Back to blog
Website Guides8 min read15 October 2026

Small Business Website in Poland: RODO, NIP, KRS and Cookie Rules Under the New Electronic Communications Law

Adyft Sites Guide

Website Guides

A small business website in Poland has to show who runs it: name or company name, address and an email address for every business, plus the NIP for most traders, and for a sp. z o.o. also the KRS number, registry court and share capital. On top of that, RODO (the Polish name for the GDPR) decides what your contact forms may collect and what your privacy notice must say, and since 10 November 2024 cookie consent sits in the new Prawo komunikacji elektronicznej, not the old telecoms law many templates still quote. Below: the details by legal form, the privacy and cookie pages, what Polish customers expect, prices in złoty, and a worked example for a physiotherapy practice.

What must a Polish business website show? It depends on your legal form

The starting point for everyone is Article 5 of the Act on Providing Services by Electronic Means (ustawa o świadczeniu usług drogą elektroniczną). It requires clear, direct access to your electronic addresses and your identity: your name and address, or your company name with its seat and address. If your activity needs a licence, you must also name the licence and the body that issued it.

Company law then adds lines, and the Entrepreneurs’ Law (Prawo przedsiębiorców, Article 20) requires your name, NIP and address in offers made through electronic channels. Here is how it looks by legal form:

Legal formMust show on the websiteMain source
Sole trader (jednoosobowa działalność, CEIDG)Name, business address, email; NIP in offersUŚUDE Art. 5; Prawo przedsiębiorców Art. 20
Limited company (sp. z o.o.)Company name, seat and address, registry court, KRS number, NIP, share capitalKSH Art. 206 § 1
Joint-stock company (S.A.)Similar company details, including KRS and NIPKSH Art. 374
Regulated activity (any form)The licence or permit and the authority that issued itUŚUDE Art. 5
Summary for owners, not legal advice. Your accountant (księgowa) or lawyer can confirm the exact wording for your firm.

Many Polish sites also show the REGON number. The provisions above name the NIP and, for companies, the KRS number; REGON is commonly added as a familiar extra and does no harm. For a sp. z o.o., note that the law treats the website like company letters and order forms, and management board members can be fined for missing details.

💡 A footer with company name, full address, email, NIP and (for companies) KRS, registry court and share capital covers the identity rules on every page at once.

What does RODO require on a small business website?

RODO does not ask for a long legal essay. It asks that anyone who sends you personal data, through a contact form, a booking request or a newsletter box, is told a set of facts at that moment. In Poland this notice is usually called a klauzula informacyjna and lives on a privacy page linked from every form. It should state:

  • 1Who the controller is: your business name and contact details.
  • 2Why you process the data and on what legal basis, for example answering an enquiry or performing a contract.
  • 3Who receives it, such as your hosting or email provider.
  • 4How long you keep it.
  • 5The person’s rights: access, correction, deletion, objection and the others in GDPR Articles 15–21.
  • 6The right to complain to the President of UODO, the Polish data protection authority.
  • 7Whether giving the data is required, and what happens if they do not.

The most useful rule for a small business is simpler than all of that: collect less. A contact form needs a name, a way to reply and a message box. Every extra field is data you must protect, explain and eventually delete.

Which cookie law applies in Poland since November 2024?

For years Polish cookie banners cited Article 173 of the Telecommunications Law (Prawo telekomunikacyjne). That law was replaced on 10 November 2024 by the Electronic Communications Law (Prawo komunikacji elektronicznej, PKE), and the cookie rule is now in Article 399. If your privacy page still quotes Article 173, it is out of date.

The substance did not change much. Storing or reading anything on a visitor’s device requires clear information first and the visitor’s consent, except for what is strictly needed to deliver a service the visitor asked for, such as a shopping basket or a login. Consent itself follows the RODO standard, which in practice means a real choice: analytics and advertising cookies wait until the visitor agrees, and refusing should be as easy as accepting. Supervision is shared between the telecoms regulator (UKE) and UODO, and the split is not fully settled, which is one more reason to get the basics right rather than test the edges.

Worked example: a physiotherapy practice in Kraków

Picture a practice with two physiotherapists, registered as a sp. z o.o. Patients find it through Google Maps and word of mouth. The owners want a site that explains treatments, lists prices, shows both therapists and lets people request an appointment.

The footer carries the company name, seat and address, the registry court, KRS number, NIP and share capital, plus an email and phone. The privacy page names the company as controller, explains that appointment requests are used to arrange visits, names the hosting provider as a recipient, sets a retention period and mentions the right to complain to UODO.

The important design choice is the booking form. Information about a person’s health is a special category under RODO, with stricter rules. So the form asks only for name, phone or email and a preferred time, with a note asking patients not to describe their condition there. Clinical details are discussed at the first visit, not typed into a website. The cookie banner holds back analytics until the visitor accepts.

In Adyft Sites terms this is a Starter site (five pages: home, treatments and prices, the team, first visit, contact) with the online booking add-on. That is $1,499 setup plus $69 a month, and booking adds $399 plus $25 a month. The FAQ, Contact and Privacy pages come free.

