Privacy Policy

§1. General information

  1. This policy applies to the website service operating at the URLs: https://fincorex.com and https://fincorex.online.
  2. The operator of the Service and the Controller of personal data is Fincorex sp. z o.o., with its registered office in Warsaw, ul. Skierniewicka 16/20, 01-230 Warszawa.
  3. The Operator’s contact e-mail address: contact@fincorex.com.
  4. The Operator is the Controller of your personal data with regard to data provided voluntarily on the Service.
  5. The Service uses personal data for the following purposes:
    • • running a newsletter,
    • • handling inquiries submitted via forms,
    • • providing ordered services,
    • • presenting offers or information.
  6. The Service collects information about users and their behavior in the following ways:
    • • through data voluntarily entered in forms, which is transferred to the Operator’s systems,
    • • by storing cookie files (“cookies”) on end devices.
  7. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (OJ L 119, 4.5.2016, p. 1), hereinafter referred to as the “GDPR”, taking into account the provisions of the Polish Act on Providing Services by Electronic Means and other generally applicable laws.

§2. Selected data protection methods used by the Operator

  1. Personal data entry areas are protected at the transmission layer (SSL certificate). As a result, personal data entered on the website is encrypted on the user’s computer and can only be read on the destination server.
  2. To protect data, the Operator regularly makes backup copies.
  3. An important element of data protection is the regular updating of the software used by the Operator to process personal data, which in particular means regular updates of programming components.

§3. Hosting

  1. The Service is hosted (technically maintained) on the servers of Webflow, Inc. (webflow.com).

§4. Your rights and additional information on how your data is used

  1. In certain situations, the Controller has the right to transfer your personal data to other recipients if this is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Controller. This applies to the following groups of recipients:
    • • the hosting company (Webflow, Inc.), under a data processing agreement,
    • • the provider of the system used to handle forms, communication and customer relations (HubSpot, Inc.), under a data processing agreement,
    • • authorized employees and associates who use the data to fulfill the purposes of the Service,
    • • companies providing marketing services to the Controller.
  2. Your personal data is processed by the Controller for no longer than is necessary to perform the related activities specified in separate regulations (e.g., on accounting). Data processed for marketing purposes will not be processed for longer than 3 years.
  3. You have the right to request from the Controller:
    • • access to your personal data,
    • • rectification of that data,
    • • erasure of that data,
    • • restriction of processing,
    • • data portability.
  4. Where processing is based on your consent, you have the right to withdraw it at any time. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.
  5. You have the right to object to the processing of personal data for the purposes of the legitimate interests pursued by the Controller (Art. 6(1)(f) GDPR), including profiling. The right to object cannot be exercised if there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, in particular grounds related to the establishment, exercise or defense of legal claims. You may object to processing for direct marketing purposes at any time.
  6. You have the right to lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.
  7. Providing personal data is voluntary, but necessary to handle the inquiry or provide the service to which the form relates.
  8. You may be subject to automated decision-making, including profiling, for the purpose of providing services under a concluded contract and for the purpose of direct marketing conducted by the Controller.
  9. In connection with the use of services of providers based in the USA (in particular Webflow, Inc., HubSpot, Inc. and Google LLC), your personal data may be transferred to third countries, i.e., outside the European Economic Area. Such transfers take place on the basis of a European Commission decision finding an adequate level of protection (EU-U.S. Data Privacy Framework) or of standard contractual clauses approved by the European Commission.

§5. Information in forms

  1. The Service collects information voluntarily provided by the user, including personal data, if provided.
  2. The Service may record information about connection parameters (timestamp, IP address).
  3. In some cases, the Service may store information that makes it easier to link form data with the e-mail address of the user filling in the form. In such a case, the user’s e-mail address appears in the URL of the page containing the form.
  4. Data provided in a form is processed for the purpose resulting from the function of the specific form, e.g., to handle a request, for business contact or for service registration. Form data is transferred to HubSpot, where the Controller handles inquiries and communication with customers. In each case, the context and description of the form clearly indicate its purpose.

§6. Controller logs

  1. Information about user behavior on the Service may be logged. This data is used to administer the Service.

§7. Key marketing techniques

  1. The Operator uses statistical analysis of website traffic via Google Analytics (Google LLC, based in the USA). The Operator does not transfer personal data to the operator of this service, only anonymized information. The service is based on the use of cookies on the user’s end device. The user can view and edit information about their preferences collected by the Google advertising network using the tool: https://adssettings.google.com
  2. The Operator uses remarketing techniques, including the LinkedIn Insight Tag, which make it possible to tailor advertising messages to the user’s behavior on the website. This may give the impression that the user’s personal data is used to track them, but in practice the Operator does not transfer to advertising operators any personal data that would allow the user to be directly identified. A technical prerequisite for such activities is that cookies are enabled.
  3. The Operator uses solutions that automate the operation of the Service in relation to users, e.g., solutions that allow an e-mail to be sent to a user after they visit a specific subpage, provided that the user has consented to receive commercial information from the Operator.

§8. Information about cookies

  1. The Service uses cookies.
  2. Cookies are IT data, in particular text files, which are stored on the Service User’s end device and are intended for using the Service’s web pages. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.
  3. The entities that place cookies on the Service User’s end device and access them are the Service Operator and the entities indicated in point 8.
  4. Cookies are used for the following purposes:
    • • ensuring the proper operation of the Service, including remembering the user’s cookie settings and preferences,
    • • achieving the purposes set out above in the section “Key marketing techniques”.
  5. Two main types of cookies are used on the Service: “session” cookies and “persistent” cookies. Session cookies are temporary files stored on the User’s end device until the User leaves the website or closes the software (web browser). Persistent cookies are stored on the User’s end device for the time specified in the cookie parameters or until they are deleted by the User.
  6. Web browsing software (a web browser) usually allows cookies to be stored on the User’s end device by default. Service Users can change these settings. The web browser allows cookies to be deleted. Cookies can also be blocked automatically. Detailed information is available in the help section or documentation of the web browser.
  7. Restricting the use of cookies may affect some of the functionalities available on the Service’s web pages.
  8. Cookies placed on the Service User’s end device may also be used by entities cooperating with the Service Operator, in particular: Google (Google LLC, based in the USA), LinkedIn (LinkedIn Ireland Unlimited Company) and HubSpot (HubSpot, Inc., based in the USA).

§9. Managing cookies – how to give and withdraw consent in practice

  1. If users do not want to receive cookies, they can change their browser settings or use the “Manage cookies” option available in the Service’s footer. Please note that disabling cookies necessary for security processes and for maintaining user preferences may make it difficult, and in extreme cases impossible, to use the website.
  2. To manage cookie settings, select the web browser you use from the list below and follow the instructions:

    Mobile devices: