Privacy Policy

This Privacy Policy sets out the rules for processing personal data and using cookies on the website available at fortotech.pl (the “Website"), operated by FORTOTECH Sp. z o.o. We respect the privacy of Website users and process data in accordance with applicable law, in particular Regulation (EU) 2016/679 of the European Parliament and of the Council (the “GDPR").

1. Data controller

The controller of personal data is:

2. Purposes and legal bases of processing

We process personal data for the following purposes:

• handling enquiries sent via the contact form and conducting correspondence — based on the data subject's consent (Art. 6(1)(a) GDPR) and the controller's legitimate interest in responding (Art. 6(1)(f) GDPR);
• establishing and conducting commercial cooperation and taking steps at the data subject's request prior to entering into a contract (Art. 6(1)(b) GDPR);
• fulfilling the controller's legal obligations (Art. 6(1)(c) GDPR);
• ensuring the security and proper operation of the Website, and analytics and statistics — based on the controller's legitimate interest (Art. 6(1)(f) GDPR), and for cookies requiring consent — based on consent (Art. 6(1)(a) GDPR).

3. Scope of data processed

Through the contact form we process data voluntarily provided by the data subject, in particular: full name, company or institution name, e-mail address, telephone number and the content of the message. In connection with the use of the Website, we may also process technical data (e.g. IP address, browser type, cookie data).

4. Data retention period

• correspondence and enquiry data — for the time necessary to handle the matter and then until any claims become time-barred or consent is withdrawn;
• data related to legal obligations — for the period required by law;
• cookie data — for the period indicated in the cookies section or until deleted by the user.

5. Data recipients

Data may be transferred to entities supporting the controller's operations, such as providers of hosting, IT, e-mail, legal and accounting services — only to the extent necessary and on the basis of appropriate data processing agreements. In particular, to handle the contact form we use the Web3Forms service, which, acting as a processor, receives the message content and forwards it to the controller's e-mail address. Data may also be disclosed to authorities entitled under the law.

6. Transfers outside the EEA

As a rule, data is not transferred outside the European Economic Area. Should such a transfer prove necessary, it will take place only with the safeguards required by the GDPR.

7. Rights of data subjects

Every data subject has the right to:

• access their data and obtain a copy of it;
• rectify (correct) their data;
• erase their data (the “right to be forgotten");
• restrict processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time — without affecting the lawfulness of processing carried out before its withdrawal.

To exercise these rights, please contact us at: biuro@fortotech.pl.

8. Right to lodge a complaint

The data subject has the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) — if they consider that the processing of their data infringes the GDPR.

9. Voluntary provision of data

Providing data is voluntary but necessary to handle an enquiry sent via the contact form or to establish cooperation. Failure to provide data may make it impossible to respond.

10. Automated decisions and profiling

Data is not used for automated decision-making, including profiling that produces legal effects concerning the data subject or similarly significantly affects them.

11. Cookies

The Website uses cookies (small text files stored on the user's device) and similar technologies. We use:

• necessary cookies — required for the proper operation of the Website and to remember the user's cookie consent choice; they do not require consent;
• analytics and statistics cookies — help us understand how the Website is used; installed only after consent is given.

The user may change cookie settings in their browser at any time — including blocking or deleting them. Restricting cookies may affect some Website features. Consent to analytics cookies can be withdrawn by clearing the stored site data in the browser.

12. Changes to the Privacy Policy

The controller may update this Privacy Policy in connection with changes in law or in the operation of the Website. The current version is published on this page together with the date of the last update.