Privacy Policy

1. Identity of the Data Controller

The controller of your personal data within the meaning of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (the General Data Protection Regulation, "GDPR") and the Polish Act of 10 May 2018 on the Protection of Personal Data (Dz.U. 2018 poz. 1000, as amended) is:

All enquiries relating to the processing of personal data should be directed to the address above or by email to [email protected].

2. Scope and Categories of Personal Data Processed

We process personal data that you provide to us voluntarily through the contact form on this website. The categories of data collected include:

• Full name
• Email address
• Telephone number (if provided)
• Subject matter of enquiry
• Content of your message

We also collect technical data automatically when you visit funome.info. This includes IP addresses, browser type and version, operating system, referring URLs, pages visited, and timestamps. This data is processed in aggregated, anonymised form where possible.

We do not collect special categories of personal data as defined in Article 9 GDPR (such as data concerning health, racial or ethnic origin, political opinions, religious beliefs, or biometric data).

3. Legal Bases for Processing

We process your personal data on the following legal bases as set out in Article 6 GDPR:

4. Purposes of Processing

Your personal data is processed for the following purposes:

• Responding to enquiries submitted via the contact form on this website
• Arranging and conducting consultation meetings where requested
• Technical operation and security of the funome.info website
• Compliance with applicable legal obligations under Polish and EU law
• Improving the quality and relevance of the content on this website, using anonymised analytics data

We do not use your personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

5. Data Retention Periods

We retain personal data only for as long as is necessary for the purposes for which it was collected, in accordance with applicable law:

• Contact form data is retained for a period not exceeding 12 months from the date of submission, unless a longer retention period is required by law or by the nature of an ongoing relationship.
• Technical log data is retained for up to 90 days for security and operational purposes.
• Cookie consent records are retained for the duration of the applicable consent period, typically 12 months.
• Data retained for accounting or legal compliance purposes is kept for the period specified by applicable Polish law, which is generally 5 years from the end of the financial year to which the data relates.

Upon expiry of the applicable retention period, data is securely deleted or anonymised.

6. Recipients and Transfers of Personal Data

We do not sell, rent, or trade your personal data to third parties. Personal data may be shared with the following categories of recipients in limited and controlled circumstances:

• Hosting and infrastructure providers who operate the technical systems that support funome.info, acting as data processors under data processing agreements compliant with Article 28 GDPR
• Email service providers used to handle correspondence, acting under appropriate contractual safeguards
• Public authorities and law enforcement bodies where disclosure is required by law

We do not transfer personal data to countries outside the European Economic Area (EEA) unless appropriate safeguards are in place in accordance with Chapter V GDPR, such as adequacy decisions by the European Commission or Standard Contractual Clauses.

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR and the Polish Act on the Protection of Personal Data:

• Right of access (Article 15 GDPR): You may request confirmation of whether we process your personal data and, if so, a copy of that data and information about how it is processed.
• Right to rectification (Article 16 GDPR): You may request correction of inaccurate personal data or completion of incomplete data.
• Right to erasure (Article 17 GDPR): You may request deletion of your personal data where the conditions set out in Article 17 GDPR are met.
• Right to restriction of processing (Article 18 GDPR): You may request that we restrict processing of your data in certain circumstances.
• Right to data portability (Article 20 GDPR): Where processing is based on consent or contract and carried out by automated means, you may request your data in a structured, machine-readable format.
• Right to object (Article 21 GDPR): You may object to processing based on legitimate interests at any time.
• Right to withdraw consent: Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing prior to withdrawal.

To exercise any of these rights, contact us at [email protected]. We will respond within one month of receiving your request, as required by Article 12 GDPR.

8. Right to Lodge a Complaint

If you consider that the processing of your personal data infringes GDPR, you have the right to lodge a complaint with the competent supervisory authority. In Poland, the supervisory authority is:

You may also lodge a complaint with the supervisory authority in the EU Member State of your habitual residence or place of work.

9. Cookies and Tracking Technologies

This website uses cookies and similar technologies. Full details of the cookies we use, their purposes, and how to manage your preferences are set out in our Cookie Policy. Cookie consent is collected via the consent bar displayed at the top of the page in accordance with Article 173 of the Polish Telecommunications Law (Prawo telekomunikacyjne) and the requirements of GDPR.

10. Security Measures

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss, destruction, or alteration, in accordance with Article 32 GDPR. These measures include encrypted data transmission (HTTPS/TLS), restricted access controls, and regular review of security practices. While we take reasonable precautions, no system of data transmission or storage is entirely secure, and we cannot guarantee absolute security.

11. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, applicable law, or the structure of the website. The date at the top of this document indicates when the policy was last revised. We encourage you to review this page periodically. Continued use of the website after any changes constitutes acknowledgment of the updated policy.