Privacy Policy
Ensuring a high level of privacy protection is important to us not only because the law requires it. We provide cybersecurity solutions, so we treat the way we handle data ourselves as part of our credibility with our customers.
Below, we have gathered the most important information about what personal data we process, why we do it and what rights you have in this respect. We ask that you take a moment to read this information.
This Policy applies to our website fudosecurity.com, as well as to contacts and cooperation that take place outside the website: correspondence, handling of inquiries and performance of contracts with the organizations you represent.
§1Who is the controller of your data
The controller of your personal data is Fudo Security sp. z o.o. with its registered office in Warsaw, Aleje Jerozolimskie 178, 02-486 Warszawa, entered in the Register of Entrepreneurs of the National Court Register (KRS) maintained by the District Court for the Capital City of Warsaw in Warsaw, XIII Commercial Division of the KRS, under number 0000224900, tax identification number (NIP) 5242521745.
You can contact us on matters relating to personal data:
- by e-mail: privacy@fudosecurity.com,
- by phone: +48 22 100 67 00,
- by letter: Fudo Security sp. z o.o., Aleje Jerozolimskie 178, 02-486 Warszawa.
§2Where we get your data from
- We received it directly from you - if you contacted us, filled in a form, subscribed to the newsletter or visited our website.
- We received it from the organization you represent - if you are the person designated for contact, for signing the contract or for handling the cooperation.
- We obtained it from publicly available sources, such as the National Court Register (KRS), the Central Register and Information on Economic Activity (Polish: Centralna Ewidencja i Informacja o Działalności Gospodarczej) or the website of the organization you represent - to the extent necessary to establish contact or to confirm authorization to represent.
If you represent a customer or a business partner, we usually process: your first and last name, job title or role, business e-mail address and phone number, the name of the organization you represent and, where justified, also the scope of your authorization to act on its behalf.
§3For what purposes and on what basis we process your data
The scope of processing depends on how you came into contact with us. Below, we have listed all purposes, together with the legal basis and the storage period.
Use of the website
| Purpose of processing | Legal basis | How long we store the data |
|---|---|---|
| Ensuring the correct and secure operation of the website, preventing abuse and diagnosing errors. For this purpose, we record server logs that include, among other things, the IP address, browser type and connection time, and we use Necessary cookies. | Our legitimate interest in maintaining and protecting the website - Art. 6(1)(f) GDPR | Server logs for up to 13 months. Cookies for the periods specified in the Cookie Policy. |
| Visit statistics and analysis of how the website is used. | Your consent given in the cookie banner - Art. 6(1)(a) GDPR | Until you withdraw your consent, but no longer than the storage period of the given cookie. |
| Online marketing: measuring the effectiveness of campaigns and tailoring the ads shown to you, which includes profiling. | Your consent given in the cookie banner - Art. 6(1)(a) GDPR | Until you withdraw your consent, but no longer than the storage period of the given cookie. |
Contact and marketing activities
| Purpose of processing | Legal basis | How long we store the data |
|---|---|---|
| Responding to an inquiry sent via a form or by e-mail, or made by phone. | Our legitimate interest in handling inquiries addressed to us - Art. 6(1)(f) GDPR | For the duration of the correspondence, and then for the limitation period of any claims. |
| Handling a request for a product demonstration, materials or a trial version, and conducting discussions aimed at concluding a contract. | Our legitimate interest in conducting sales activities toward the organization you represent - Art. 6(1)(f) GDPR | For the duration of the discussions, and then for the limitation period of any claims. |
| Sending the newsletter and information about products and events to the address you provided. | Your consent - Art. 6(1)(a) GDPR, in conjunction with Art. 398 of the Electronic Communications Law (Polish: Prawo komunikacji elektronicznej) | Until you withdraw your consent. |
| Direct marketing of our products and services addressed to persons representing customers and business partners. | Our legitimate interest in promoting our own products - Art. 6(1)(f) GDPR | Until you object or until this interest ceases. |
Business cooperation, if you represent a customer or a business partner
| Purpose of processing | Legal basis | How long we store the data |
|---|---|---|
| Concluding and performing the contract between us and the organization you represent: day-to-day working contact, arrangements, sending documents, and making deliveries and providing support. | Our legitimate interest and the interest of the organization you represent, consisting in enabling the performance of the contract - Art. 6(1)(f) GDPR. | For the term of the contract, and then for the limitation period of any claims. |
| Handling service and technical support requests, including correspondence in the ticketing system. | Our legitimate interest in providing support to the organization you represent - Art. 6(1)(f) GDPR | For the term of the support contract, and then for the limitation period of any claims. |
