DOCUMENT
Privacy policy
Data controller
The controller of your personal data is FKDRIVE Filip Kostecki, a sole trader registered in Poland. For anything concerning personal data, write to kontakt@fkdrive.com.
What data we process
Through the contact form and email correspondence we process the data you give us voluntarily: your name (or company name), email address, the type of service you selected and the content of your message. We do not collect data we do not need in order to answer your enquiry and to work together afterwards.
If you sign up for a downloadable material or for the newsletter, we process your email address and a record of which sign-up page you used. The sign-up forms do not ask for a name. We also record your IP address and the moment consent was given, because we have to be able to demonstrate that it was.
When you submit the introductory-call form, we process the data you enter there: your name, email address, team size, sector, role in the company and a description of the problem you want to address.
You choose the time of the call in a booking calendar operated by Google, which appears on the enquiry page only after the form has been sent. The data entered in the calendar itself, that is your name, email address and chosen time, goes directly to Google, which is a separate controller in that respect and processes it on the terms set out in its own privacy policy. Because the calendar loads only after the form is sent, merely visiting the page passes no data to Google. If you would rather not use that tool, we will agree a time by email.
Purpose and legal basis
- Answering your enquiry and conducting correspondence – Article 6(1)(b) and (f) GDPR (steps taken at your request, and legitimate interest).
- Entering into and performing a contract, where applicable – Article 6(1)(b) GDPR.
- Establishing, pursuing or defending claims – Article 6(1)(f) GDPR (legitimate interest).
- Sending the material you requested, for example the checklist – Article 6(1)(b) GDPR (steps taken at your request). We send the material whether or not you agree to receive the newsletter.
- The newsletter and messages about our services – Article 6(1)(a) GDPR (consent). This consent is separate from the others, always optional, and collected through its own checkbox: we do not make answering your enquiry, sending you a material or booking a call conditional on it. You can withdraw it at any time, and withdrawal does not affect the lawfulness of processing carried out beforehand.
- Visit statistics and analysis of how the site is used, and measurement of how our advertising performs – Article 6(1)(a) GDPR (consent), in conjunction with Article 399 of the Polish Electronic Communications Law. Details in the section Cookies, analytics and marketing tools.
Recipients of the data
Data may be entrusted to technical service providers acting on our instructions: the transactional email provider (sending messages from the form), the mailbox provider, the provider of the tool used to maintain our mailing list and send emails, and the hosting infrastructure provider. Those parties process the data only to the extent necessary to provide their service and under data processing agreements. We do not sell data and we do not share it for advertising purposes.
If you consent to analytics and marketing cookies, the recipients of data about your visit also include the providers of those tools: Google, Microsoft and Meta. We describe the scope and role of each in the section Cookies, analytics and marketing tools.
Transfers outside the EEA
We use providers whose infrastructure may be located partly outside the European Economic Area. In such cases the transfer takes place with the safeguards provided for in the GDPR, in particular on the basis of the European Commission’s standard contractual clauses.
This applies to the transactional email and mailing list provider, that is the tool through which we send messages from the forms and maintain the list of subscribed addresses. The messages themselves are sent from infrastructure located in the European Union, whereas the account data, including the email addresses held on the list and the records of messages sent, is stored in the United States. That transfer is based on the European Commission’s standard contractual clauses set out in the data processing agreement with the provider.
This applies in particular to the analytics and marketing tools. Our agreements are with entities in the European Economic Area (Google Ireland Limited, Microsoft Ireland Operations Limited, Meta Platforms Ireland Limited), but data may reach their parent companies in the United States. Such transfers are based on the European Commission’s standard contractual clauses and on the Commission’s implementing decision finding an adequate level of protection under the EU–US Data Privacy Framework.
Retention period
We keep data for as long as the correspondence continues and, if we go on to work together, for the period required by law (including tax law) and until any claims become time-barred. Correspondence that did not lead to an engagement is deleted after two years at the latest.
