iCloud service. None of your data (customers, invoices, etc.) is transmitted to or stored by the Manufacturer, with the exception set out in § 4.
Selected services use the resources of UnionNet servers. In this case, the administrator of personal data is the Manufacturer. If you have any questions about how we manage your data and your rights, please contact our customer support via email: support@myinvoice.biz.
§ 4 What personal data we process
Due to the provision of selected online services for Users, we process your personal data for various purposes. These are:
Downloading data from the REGON database — To this end, the online service mediates the transfer of data from the REGON database to the user. The data is transferred in encrypted form. For security and statistical purposes, we collect the tax identification number (VAT ID) of the user making the inquiry, the tax identification number of the contractor whose data is being retrieved, as well as the IP address from which the inquiry was made, and the date and time of the inquiry.
Downloading data from the VAT information system (VIES) — To this end, the online service mediates the transfer of data from the VAT information system (VIES) database to the user. The data is transferred in encrypted form. For security and statistical purposes, we collect the tax identification number (VAT ID) of the user making the inquiry, the tax identification number of the contractor whose data is being retrieved, as well as the IP address from which the inquiry was made, and the date and time of the inquiry.
In order to improve the quality of the application, we use Sentry software, which transmits statistical data about the use of the application and, in the event of a failure, logs from the application (e.g. the line number of the source code where the error occurred). No contractor data, invoices, etc. are transmitted in the logs. The account name (Settings/Account/Name) and/or VAT ID may be included in the logs. Sentry data is held exclusively by the Manufacturer.
Statistical data is collected on the basis of a legitimate interest (Article 6, paragraph 1, letter f of the GDPR), consisting in facilitating the use of services provided electronically and improving the functionality of these services.
§ 5 Who we share your personal data with
Your personal data (VAT ID) may be transferred only to state authorities upon a written request. The Manufacturer does not hold any personal data saved in the MyInvoice application, with the exception of the VAT ID when online services are used.
Invoices and the data contained therein may be transferred in encrypted form to the National e-Invoice System (KSeF) managed by the Ministry of Finance of the Republic of Poland.
All data saved in the application may be transferred to the iCloud service and is transmitted in encrypted form. Data in iCloud may be stored in encrypted form — this depends on the user’s iCloud configuration.
Personal data, i.e. the VAT ID, may be transferred to the taxpayer register (the so-called VAT whitelist) of the Ministry of Finance.
§ 6 How long we keep your personal data
Statistical data is stored for a period of 1 year.
§ 7 What are your rights in relation to the processing of your personal data
You are entitled to all rights under the GDPR, in particular:
- The right to access your personal data.
- The right to rectification (correction) of your personal data.
- The right to erasure of personal data (the so-called right to be forgotten).
- The right to restriction of processing of personal data.
- The right to data portability.
- The right to object to the processing of personal data.
- The right to lodge a complaint with a supervisory authority — in Poland: the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw.
Data processing does not involve automated decision-making or profiling.
§ 8 How we care about the security of your personal data
Personal data transmitted to the service is transferred in encrypted form (SSL). Third parties and unauthorized persons do not have access to data stored on the server. The data is stored on Hetzner servers, which has a separate privacy policy.
The authorization certificate, offline certificate, and private keys issued in the National e-Invoice System saved in the application are stored exclusively on the device to which they were uploaded, in the system keychain, which stores them in encrypted form. The certificates and keys are not synchronized between devices and are not transferred to iCloud.
The user of the MyInvoice application is solely responsible for the data stored on the device and for any loss of such data. To comply with the GDPR, you must ensure the security of personal data stored on the device by applying the necessary available safeguards (application lock, device lock, backups, etc.).