Privacy Policy
Finonity is a brand of Szabłowski & Wspólnicy Sp. z o.o., registered at ul. Marszałkowska 78/80, 00-517 Warsaw, Poland. We operate the website finonity.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Site, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Privacy Rights Act (“CPRA”), and other applicable data protection laws.
- Data Controller
- Information We Collect
- Lawful Bases for Processing
- Cookies and Tracking Technologies
- How We Use Your Information
- Third-Party Services
- Data Retention
- Your Rights (GDPR — EEA/UK)
- Your Rights (CPRA — California)
- Global Privacy Control
- Children’s Privacy
- Data Security
- International Data Transfers
- Data Breach Notification
- Links to Other Websites
- Changes to This Privacy Policy
- Contact Us
1. Data Controller
The data controller responsible for your personal data is:
Finonity
a brand of Szabłowski & Wspólnicy Sp. z o.o.
ul. Marszałkowska 78/80, 00-517 Warsaw, Poland
Email: [email protected]
If you have any questions about how we process your personal data, or wish to exercise your data protection rights, please contact us at the address above.
2. Information We Collect
Information You Provide Voluntarily
We may collect personal data you voluntarily provide when you:
- Subscribe to our newsletter
- Contact us via email or contact forms
- Leave comments on articles
- Create an account (if applicable)
This information may include your name, email address, and any other information you choose to provide.
Information Collected Automatically
When you visit our Site, we automatically collect certain technical and usage data through cookies and similar technologies, including:
- IP address (anonymized where required by law)
- Browser type and version
- Operating system
- Referring website
- Pages viewed and time spent on pages
- Date and time of visit
- Click patterns and navigation paths
- Device type and screen resolution
3. Lawful Bases for Processing
Under the GDPR, we process your personal data only where we have a valid legal basis. The lawful bases we rely on are:
| Purpose | Lawful Basis (Art. 6 GDPR) |
|---|---|
| Providing and maintaining the Site | Legitimate interest |
| Sending newsletters | Consent (opt-in) |
| Responding to inquiries | Contract performance / legitimate interest |
| Analytics and Site improvement | Legitimate interest / consent (for cookies) |
| Advertising (if applicable) | Consent |
| Fraud detection and prevention | Legitimate interest |
| Compliance with legal obligations | Legal obligation |
4. Cookies and Tracking Technologies
What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help the Site function properly, remember your preferences, and provide analytics data.
Consent for Cookies
When you first visit our Site, we present a cookie consent banner that allows you to accept or reject non-essential cookies. You may change your preferences at any time through our cookie settings panel. Essential cookies do not require consent as they are strictly necessary for Site operation.
Types of Cookies We Use
| Category | Purpose | Examples | Duration |
|---|---|---|---|
| Essential | Required for core Site functionality | Session management, security, load balancing | Session / up to 1 year |
| Analytics | Understanding visitor behavior | Google Analytics 4 (with IP anonymization) | Up to 26 months |
| Advertising | Serving relevant ads, measuring campaign performance | Google Ad Manager, third-party ad networks | Up to 13 months |
| Preference | Remembering your settings | Language, display preferences, cookie consent state | Up to 1 year |
Managing Cookies
In addition to our cookie consent banner, you can control cookies through your browser settings:
- Chrome: Settings → Privacy and Security → Cookies
- Firefox: Settings → Privacy & Security → Cookies
- Safari: Preferences → Privacy → Cookies
- Edge: Settings → Privacy → Cookies
Disabling certain cookies may affect Site functionality. Rejecting analytics and advertising cookies will not affect your ability to use the Site.
5. How We Use Your Information
We use the personal data we collect to:
- Provide, operate, and maintain the Site
- Send newsletters and editorial updates (only with your explicit opt-in consent)
- Respond to your inquiries and support requests
- Analyze usage patterns to improve our content and user experience
- Detect, prevent, and address fraud, abuse, or security issues
- Comply with applicable legal obligations
We do not sell your personal data to third parties. We do not share your personal data for cross-context behavioral advertising unless you have given explicit consent.
