Privacy policy

The controller of your personal data is Biuro Rachunkowe Fortunka Renata Porębiak, a sole proprietorship (jednoosobowa działalność gospodarcza) entered in the CEIDG register on 1 September 2026, NIP 7822502820, REGON 545625034, based in Warsaw, Poland. For data protection matters contact office@fortunka.com.pl or +48 883 191 092. Postal address: ul. Nowy Świat 33 lok. 13, 00-029 Warsaw, Poland.

The controller has not appointed a Data Protection Officer. In all matters concerning the processing of your personal data and the exercise of your rights, you may contact the controller directly at office@fortunka.com.pl.

Through the contact form we collect only what you enter yourself: your name, e-mail address, telephone number and the content of your message. If you contact us directly by e-mail or phone we process the data contained in that correspondence. The site collects nothing else automatically beyond the technical data written to the server log (see the cookies section).

We process the data in order to answer your enquiry and, where relevant, to prepare an offer of cooperation. Legal basis: Art. 6(1)(f) GDPR — our legitimate interest in receiving and answering enquiries addressed to us, and in taking steps that may lead to a working relationship. If your enquiry leads to a contract, we process the data under Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract), and the accounting records that result from it under Art. 6(1)(c) GDPR (a legal obligation under Polish tax and accounting law).

We keep enquiry correspondence for as long as the exchange is ongoing and for 12 months after it ends, so that we can pick the matter up again if you come back to us. If the enquiry leads to a contract, the resulting documentation is kept for the period required by Polish tax and accounting law — as a rule 5 years counted from the end of the calendar year in which the tax obligation arose. Where processing rests on our legitimate interest, we stop it if you raise a valid objection.

Data may be entrusted to the providers that support us technically: Google (Firebase Hosting — serving this website, and receiving the contact form, which is processed in its Warsaw region), Cloudflare (DNS, traffic protection and the anti-spam verification of the contact form — Cloudflare Turnstile) and Zoho Corporation (sending and storing the notification e-mail — our mailbox). Each acts as a processor under a data processing agreement and may use the data only on our instructions. We do not sell or share data for marketing purposes. The typefaces used on this site are served by Google LLC from fonts.googleapis.com and fonts.gstatic.com — your browser contacts them when each page loads, which transmits your IP address to Google.

Yes — part of your data is transferred outside the European Economic Area. Our e-mail mailbox is operated by Zoho Corporation in its data centre in the United States, so the content of your enquiry is stored there. The form itself is received and processed in Google’s Warsaw region, so your enquiry is handled inside the EEA before it is delivered to that mailbox. Google (Firebase Hosting) and Cloudflare are nonetheless United States companies and may process technical data outside the EEA. These transfers take place on the basis of the European Commission’s standard contractual clauses and, for providers holding the relevant certification, the EU–US Data Privacy Framework. You may request a copy of the safeguards applied by writing to office@fortunka.com.pl.

You have the right to: access your data and receive a copy, rectify it, erase it, restrict its processing, port it, object to processing, and — where processing is based on consent — withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand. To exercise these rights write to office@fortunka.com.pl.

If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.

Providing your data is voluntary but necessary for us to answer your enquiry — without contact details we cannot reply to you.

Your data is not used for automated decision-making or profiling.

This site currently uses no analytics or marketing cookies and no tracking tools. Because of that, no cookie-consent banner is required. The contact page offers a Google map, but nothing is loaded from Google until you press the button on it; if you do, Google receives your IP address and may set its own cookies in your browser, which is why that choice is left to you. The only information recorded automatically is what the server and our traffic provider write to their logs — IP address, browser type and the time of the request — which is necessary to serve the site securely and is kept only briefly, for security and diagnostic purposes. If analytics is introduced in future, this section will be updated and your consent will be collected before any non-essential cookie is set.