Data of people subscribed to the mailing list is kept until consent is withdrawn, that is until they unsubscribe. After unsubscribing we retain only the information needed to avoid sending any further messages to that address.
Data collected after cookie consent is kept no longer than the period configured in each tool; in Google Analytics that is 14 months, counted from your last activity on the site. The cookies those tools set expire after 13 months at the latest, and we remember your consent decision for 12 months, after which we ask again.
Cookies, analytics and marketing tools
This site stores cookies on your device and uses technologies that work in a similar way (pixels, identifiers in browser storage). We divide them into two groups.
Necessary. Needed for the site to work correctly and to remember your consent decision. We store these without asking, because the site cannot work without them and Article 399 of the Polish Electronic Communications Law does not require consent for them. Your consent decision is kept in your browser’s local storage, not on our server.
Analytics and marketing. These run only after you consent, in the window shown on your first visit. Until you do, none of the scripts described below loads or stores anything on your device. The legal basis is Article 6(1)(a) GDPR and Article 399 of the Electronic Communications Law.
Once you consent we run three tools:
- Google Analytics 4 (Google Ireland Limited) – visit statistics: which pages are opened, where visitors come from, how long they stay. We use Consent Mode, so until you consent the tool runs with access to device storage denied. We do not store IP addresses.
- Microsoft Clarity (Microsoft Ireland Operations Limited) – click maps and session recordings, that is a record of pointer movement, scrolling and clicks on the page. The tool automatically masks whatever is typed into form fields, so we do not see what you write in the recording. We use it to find places where the site is unclear or misleading.
- Meta Pixel (Meta Platforms Ireland Limited) – measurement of how our advertising on Facebook and Instagram performs, and targeting of adverts to people who have visited the site. As regards collecting data about your visit and passing it to Meta, we are joint controllers with Meta Platforms Ireland within the meaning of Article 26 GDPR, on the terms set out in Meta’s Controller Addendum. Meta is solely responsible for any further processing of that data in its own systems.
If you consent to marketing cookies, some events are also passed to Meta directly from our server, through what is known as the conversions API, rather than only from your browser. This concerns four moments: signing up for a downloadable material, signing up for the newsletter, submitting the introductory-call form, and a completed purchase. In those cases we pass your email address as an irreversible hash (SHA-256), identifiers from Meta cookies, your IP address, information about your browser and the address of the page where the event occurred; for a purchase, also the amount and the product name. Every such event has its own identifier, which lets Meta recognise it as the same event that was sent from the browser and not count it twice. Without your consent to marketing cookies we send nothing by this route — including when you use a form.
You can withdraw consent at any time: click Cookie settings in the footer and choose to refuse. After withdrawal we delete those tools’ cookies and stop loading them; withdrawal does not affect the lawfulness of processing carried out beforehand. Clearing the site data in your browser settings has the same effect.
You can also restrict or block cookies in your browser settings. Blocking necessary cookies may make the site harder to use.
Automated decision-making
We do not take decisions about you based solely on automated processing that would produce legal effects concerning you or similarly significantly affect you.
If you consent to marketing cookies, information about your visit may be used by Meta to include you in an advertising audience, that is for profiling for marketing purposes. This does not involve any decision producing legal effects, and you can object to such processing by withdrawing consent as described above.
Your rights
You have the right to access your data, to have it rectified, erased or its processing restricted, to object, to data portability, and to lodge a complaint with the President of the Polish Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych). Providing data is voluntary but necessary in order for us to answer your enquiry. To exercise your rights, write to kontakt@fkdrive.com.
If you have subscribed to the mailing list, you can withdraw consent at any time using the unsubscribe link included in every message we send. You do not need to write to us or give a reason.
Changes to this policy
We update this policy when the way the site works changes, or when the law does. Last updated: 1 August 2026
Language of this document
This is a translation provided for convenience. The binding version is the Polish one, available at fkdrive.com/polityka-prywatnosci. In the event of any discrepancy between the two, the Polish version prevails.