1. Data Controller
The controller of your personal data is Farsta Sp. z o.o., registered office at ul. Zlota 2/19, 15-016 Bialystok, Poland, entered in the National Court Register under KRS number 0001207333, NIP (Tax ID): 966 221 40 41, REGON: 543333215 (hereinafter: "Controller").
For matters related to the protection of personal data, you may contact the Controller at: kontakt@farsta.pl.
2. Scope of Collected Data
The Controller collects and processes the following personal data:
- First and last name
- E-mail address
- Phone number
- Company name, Tax ID
- Correspondence or registered office address
- Data contained in correspondence sent to the Controller
- Technical data (IP address, browser type, operating system) collected automatically when using the website
3. Purposes of Data Processing
Your personal data is processed for the following purposes:
- Handling enquiries submitted through contact forms on the website (Art. 6(1)(f) GDPR — legitimate interest of the Controller)
- Performance of commercial contracts and cooperation with business partners (Art. 6(1)(b) GDPR — performance of a contract)
- Fulfilling legal obligations of the Controller, including tax and accounting obligations (Art. 6(1)(c) GDPR)
- Direct marketing of the Controller's products and services (Art. 6(1)(f) GDPR — legitimate interest)
- Pursuing or defending against claims (Art. 6(1)(f) GDPR)
- Website analytics and improving website functionality (Art. 6(1)(a) GDPR — user consent)
4. Legal Basis for Processing
The legal basis for processing personal data is:
- Art. 6(1)(a) GDPR — consent of the data subject (e.g., newsletter subscription or consent to analytical/marketing cookies)
- Art. 6(1)(b) GDPR — necessity for the performance of a contract or taking steps prior to entering into a contract
- Art. 6(1)(c) GDPR — necessity for compliance with a legal obligation
- Art. 6(1)(f) GDPR — legitimate interest of the Controller
5. Data Recipients
Your personal data may be shared with the following categories of recipients:
- IT and hosting service providers
- Analytics service providers (e.g., Google Analytics)
- Courier and logistics companies
- Accounting firms and legal advisors
- State authorities, where required by applicable law
The Controller does not transfer personal data to third countries outside the European Economic Area, unless it is necessary in connection with the use of technology providers that ensure appropriate safeguards (e.g., standard contractual clauses).
6. Data Retention Period
Personal data is stored for the period:
- Necessary to achieve the purposes for which it was collected
- Required by applicable law (e.g., tax regulations — 5 years)
- Until consent is withdrawn, if processing is based on consent
- Until an effective objection to processing for marketing purposes is raised
- For the limitation period for claims under the Civil Code
7. Rights of Data Subjects
You have the following rights:
- Right of access — the right to obtain information about data processing and a copy of your data
- Right to rectification — the right to request correction of inaccurate or completion of incomplete data
- Right to erasure — the right to request deletion of data ("right to be forgotten")
- Right to restriction of processing — the right to request restriction of data processing
- Right to data portability — the right to receive data in a structured format
- Right to object — the right to object to data processing based on legitimate interest
- Right to withdraw consent — at any time, without affecting the lawfulness of processing carried out before the withdrawal
To exercise the above rights, please contact us at: kontakt@farsta.pl.
You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
8. Additional Information
Providing personal data is voluntary but necessary to use contact forms, establish business cooperation or process orders.
The Controller does not make automated decisions, including profiling within the meaning of Art. 22 GDPR.
This privacy policy may be updated to ensure compliance with applicable law. Any significant changes will be communicated on the website.