GDPR Information Clause
In accordance with Art. 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), we inform you about the rules for processing personal data provided to us via the Website, the contact form or direct contact.
1. Data controller
FORTOTECH Sp. z o.o.
ul. Świętego Rocha 13/15 lok. 9, 15-879 Białystok, Poland
KRS: 0000648731 | NIP: 9662107658 | REGON: 365929747
Data protection contact: biuro@fortotech.pl
2. Purposes and legal bases
Personal data is processed for the purpose of:
- responding to an enquiry and conducting correspondence — based on consent (Art. 6(1)(a) GDPR) and the controller's legitimate interest (Art. 6(1)(f) GDPR);
- taking steps prior to entering into a contract and establishing cooperation (Art. 6(1)(b) GDPR);
- fulfilling the controller's legal obligations (Art. 6(1)(c) GDPR).
3. Data recipients
Recipients of the data may be entities processing data on behalf of the controller (including providers of hosting, IT, e-mail, legal and accounting services) and public authorities entitled under the law. To handle the contact form, we use the Web3Forms service, acting as a data processor on our behalf.
4. Retention period
We store data for the time necessary to achieve the purposes indicated above, and then for the period resulting from legal provisions or until any claims become time-barred, or until consent is withdrawn.
5. Rights of the data subject
You have the right to access your data, rectify it, erase it or restrict its processing, the right to data portability, the right to object to processing, and the right to withdraw consent at any time (without affecting the lawfulness of processing carried out before its withdrawal).
6. Right to lodge a complaint
You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you consider that the processing of your data infringes the GDPR.
7. Voluntary provision of data
Providing data is voluntary but necessary to handle an enquiry or establish cooperation. Data is not subject to automated decision-making or profiling.
Detailed information on data processing and cookies can be found in our Privacy Policy.