Privacy Policy

Privacy Policy

Last updated: February 2026

Finonity is a brand of Szabłowski & Wspólnicy Sp. z o.o., registered at ul. Marszałkowska 78/80, 00-517 Warsaw, Poland. We operate the website finonity.com (the “Site”). This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our Site, in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the California Privacy Rights Act (“CPRA”), and other applicable data protection laws.

1. Data Controller

The data controller responsible for your personal data is:

Finonity

a brand of Szabłowski & Wspólnicy Sp. z o.o.

ul. Marszałkowska 78/80, 00-517 Warsaw, Poland

Email: [email protected]

If you have any questions about how we process your personal data, or wish to exercise your data protection rights, please contact us at the address above.

2. Information We Collect

Information You Provide Voluntarily

We may collect personal data you voluntarily provide when you:

  • Subscribe to our newsletter
  • Contact us via email or contact forms
  • Leave comments on articles
  • Create an account (if applicable)

This information may include your name, email address, and any other information you choose to provide.

Information Collected Automatically

When you visit our Site, we automatically collect certain technical and usage data through cookies and similar technologies, including:

  • IP address (anonymized where required by law)
  • Browser type and version
  • Operating system
  • Referring website
  • Pages viewed and time spent on pages
  • Date and time of visit
  • Click patterns and navigation paths
  • Device type and screen resolution

3. Lawful Bases for Processing

Under the GDPR, we process your personal data only where we have a valid legal basis. The lawful bases we rely on are:

Where we rely on legitimate interest, we have conducted a balancing test to ensure our interests do not override your fundamental rights and freedoms. You may object to processing based on legitimate interest at any time by contacting us.

4. Cookies and Tracking Technologies

What Are Cookies?

Cookies are small text files stored on your device when you visit a website. They help the Site function properly, remember your preferences, and provide analytics data.

Consent for Cookies

When you first visit our Site, we present a cookie consent banner that allows you to accept or reject non-essential cookies. You may change your preferences at any time through our cookie settings panel. Essential cookies do not require consent as they are strictly necessary for Site operation.

Types of Cookies We Use

Managing Cookies

In addition to our cookie consent banner, you can control cookies through your browser settings:

  • Chrome: Settings → Privacy and Security → Cookies
  • Firefox: Settings → Privacy & Security → Cookies
  • Safari: Preferences → Privacy → Cookies
  • Edge: Settings → Privacy → Cookies

Disabling certain cookies may affect Site functionality. Rejecting analytics and advertising cookies will not affect your ability to use the Site.

5. How We Use Your Information

We use the personal data we collect to:

  • Provide, operate, and maintain the Site
  • Send newsletters and editorial updates (only with your explicit opt-in consent)
  • Respond to your inquiries and support requests
  • Analyze usage patterns to improve our content and user experience
  • Detect, prevent, and address fraud, abuse, or security issues
  • Comply with applicable legal obligations

We do not sell your personal data to third parties. We do not share your personal data for cross-context behavioral advertising unless you have given explicit consent.

6. Third-Party Services

Google Analytics

We use Google Analytics 4 to analyze Site traffic. We have enabled IP anonymization, meaning your full IP address is never stored by Google. Google Analytics uses cookies to collect aggregate, anonymized data about website usage patterns.

For more information, see Google’s Privacy Policy. You can opt out by installing the Google Analytics Opt-out Browser Add-on.

Advertising Partners

We may use third-party advertising services to display ads on the Site. These services may use cookies — subject to your consent — to serve ads based on your browsing history. You can opt out of personalized advertising at:

Embedded Content

Articles on our Site may include embedded content (e.g., TradingView charts, videos, social media widgets) from third-party websites. Embedded content behaves exactly as if you visited those websites directly — they may collect data about you, use cookies, and monitor your interaction with the embedded content, subject to their own privacy policies.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.

Data CategoryRetention Period
Contact form submissions2 years from submission
Newsletter subscriptionsUntil you unsubscribe, plus 30 days
Analytics data (Google Analytics)14 months (our configuration)
Comment dataDuration of publication, or until you request deletion
Cookie consent records3 years (to demonstrate compliance)
Account data (if applicable)Duration of account, plus 90 days after deletion

After the applicable retention period expires, we will securely delete or anonymize your personal data.

8. Your Rights (GDPR — EEA/UK)

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the GDPR and UK GDPR:

AccessRequest a copy of the personal data we hold about you.
RectificationRequest correction of inaccurate or incomplete data.
ErasureRequest deletion of your personal data where no legal basis for continued processing exists.
Restrict ProcessingRequest that we limit how we use your data in certain circumstances.
Data PortabilityReceive your data in a structured, machine-readable format.
ObjectObject to processing based on legitimate interest or for direct marketing.
Withdraw ConsentWithdraw consent at any time where processing is based on consent. Withdrawal does not affect prior lawful processing.
Automated DecisionsNot be subject to decisions based solely on automated processing, including profiling, that produce legal effects.

To exercise any of these rights, please email [email protected]. We will respond within 30 days. We may request verification of your identity before processing your request.

Right to lodge a complaint: If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with a supervisory authority. For Poland, the relevant authority is the Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warsaw — uodo.gov.pl.

9. Your Rights (CPRA — California)

If you are a California resident, you have specific rights under the California Privacy Rights Act (CPRA, as amended from CCPA):

  • Right to Know — what personal information is collected, used, and disclosed
  • Right to Delete — request deletion of your personal information
  • Right to Correct — request correction of inaccurate personal information
  • Right to Opt Out — of the sale or sharing of personal information
  • Right to Limit — use and disclosure of sensitive personal information
  • Right to Non-Discrimination — for exercising any of your privacy rights

We do not sell or share personal information as defined by the CPRA. To exercise your California privacy rights, email [email protected] or submit a request through an authorized agent with appropriate written authorization.

10. Global Privacy Control

We honor the Global Privacy Control (GPC) signal. If your browser or device transmits a GPC signal, we will treat it as a valid opt-out request for the sale or sharing of personal information and for targeted advertising, to the extent required by applicable law (including the CPRA, Colorado Privacy Act, Connecticut Data Privacy Act, and other state laws that recognize GPC).

11. Children’s Privacy

Our Site is not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will take steps to delete that information promptly. If you believe a child has provided us with personal data, please contact us at [email protected].

12. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include TLS/SSL encryption for data in transit, access controls, regular security reviews, and secure data storage practices.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your personal data, we cannot guarantee its absolute security.

13. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including the United States, where our third-party service providers (such as Google and hosting providers) operate.

Where such transfers occur, we ensure that appropriate safeguards are in place in accordance with the GDPR, including:

  • Adequacy decisions — transfers to countries recognized by the European Commission as providing an adequate level of data protection (e.g., the EU–U.S. Data Privacy Framework, renewed December 2025)
  • Standard Contractual Clauses (SCCs) — approved by the European Commission, incorporated into our contracts with service providers where no adequacy decision exists

You may request a copy of the safeguards we use for international transfers by contacting us at [email protected].

14. Data Breach Notification

In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of the breach, as required by Article 33 of the GDPR. Where the breach is likely to result in a high risk to you personally, we will also notify you directly without undue delay, in accordance with Article 34 of the GDPR.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by posting the updated Privacy Policy on this page and updating the “Last updated” date at the top. For significant changes, we may also provide notice via email or a prominent banner on the Site.

We encourage you to review this Privacy Policy periodically.

17. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data protection rights, or have concerns about how we handle your personal data, please contact us:

Finonity

a brand of Szabłowski & Wspólnicy Sp. z o.o.

ul. Marszałkowska 78/80, 00-517 Warsaw, Poland

Email: [email protected]

© 2026 Finonity. All rights reserved.