Privacy Policy (GDPR)

We inform you that the data controller is the company FNC Sp. z o.o., ul. Domaniewska 47/10, 02-672 Warsaw, KRS 0000713787, REGON 369306629, NIP 7010798316 (hereinafter referred to as the Administrator).

Personal data will be processed by the Administrator, in particular:

1) for the purpose of:

• undertaking actions before concluding a contract at the request of the person whose data is involved or performing a contract to which the person is a party (data necessary for concluding the contract is indicated on the contract form),
• fulfilling a legal obligation incumbent on the Administrator;
• marketing of own products or services,
• organizing and conducting marketing campaigns,
• pursuing or securing claims,
• conducting analysis of service quality;

2) based on separate consent, for the purpose of:

• direct marketing of the Administrator’s own services;
• direct marketing of products or services of entities cooperating with the Administrator, whereby customer data will not be disclosed to third parties, and the information will be conveyed by the Administrator. Direct marketing may be carried out by the Administrator using electronic communication means (e.g., SMS, MMS, email), telecommunications terminal devices (phone).

Period during which personal data will be stored:

1) Personal data processed for the purpose of concluding or performing a contract and fulfilling the legal obligation of the Administrator will be stored for the duration of the contract, and after its expiration for the period necessary to:

• post-sale customer service (e.g., handling complaints),
• secure or pursue any claims due to the Administrator,
• fulfill the legal obligation of the Administrator (e.g., arising from tax or accounting regulations);

2) Personal data processed for the marketing of the Administrator’s own services based on legitimate legal interest will be processed until an objection is raised by the person the data concerns;

3) Personal data processed based on separate consent will be stored until its withdrawal.

Rights of the person whose personal data is concerned:

• the right to access their personal data, i.e., the right to obtain confirmation whether the Administrator processes the data and information regarding such processing,
• the right to request the Administrator to delete the data,
• the right to rectify the data if the data processed by the Administrator is incorrect or incomplete,
• the right to request the Administrator to restrict data processing,
• the right to object to the processing of data based on the legitimate interest of the Administrator or to processing for direct marketing purposes,
• the right to withdraw consent at any time (without affecting the lawfulness of processing carried out based on consent before its withdrawal),
• the right to lodge a complaint with the Polish supervisory authority or the supervisory authority of another European Union member state competent for the place of ordinary residence or work of the person the data concerns, or for the place of the alleged GDPR violation.