What do Polish customers expect from a business website?

Polish customers expect to read the site in Polish. An English version helps if you serve expats, tourists or foreign clients, but Polish comes first, and the wording should sound local rather than translated. Prices shown in złoty, with a clear note on whether they are gross or net, prevent the most common misunderstanding between B2C and B2B buyers.

Visible company data is itself a trust signal. Anyone can look up a firm’s NIP or KRS in the public registers before paying a deposit, so a footer that gives those numbers saves a careful buyer a step and signals that you have nothing to hide.

Search is concentrated: StatCounter put Google at about 89.6% of Polish searches in September 2026 and Bing at about 7.4%. A complete Google Business Profile with the same name, address and phone as the website matters as much as the site itself, and a quick registration with Bing Webmaster Tools covers most of the rest.

How much does a company website cost in Poland?

Published Polish guides give these net figures. One guide from a telecom operator (December 2025) puts a one-page site at about 2,500–4,500 zł from an agency or from 1,500 zł with a freelancer, and a site with 5–8 subpages at about 4,500–9,000 zł. Custom features such as a CRM connection go above 12,000 zł, a blog module adds 800–1,500 zł, and domain, hosting and SSL cost 600–1,000 zł a year. Later fixes run at 200–300 zł per developer hour. An older guide (2023) put company sites from about 3,000 zł net.

Check whether a quote includes writing the text and the RODO and cookie set-up, because those are easy to leave out. Adyft Sites quotes in US dollars: Starter $1,499 plus $69 a month, Growth (25 pages, about 12 days) $3,499 plus $129 a month. The monthly fee includes hosting, SSL, security, monthly changes you request by WhatsApp, Google and AI-search set-up and a visitor report. Your domain, around $12 to $20 a year, is registered in your own name. We add the company details and privacy page you give us; the legal wording should be checked by your accountant or lawyer. If you need every page in Polish, ask us before you order.

Does the European Accessibility Act affect a small Polish firm?

Mostly when you sell to consumers online. The European Accessibility Act has applied since 28 June 2025 to e-commerce and certain other consumer services. A microenterprise, under 10 people and no more than €2 million turnover or balance sheet, is exempt for services. A Kraków physio practice that only takes appointment requests is a long way from the typical target; a 25-person shop selling online to consumers is squarely in it. If you are close to either threshold, check with an adviser. Accessible basics, such as good contrast, labelled form fields and text on images, are worth having anyway.

Polish website questions from owners

Do I have to put my NIP on my website in Poland?

For a sp. z o.o. the Commercial Companies Code lists the NIP among the details the website must show. Sole traders must give their NIP in offers made through electronic channels under the Entrepreneurs’ Law, and most simply show it in the footer.

What must a sp. z o.o. show on its website?

Article 206 of the Commercial Companies Code lists the company name, seat and address, registry court and KRS number, NIP and share capital. Management board members can be fined if the details are missing.

Is my cookie banner still legal if it cites Article 173 of the Telecommunications Law?

The rule has moved. Since 10 November 2024 the cookie provision is Article 399 of the Electronic Communications Law. Update the reference and check that analytics and ad cookies wait for consent.

Can my contact form ask about a patient’s health problem?

Better not. Health data is a special category under RODO with stricter rules. Ask only for contact details and a preferred time, and discuss health matters in person.

Who is the data protection authority in Poland?

UODO, the Personal Data Protection Office (Urząd Ochrony Danych Osobowych). Your privacy notice should tell people they can complain to its President.

How much does a 5-page company website cost in Poland?

One Polish guide gives about 4,500–9,000 zł net for a site with 5–8 subpages from an agency, with domain and hosting at 600–1,000 zł a year on top. Writing the text is often extra.

Should my Polish website be in English too?

Only if part of your audience needs it. Polish comes first for local customers; a second language doubles the pages to write and keep current.

Sources: KSH Art. 206 (statute text) — https://lexlege.pl/ksh/art-206/ · Standardy Prawa, KSH Art. 206 — https://standardyprawa.pl/akt/37/art/7860 · UŚUDE Art. 5 — https://standardyprawa.pl/akt/529/art/62713 · Prawo przedsiębiorców Art. 20 — https://standardyprawa.pl/akt/41/art/7686 · Prawo komunikacji elektronicznej, Arts. 398–400 summary — https://edlaw.eduverse.com/docs/jurisdiction/nat/pl/pke · EDPB members (UODO) — https://www.edpb.europa.eu/about-edpb/about-edpb/members_en · European Accessibility Act, Art. 4 — https://www.legislation.gov.uk/eudr/2019/882/article/4 · A Polish telecom operator’s website price guide for businesses (December 2025) · A Polish consumer price portal’s website price guide (2023) ·StatCounter, Poland search engine share — https://gs.statcounter.com/search-engine-market-share/all/poland

A Polish business site, written and run for you

Tell us about your business on WhatsApp. We write every page, add your company details to the footer and a privacy page, then host and update the site. Starter is $1,499 plus $69 a month.

A

Adyft Team

Published 15 October 2026