| Granting and supervising access to systems and materials made available to customers, including support portal accounts and licenses. | Our legitimate interest in the controlled provision of resources - Art. 6(1)(f) GDPR | For as long as you have access, and then for the period necessary to demonstrate to whom access was granted. |
| Issuing and storing accounting documents that contain your data. | A legal obligation to which we are subject - Art. 6(1)(c) GDPR in conjunction with accounting and tax law provisions | 5 years from the end of the calendar year in which the tax payment deadline expired. |
| Ensuring information security, including logging access to systems and handling incidents. | Our legitimate interest in protecting information and systems - Art. 6(1)(f) GDPR | In accordance with the storage periods for records that we have adopted, but no longer than the limitation period of any claims. |
| Establishing, pursuing and defending against claims. | Our legitimate interest in protecting our rights - Art. 6(1)(f) GDPR | For the limitation period of the claims. |
| Internal administrative purposes: reporting, sales analyses and archiving. | Our legitimate interest in managing our own business - Art. 6(1)(f) GDPR | Until this interest ceases or until an objection is effectively raised. |
§4Who we disclose your data to
We use the support of third parties, so the recipients of your data can be:
- service providers that process data on our behalf under data processing agreements concluded with us - in particular providers of hosting and infrastructure, e-mail and collaboration tools, the customer relationship management system, the ticketing system, and analytics and advertising tools,
- entities that provide advisory, legal, accounting and audit services to us,
- sales partners and distributors, if the cooperation with the organization you represent involves them,
- authorities and institutions authorized by law, if they submit a request to us in the procedure provided for by law.
Providers acting on our behalf can process your data only to the extent necessary to perform the tasks entrusted to them. You can find a list of the tools used on the website, together with the names of their providers, in the Cookie Policy.
§5Do we transfer data outside the European Economic Area
Some of the providers whose services we use belong to corporate groups headquartered outside the European Economic Area, mainly in the United States. In such cases, your data can be transferred outside this area.
The transfer takes place on the basis of the European Commission implementing decision of 10 July 2023 finding an adequate level of protection ensured by the EU-U.S. Data Privacy Framework, if the recipient participates in this program, or on the basis of standard contractual clauses adopted by the European Commission. On your request, we will provide information on the basis applied to a specific provider and on how to obtain a copy of the safeguards applied.
§6Is providing data mandatory
Providing data is voluntary. In some situations, however, it is necessary to achieve a specific purpose: without an e-mail address we will not respond to an inquiry, and without the contact details of the person designated by the organization we will not be able to perform the contract or provide support. Providing data in accounting documents follows from legal provisions.
§7Do we make automated decisions
We do not make decisions about you based solely on automated processing that produce legal effects for you or similarly significantly affect you.
If you consent to Marketing cookies, your data is subject to profiling that consists in matching advertising content to interests inferred from the way you use the website. You can withdraw this consent at any time.
§8What rights you have
In connection with the processing of your data, you have the right to:
- access your data and obtain a copy of it,
- rectification of inaccurate data and completion of incomplete data,
- erasure of data, unless we are required by law to continue processing it,
- restriction of processing,
- portability of data processed by automated means on the basis of consent or a contract, if this is technically possible,
- object to processing based on our legitimate interest, on grounds relating to your particular situation; in the case of direct marketing, you can object at any time and without giving reasons,
- withdraw consent at any time, if processing is based on it; the withdrawal does not affect the lawfulness of processing carried out before it.
The easiest way to withdraw your consent to cookies is to change the settings in the cookie banner or in your browser. We describe how to do this in the Cookie Policy.
To exercise your other rights, write to us at the address given in section 1. We respond without undue delay, and no later than within one month of receiving the request.
You also have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement. In Poland, where we have our registered office, the supervisory authority is the President of the Personal Data Protection Office (Polish: Prezes Urzędu Ochrony Danych Osobowych).
§9Cookies
We describe the rules for the use of cookies and similar technologies, the list of cookies we use and how to manage consent in a separate document - the Cookie Policy, available at fudosecurity.com/cookie-policy.
§10Changes to the Policy
We update this Policy when the way we process data or the applicable laws change. The current version is always available on this page.
Date of last update: November 10, 2026.