Privacy Policy for HN Finance Control

Effective date: 22 July 2026

HN Groupe sp. z o.o. respects your privacy and is committed to protecting personal and business information processed through the HN Finance Control application.

This Privacy Policy explains what information we collect, how we use and protect it, and the rights available to users.

1. Data Controller

The data controller responsible for the HN Finance Control application is:

HN Groupe sp. z o.o.
Wybrzeże Władysława IV 17B
72-600 Świnoujście
Poland
NIP: 8551602816

Email: info@hngroupe.com

2. Scope of the Application

HN Finance Control is a business finance management application intended primarily for authorized employees and representatives of HN Groupe.

The application supports activities including:

• management and synchronization of KSeF invoices;
• bank statement import and reconciliation;
• daily revenue reporting;
• payment and expense management;
• financial and branch reports;
• user authentication and access control.

3. Information We Collect

Depending on the functions used, the application may process the following categories of information:

Account information

• name;
• email address;
• telephone number, where provided;
• user ID;
• account role;
• assigned company or branch.

Financial and business information

• invoices and invoice details;
• supplier and buyer information;
• tax identification numbers;
• bank transaction information;
• bank statement files;
• payment status and payment references;
• revenue and expense information;
• financial reports;
• branch-related business information.

User-provided content

• uploaded invoice documents;
• PDF files;
• photographs of documents;
• notes and manually entered information;
• daily revenue reports;
• other content submitted through the application.

Technical information

The application may process limited technical information required to:

• authenticate users;
• maintain application security;
• prevent unauthorized access;
• diagnose errors;
• ensure reliable operation of the service.

HN Finance Control does not use user data for third-party advertising or cross-app tracking.

4. How We Use Information

We process information for the following purposes:

• creating and managing user accounts;
• authenticating users;
• controlling access according to assigned roles;
• providing the application’s financial management functions;
• synchronizing and managing invoices;
• importing and reconciling bank statements;
• preparing business and financial reports;
• maintaining security and preventing misuse;
• diagnosing technical problems;
• complying with legal, accounting and tax obligations;
• providing technical support.

We do not sell personal information.

We do not use personal or financial information for behavioral advertising.

5. Legal Bases for Processing

Where the General Data Protection Regulation applies, information may be processed on one or more of the following legal bases:

• performance of a contract or provision of the application service;
• compliance with legal, tax or accounting obligations;
• legitimate interests in operating, securing and improving internal business systems;
• consent, where consent is required by law.

6. Firebase and Service Providers

HN Finance Control uses services provided by Google Firebase, which may include:

• Firebase Authentication;
• Cloud Firestore;
• Firebase Storage;
• Cloud Functions;
• related hosting and security services.

These services are used to authenticate users, store application data, process documents and operate the application securely.

Google generally acts as a data processor for Firebase customer data under GDPR.

We may also use authorized technical or professional service providers where necessary to operate the application, maintain infrastructure or comply with legal obligations.

Such providers may process information only to the extent necessary to provide their services.

7. KSeF and Bank Data

The application may access or process information originating from:

• Poland’s National e-Invoice System, KSeF;
• bank statements uploaded by authorized users;
• accounting and business documents belonging to the company.

Such information is processed only to provide invoice management, payment verification, reconciliation and financial reporting functions.

Users must only upload or access information they are legally authorized to use.

8. Data Sharing

Information may be shared only where necessary with:

• authorized employees or representatives of HN Groupe;
• cloud hosting and technology providers;
• accountants, auditors or professional advisers;
• tax authorities, courts or public authorities where required by law;
• service providers supporting the operation and security of the application.

We do not share information with advertising networks or data brokers.

9. International Data Transfers

Some technology providers may process information outside Poland or the European Economic Area.

Where required, appropriate safeguards are used, such as:

• European Commission adequacy decisions;
• Standard Contractual Clauses;
• contractual and organizational security measures.

10. Data Retention

Information is retained only for as long as necessary for:

• operation of the application;
• performance of business and accounting processes;
• compliance with tax, accounting and legal obligations;
• dispute resolution;
• security and fraud prevention.

Financial documents may be retained for periods required by applicable Polish and European law.

Account information may be deleted or anonymized when it is no longer required, subject to legal retention obligations.

11. Data Security

We use reasonable technical and organizational measures to protect information, including:

• authenticated access;
• role-based permissions;
• secure cloud infrastructure;
• access restrictions;
• encrypted network transmission;
• monitoring and technical safeguards;
• limitation of access to authorized personnel.

However, no electronic storage or transmission method can guarantee absolute security.

12. User Rights

Subject to applicable law, users may have the right to:

• request access to their personal data;
• request correction of inaccurate information;
• request deletion of information;
• request restriction of processing;
• object to certain processing;
• receive a copy of their data;
• withdraw consent where processing is based on consent;
• lodge a complaint with a data protection authority.

Requests may be submitted to:

info@hngroupe.com

Some requests may be limited where information must be retained for legal, accounting, tax or security reasons.

13. Account and Data Deletion

Users may request account or personal data deletion by contacting:

info@hngroupe.com

Before fulfilling a request, we may need to verify the requester’s identity and authority.

Business, invoice, banking or accounting records may remain stored where retention is required by law or necessary to establish, exercise or defend legal claims.

14. Children’s Privacy

HN Finance Control is a business application and is not directed to children.

We do not knowingly collect personal information from children for consumer or entertainment purposes.

15. Tracking and Advertising

HN Finance Control:

• does not display third-party advertising;
• does not use personal information for advertising;
• does not sell user information;
• does not track users across apps or websites owned by other companies.

16. Changes to This Privacy Policy

We may update this Privacy Policy when:

• application features change;
• data practices change;
• legal requirements change;
• new service providers are introduced.

The updated version will be published with a revised effective date.

17. Contact

For questions, privacy requests or technical support, contact:

HN Groupe sp. z o.o.
Wybrzeże Władysława IV 17B
72-600 Świnoujście
Poland
NIP: 8551602816

Email:info@hngroupe.com