Privacy policy

This policy contains important information about who we are, how and why we collect, store, use and share personal information, your rights regarding your personal data, and how to contact us or the relevant supervisory authority if you have any concerns.

Introduction

Transparency in the management of personal data is a core value for Fotando Solutions Sp. z o.o. ("Fotando", "we", "us", or "our").

Fotando is committed to ensuring the security and protection of the personal information we process and to maintaining a consistent approach to data protection in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Polish data protection laws.

This policy explains how we collect, use, store, and protect your personal information when you visit our website, contact us, or schedule a meeting.

Collection and Use of Personal Data

The following types of personal information may be collected, stored, and used:

Information you provide when contacting us, including your name, email address, company name, professional position, and message content.

Information provided when scheduling a meeting, including your name, email address, selected meeting date and time, and other information you voluntarily provide.

Technical information processed when you visit our website, which may include your IP address, browser type, device information, and technical request data.

Any other personal information that you voluntarily provide to us.
‍

Personal information is used for the following purposes:

Administering and securing our website and business operations.

Responding to inquiries and communicating with potential clients.

Scheduling and managing meetings.

Maintaining business contact records and managing potential cooperation.

Complying with applicable legal obligations and protecting legal claims.
‍

The legal bases for processing personal data under Article 6 GDPR include:

Article 6(1)(b): Processing necessary to take steps at your request before entering into a contract or to perform a contract.

Article 6(1)(f): Our legitimate interests in responding to business inquiries, managing professional relationships, and securing our website.

Article 6(1)(c): Processing necessary to comply with applicable legal obligations.

Where processing requires consent, we rely on Article 6(1)(a) GDPR.

Providing personal information is generally voluntary. However, certain details, such as your email address and scheduling information, are necessary for us to respond to inquiries or arrange meetings.

We do not currently use personal information collected through our website for targeted advertising or automated decision-making that produces legal or similarly significant effects.

Our website is built using Webflow. Third-party services integrated into the website may use cookies or similar technologies. Where non-essential tracking technologies require consent under applicable law, such consent must be obtained before they are used.

Transfer of Personal Data

We do not sell personal data or disclose it to unrelated third parties for their independent marketing purposes.

To operate our website and manage business communications, we use the following service providers:

Webflow: Website hosting and technical infrastructure.

zcal: Online meeting scheduling.

Pipedrive: Customer relationship management (CRM).

Google Gmail: Email correspondence and communication.

Personal information submitted through zcal is transferred to Pipedrive to manage meeting records and business communications.

Within Fotando, direct access to business contact information is limited to the designated authorized company representative. Our external service providers may process personal data as necessary to deliver their services.

Some of these providers may process personal data outside the European Economic Area (EEA), including in the United States. Where applicable, international transfers are subject to safeguards recognized under GDPR, including adequacy decisions or the European Commission's Standard Contractual Clauses.

We may also disclose personal information where required by law or a competent public authority.

Meeting Bookings and Email Inquiries

Personal information collected through meeting bookings and email correspondence is used to respond to requests, arrange appointments, and manage potential business relationships.

We retain personal data relating to inquiries, meetings, and associated business correspondence for 12 months, unless a longer period is required by applicable law or necessary for the establishment, exercise, or defense of legal claims.

After the applicable retention period, personal information must be deleted or anonymized unless a lawful reason for continued retention exists.

We do not currently operate a separate website contact form or marketing newsletter subscription.

Rights as a Data Subject

If we process your personal data, you have the following rights under GDPR, subject to applicable legal conditions:

Right of access: You may request access to the personal data we hold about you.

Right to rectification: You may request correction of inaccurate or incomplete personal data.

Right to erasure: You may request deletion of your personal data where applicable.

Right to restriction: You may request restriction of processing in certain circumstances.

Right to object: You may object to processing based on our legitimate interests.

Right to data portability: You may request certain personal data in a structured, commonly used, machine-readable format where applicable.

Right to withdraw consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of previous processing.

Right to lodge a complaint: You may submit a complaint to a competent data protection supervisory authority.

You can exercise your rights by contacting us at:

vlad@fotando.global

We may request additional information where reasonably necessary to verify your identity.

We will respond to requests in accordance with GDPR requirements and applicable deadlines.

Security

Fotando takes the confidentiality and security of personal information seriously.

We take appropriate technical and organizational measures to protect personal information against unauthorized access, alteration, disclosure, loss, or destruction.

Access to personal information within our company is restricted to the authorized representative responsible for managing business communications.

We use established external service providers for website hosting, meeting scheduling, CRM management, and email correspondence.

Change to our Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technologies, data processing practices, or applicable legal requirements.

Any updates will be published on this page. We encourage you to review this policy periodically.

Contacts

The data controller responsible for processing personal information under this Privacy Policy is:

FOTANDO SOLUTIONS SP. Z O.O.

Registered address: ul. Sucha 3, 50-086 Wrocław, Poland

KRS: 0000965452

NIP: 8992922421

Email: vlad@fotando.global

Website: https://www.fotando.global

Questions, comments, and requests regarding this Privacy Policy may be addressed to vlad@fotando.global.

If you believe that the processing of your personal data violates applicable data protection laws, you have the right to lodge a complaint with the Polish supervisory authority:

Prezes Urzędu Ochrony Danych Osobowych (UODO)

Website: https://uodo.gov.pl

‍