6. Third-Party Services
Google Analytics
We use Google Analytics 4 to analyze Site traffic. We have enabled IP anonymization, meaning your full IP address is never stored by Google. Google Analytics uses cookies to collect aggregate, anonymized data about website usage patterns.
For more information, see Google’s Privacy Policy. You can opt out by installing the Google Analytics Opt-out Browser Add-on.
Advertising Partners
We may use third-party advertising services to display ads on the Site. These services may use cookies — subject to your consent — to serve ads based on your browsing history. You can opt out of personalized advertising at:
- Google Ads Settings
- Network Advertising Initiative
- Digital Advertising Alliance
- Your Online Choices (EU)
Embedded Content
Articles on our Site may include embedded content (e.g., TradingView charts, videos, social media widgets) from third-party websites. Embedded content behaves exactly as if you visited those websites directly — they may collect data about you, use cookies, and monitor your interaction with the embedded content, subject to their own privacy policies.
7. Data Retention
We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
| Data Category | Retention Period |
|---|---|
| Contact form submissions | 2 years from submission |
| Newsletter subscriptions | Until you unsubscribe, plus 30 days |
| Analytics data (Google Analytics) | 14 months (our configuration) |
| Comment data | Duration of publication, or until you request deletion |
| Cookie consent records | 3 years (to demonstrate compliance) |
| Account data (if applicable) | Duration of account, plus 90 days after deletion |
After the applicable retention period expires, we will securely delete or anonymize your personal data.
8. Your Rights (GDPR — EEA/UK)
If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR and UK GDPR:
To exercise any of these rights, please email [email protected]. We will respond within 30 days. We may request verification of your identity before processing your request.
9. Your Rights (CPRA — California)
If you are a California resident, you have specific rights under the California Privacy Rights Act (CPRA, as amended from CCPA):
- Right to Know — what personal information is collected, used, and disclosed
- Right to Delete — request deletion of your personal information
- Right to Correct — request correction of inaccurate personal information
- Right to Opt Out — of the sale or sharing of personal information
- Right to Limit — use and disclosure of sensitive personal information
- Right to Non-Discrimination — for exercising any of your privacy rights
We do not sell or share personal information as defined by the CPRA. To exercise your California privacy rights, email [email protected] or submit a request through an authorized agent with appropriate written authorization.
10. Global Privacy Control
We honor the Global Privacy Control (GPC) signal. If your browser or device transmits a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information and for targeted advertising, to the extent required by applicable law (including the CPRA, Colorado Privacy Act, Connecticut Data Privacy Act, and other state laws that recognize GPC).
11. Children’s Privacy
Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].
12. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include TLS/SSL encryption for data in transit, access controls, regular security reviews, and secure data storage practices.
However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.
13. International Data Transfers
Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our third-party service providers (such as Google and hosting providers) operate.
Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with the GDPR, including:
- Adequacy decisions — transfers to countries recognized by the European Commission as providing an adequate level of data protection (e.g., the EU–U.S. Data Privacy Framework, renewed December 2025)
- Standard Contractual Clauses (SCCs) — approved by the European Commission, incorporated into our contracts with service providers where no adequacy decision exists
You may request a copy of the safeguards we use for international transfers by contacting us at [email protected].
14. Data Breach Notification
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay, in accordance with Article 34 of the GDPR.
15. Links to Other Websites
Our Site may contain links to third-party websites that are not operated by us. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites. We encourage you to review the privacy policy of every website you visit.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the “Last updated” date at the top. For significant changes, we may also provide notice via email or a prominent banner on the Site.
We encourage you to review this Privacy Policy periodically.
17. Contact Us
If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:
Finonity
a brand of Szabłowski & Wspólnicy Sp. z o.o.
ul. Marszałkowska 78/80, 00-517 Warsaw, Poland
Email: [email protected]