Privacy Policy

Legal

Privacy Policy

1. Data Controller

The controller of your personal data is Firmtech sp. z o.o., with its registered offices at:

  • Grzybowska 87, Concept Tower, 00-844 Warsaw, Poland

For any data protection inquiries, please contact us at [email protected].

2. Personal Data We Collect

We collect personal data only when you voluntarily provide it through our website, primarily via the contact form. This includes:

  • Full name — to identify you and personalise our response.
  • Work email address — to respond to your inquiry.
  • Phone number (optional) — to contact you if a call is more efficient.
  • Area of interest — to route your inquiry to the appropriate team.
  • Project details / message content — to understand your requirements and prepare a relevant response.

We do not collect data from minors, and our services are directed exclusively at business clients.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

Responding to inquiries and providing consultations

Legal basis: Art. 6(1)(b) GDPR — processing necessary to take steps at your request prior to entering into a contract, and Art. 6(1)(f) GDPR — our legitimate interest in handling business communication.

Establishing and maintaining business relationships

Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in developing and managing client relationships.

Compliance with legal obligations

Legal basis: Art. 6(1)(c) GDPR — where we are required to retain certain data by applicable law (e.g. tax or accounting regulations).

4. Data Sharing and Recipients

Your personal data may be shared with the following categories of recipients, only to the extent necessary:

  • Hosting and infrastructure providers — servers and cloud services where our website and email are hosted.
  • IT service providers — companies that help us maintain and secure our systems.
  • Professional advisors — legal and accounting firms, where required by law.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

5. International Data Transfers

Your data is primarily processed within the European Economic Area (EEA). If any transfer outside the EEA occurs (e.g. through cloud infrastructure providers), we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission or an adequacy decision.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes described above:

  • Contact form submissions — retained for up to 12 months after the last communication, unless a business relationship is established.
  • Business relationship data — retained for the duration of the relationship and up to 6 years afterward, in line with statutory limitation periods and accounting obligations.

7. Your Rights

Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:

  • Right of access — to obtain confirmation of whether your data is being processed and to request a copy.
  • Right to rectification — to have inaccurate or incomplete data corrected.
  • Right to erasure — to request deletion of your data where there is no compelling reason for continued processing.
  • Right to restriction of processing — to limit how we use your data in certain circumstances.
  • Right to data portability — to receive your data in a structured, commonly used, machine-readable format.
  • Right to object — to object to processing based on legitimate interests.

To exercise any of these rights, please contact us at [email protected]. We will respond within 30 days.

You also have the right to lodge a complaint with the Polish supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

8. Cookies and Tracking Technologies

This website uses only essential (strictly necessary) cookies required for the proper functioning of the site, such as session management and security. These cookies do not require your consent under applicable law.

We do not use analytics cookies, advertising cookies, or any third-party tracking technologies. No personal data is collected automatically through cookies on this website.

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security reviews.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page. We encourage you to review it periodically.

11. Contact

If you have any questions about this Privacy Policy or the way we handle your personal data, please contact us: