Privacy Policy

The Twój StartUp Foundation collects information about individuals using the Website, referred to collectively below as Users.

Users’ personal data is collected when the contact form on the Website is used, for the purpose of performing a service provided electronically.
Legal basis: necessity to perform the contact-form service agreement (Art. 6(1)(b) GDPR).

When using the contact form, the User provides the following data:

• name
• email address
• phone number
• subject of interest and message content

While using the Website, additional information may be collected, in particular: the IP address assigned to the User’s device or the external IP address of the Internet provider, domain name, browser type, access time, and operating system type.

Navigational data may also be collected from Users, including information about links and references they choose to click, or other actions taken on the Website.
Legal basis: legitimate interest (Art. 6(1)(f) GDPR), consisting of facilitating the use of electronically supplied services and improving the functionality of those services.

Providing personal data to the Twój StartUp Foundation is voluntary.

1. Users’ personal data is transferred to service providers used by the Twój StartUp Foundation in operating the Website. Depending on contractual arrangements and circumstances, these service providers either follow the instructions of the Twój StartUp Foundation regarding the purposes and methods of processing this data (processors), or independently determine the purposes and methods of processing it (controllers).

1.1. Processors. The Twój StartUp Foundation uses providers that process personal data solely on the instructions of the Twój StartUp Foundation. These include, among others, providers of website hosting services, traffic delivery and protection through Cloudflare, and delivery of messages submitted through the contact form via Resend.

1.2. Controllers. The Twój StartUp Foundation uses providers that do not act solely on instructions and independently determine the purposes and means of using Users’ personal data — including Google Analytics, Google Ads and YouTube (Google Ireland Limited), and Meta Pixel (Meta Platforms Ireland Limited). Analytics and advertising tools are activated only in accordance with the choice made in the cookie settings.

2. Location. Service providers are based mainly in Poland and other countries of the European Economic Area (EEA). Some providers may also process data outside the EEA using transfer mechanisms required by data-protection law, including standard contractual clauses where applicable.

3. Users’ personal data is retained:

3.1. Where the basis for processing personal data is consent, the User’s personal data is processed by the Twój StartUp Foundation until the consent is withdrawn, and after withdrawal, for a period corresponding to the statute of limitations for claims that the Twój StartUp Foundation may raise or that may be raised against it. Unless a specific provision states otherwise, the limitation period is six years, and for claims for periodic performance and claims related to business activity — three years.

3.2. Where the basis for processing data is the performance of a contract, the User’s personal data is processed by the Twój StartUp Foundation for as long as necessary to perform the contract, and afterwards for a period corresponding to the statute of limitations for claims (as in point 3.1 above).

4. Upon request, the Twój StartUp Foundation discloses personal data to authorised state bodies, in particular units of the Prosecutor’s Office, the Police, the President of the Personal Data Protection Office, the President of the Office of Competition and Consumer Protection, or the President of the Office of Electronic Communications.

The Website uses small files called cookies. These are saved by the Twój StartUp Foundation on the end device of a person visiting the Website, if the web browser allows it. A cookie file usually contains the name of the domain it comes from, its “expiry time,” and a unique, randomly selected number identifying the file.

The Twój StartUp Foundation uses two types of cookies:

• Session cookies — after the browser session ends or the computer is switched off, the saved information is deleted from the device’s memory. The session-cookie mechanism does not allow the collection of any personal data or any confidential information from Users’ computers.
• Persistent cookies — these are stored in the memory of the User’s end device and remain there until deleted or expired. The persistent-cookie mechanism does not allow the collection of any personal data or any confidential information from Users’ computers.

The Website uses the following categories of technology:

• Necessary — saving the cookie-settings choice, Cloudflare Turnstile form protection and functions required for the Website to operate securely. These are always active.
• Analytics — Google Analytics, which after consent helps measure visits, traffic sources and how the Website is used.
• Advertising — Google Ads and Meta Pixel, which after consent measure campaign performance and a successful form submission as a conversion event.
• External media — YouTube videos are embedded in privacy-enhanced mode from youtube-nocookie.com.

Analytics and advertising measurement are disabled by default. The User can accept all optional technologies, reject them, or choose individual categories. Consent can be changed or withdrawn at any time through the “Cookie settings” link in the footer. Withdrawal does not affect the lawfulness of processing carried out before it was withdrawn.

The Twój StartUp Foundation may collect Users’ IP addresses. An IP address is a number assigned to the device of a person visiting the Website by their Internet service provider. In most cases it is assigned dynamically and is commonly treated as non-personal identifying information. The IP address is used by the Twój StartUp Foundation to diagnose technical server problems and for security purposes.

1. Right to withdraw consent — legal basis: Art. 7(3) GDPR. The User has the right to withdraw any consent given at any time. Withdrawal takes effect from the moment of withdrawal and does not affect processing carried out lawfully before the withdrawal. Withdrawing consent does not carry any negative consequences for the User, but may make it impossible to continue using services or functionalities that, by law, may only be provided with consent.

2. Right to object to processing — legal basis: Art. 21 GDPR. The User has the right to object at any time — for reasons related to their particular situation — to the processing of their personal data, where the Twój StartUp Foundation processes their data on the basis of a legitimate interest. If the User’s objection proves justified and the Foundation has no other legal basis for processing, the User’s personal data will be deleted.

3. Right to erasure (“right to be forgotten”) — legal basis: Art. 17 GDPR. The User has the right to request the deletion of all or some of their personal data, e.g. where the data is no longer necessary for the purposes for which it was collected, consent has been withdrawn, an objection has been raised, or the data is being processed unlawfully. Despite a deletion request, the Foundation may retain certain data to the extent necessary to establish, pursue, or defend claims, or to comply with a legal obligation.

4. Right to restriction of processing — legal basis: Art. 18 GDPR. The User has the right to request restriction of the processing of their personal data, e.g. when they contest its accuracy, processing is unlawful, the data is no longer needed by the controller but is needed by the User to defend claims, or they have objected to processing.

5. Right of access to data — legal basis: Art. 15 GDPR. The User has the right to obtain confirmation from the Controller as to whether their personal data is being processed and, if so, to access it, to obtain information about the purposes and principles of processing, and to obtain a copy of their data.

6. Right to rectification — legal basis: Art. 16 GDPR. The User has the right to request prompt rectification of inaccurate personal data concerning them, by sending a request to the address indicated below.

7. Right to data portability — legal basis: Art. 20 GDPR. The User has the right to receive their personal data in a structured, commonly used format (e.g. CSV) and to transmit it to another controller.

Where a User exercises any of the above rights, the Twój StartUp Foundation will fulfil or refuse the request without undue delay, and in any case within one month of receiving it.

Users have the right to lodge a complaint with the President of the Personal Data Protection Office regarding any infringement of their data-protection rights or other rights granted under the GDPR.

This Privacy Policy may change, and the Twój StartUp Foundation is under no obligation to notify Users of such changes.

Questions related to this Privacy Policy should be directed to: [email protected]

Last updated: August 24, 2026

Czytaj po polsku →