Privacy Policy
Last updated: May 28, 2026
1. Personal Data Controller
The controller of your personal data is:
Besides Finance sp. z o.o.
os. Jana III Sobieskiego 40/2N
60-688 Poznań
KRS: 0001097657
NIP: 9721351355
REGON: 528239695
Contact regarding personal data protection:
Email: biuro@besidesfinance.com
2. Scope of collected data
2.1 Contact form
In the contact form, we collect:
- Email address (required)
- Full name (required)
- Company name (optional)
- Message content
2.2 Automatically collected data
When you use our website, we automatically collect:
- IP address
- Browser and device type
- Information on how the website is used (Google Analytics)
- Technical data related to security (reCAPTCHA)
3. Purposes and legal bases for processing
3.1 Responding to an inquiry sent via the contact form
Purpose of processing:
Responding to an inquiry sent via the contact form.
Legal basis:
The controller's legitimate interest in conducting correspondence and handling inquiries — Art. 6(1)(f) GDPR.
Data scope:
Email address, full name, company name, message content.
3.2 Website traffic analysis — Google Analytics
Purpose of processing:
Analyzing website traffic using Google Analytics.
Legal basis:
Consent — Art. 6(1)(a) GDPR.
Data scope:
IP address, device and browser data, information on how the website is used.
3.3 Protecting the form against spam and automated abuse — reCAPTCHA
Purpose of processing:
Protecting the contact form against spam, bots, and automated abuse using reCAPTCHA.
Legal basis:
The controller's legitimate interest in ensuring the security of the website and forms — Art. 6(1)(f) GDPR.
Data scope:
IP address, technical data about the browser and device, information related to user behavior on the website.
4. Data recipients
Your personal data may be transferred to the following entities:
4.1 Google LLC
Headquarters: United States.
Purpose:
Google Analytics — website traffic analysis.
Google reCAPTCHA — protecting the contact form from spam, bots, and automated abuse.
Legal basis: the use of Google tools to support website functionality and ensure its security.
Transfers to the USA: data may be transferred outside the European Economic Area based on appropriate legal mechanisms, in particular the EU-US Data Privacy Framework and Standard Contractual Clauses.
4.2 Calendly LLC
Headquarters: United States.
Purpose: To allow users to schedule meetings with us using an embedded Calendly tool, and to manage appointment bookings and meeting-related communications.
Legal basis: Service agreement and data processing agreement.
4.3 Webflow, Inc.
Headquarters: United States.
Objective: Website maintenance and technical support, hosting, and management of website content and the contact form.
Basis: Service agreement and data processing agreement.
4.4 Email service provider
Data submitted via the contact form may be processed by the email service provider used by the administrator.
Purpose: handling correspondence submitted via the contact form.
Basis: email or technical services agreement.
4.5 Entities authorized by law
Data may be disclosed to public authorities or other authorized entities if required by law.
5. Data retention period
Contact form
Up to 12 months after the end of correspondence.
Google Analytics
Up to 14 months from the date of collection.
Google reCAPTCHA
In accordance with Google's policies and retention periods.
Technical data and server logs
Up to 12 months from the date the log was recorded.
6. Your rights
You have the right to:
6.1 Data access
You may request information on whether we process your personal data, and if so, obtain access to that data and information regarding its processing.
6.2 Data Rectification
You may request the correction of inaccurate data or the completion of incomplete data.
6.3 Usunięcia danych
You may request the erasure of your personal data if the grounds provided for in the GDPR apply.
6.4 Restriction of Processing
You may request the restriction of data processing in the cases specified in the GDPR.
6.5 Data Portability
If the data is processed on the basis of consent or a contract and by automated means, you may request to receive the data in a structured, commonly used format.
6.6 Right to Object
You may object to the processing of your data based on the legitimate legal interest of the controller.
6.7 Withdrawal of Consent
If processing is based on consent, you may withdraw it at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
How to exercise your rights?
For matters related to personal data protection, please contact us at:
We respond to requests without undue delay, and in any event within one month of receipt of the request.
7. Cookies and Tracking Technologies
7.1 Consent to Cookies
During your first visit to the website, you may be asked to consent to the use of analytical cookies. You can accept or reject cookies that are not essential for the website's operation.
Essential cookies may be used without your consent as they are necessary for the proper functioning of the website.
7.2 Types of Cookies
The following types of cookies may be used on the website:
Essential Cookies
Used to ensure the proper functioning of the website, its security, and basic technical functions.
Analytical Cookies
Used to analyze how the website is used. For this purpose, we use Google Analytics. Analytical cookies are used only if you consent to them, provided that consent is required by law.
7.3 Google Analytics
We use Google Analytics to analyze website usage. Google Analytics may collect information such as:
- visited subpages,
- time spent on the website,
- source of traffic,
- device and browser data,
- approximate location,
- IP address.
Data processed within Google Analytics is used to generate statistics and improve the website.
7.4 Google reCAPTCHA
We use Google reCAPTCHA to protect our contact form from spam, bots, and automated abuse.reCAPTCHA may analyze technical data and user behavior on the website, including:
- IP address,
- browser and device information,
- interaction with the website,
- technical data needed to assess whether the form is being used by a human.Data processed by Google reCAPTCHA is subject to Google's privacy policy.
8. Data Security
We implement appropriate technical and organizational measures to protect your personal data, including:
- HTTPS connection encryption,
- securing the contact form against spam and automated abuse,
- restricted access to personal data strictly to authorized personnel,
- utilizing trusted technical service providers,
- implementing organizational measures aimed at protecting correspondence and data sent via the form,
- regular reviews of basic security procedures.
9. Right to Lodge a Complaint
You have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the GDPR.
Personal Data Protection Office (UODO)
ul. Stawki 2
00-193 Warsaw, Poland
Phone: +48 22 531 03 00
E-mail: kancelaria@uodo.gov.pl
Website: https://uodo.gov.pl
10. Children's Data
Our website and services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you become aware that a child has provided us with personal data without the consent of a legal guardian, please contact us, and we will take appropriate action to delete it.
11. Changes to the Privacy Policy
We reserve the right to amend this Privacy Policy, in particular in the event of:
- changes in the law,
- changes in the operation of the website,
- changes in analytical, technical, or security tools used,
- changes in the scope of data processed.
We will notify you of any changes by updating the "Last Updated" date at the top of the document and publishing the new version of the Privacy Policy on the website.
We encourage you to review this page regularly to stay informed about our current data processing practices.
12. Contact
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us at:
Besides Finance sp. z o.o.
E-mail: biuro@besidesfinance.com
Address: os. Jana III Sobieskiego 40/2N, 60-688 Poznań, Poland
This Privacy Policy has been prepared in accordance with:
- Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR),
- the Act of May 10, 2018, on the protection of personal data,
- the Act of July 18, 2002, on providing services by electronic means.