Privacy policy
Effective from 9 October 2026
This is a translation of the original Polish version. In case of any discrepancy, the Polish version prevails.
This policy explains how we process the personal data of people who visit kamanfinance.com and contact us. We process data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (the GDPR, known in Poland as RODO) and Polish law.
1. Data controller
Kaman Finance Musa Çakmak
Warsaw, Poland
NIP (tax ID): 5342710718 · REGON: 544404236
E-mail: info@kamanfinance.com · Phone: +48 575 321 907
The controller has not appointed a data protection officer. For any matter concerning personal data, please contact us at the e-mail address or phone number above.
2. What data we process, why, and on what legal basis
| Situation | Data | Purpose | Legal basis |
|---|---|---|---|
| Contact form | full name, e-mail address, phone number (optional), selected topic, message | replying to your enquiry, presenting an offer | Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (handling correspondence) |
| Contact by e-mail or phone | information provided in correspondence or a call, e-mail address, phone number | handling the enquiry and further contact | Art. 6(1)(b) and (f) GDPR |
| Visiting the website | IP address, date and time, browser and device type, page visited (server logs) | operating and securing the website | Art. 6(1)(f) GDPR (legitimate interest) |
| Establishing or defending claims | data from correspondence | establishing, exercising or defending legal claims | Art. 6(1)(f) GDPR |
If we enter into a service contract (e.g. bookkeeping), client data will also be processed to perform the contract and to meet our legal obligations, in particular tax and accounting obligations (Art. 6(1)(b) and (c) GDPR). Details will be provided when the contract is concluded.
3. Providing data is voluntary
Providing your data is voluntary but necessary for us to reply to your enquiry. The required form fields (full name, e-mail, message) are needed so that we can contact you. The phone number is optional.
4. Recipients of data
Data may only be shared with providers that help us run the website and our business, under data processing agreements or their terms of service:
- Vercel Inc. (USA) — website hosting and server logs;
- FormSubmit (formsubmit.co) — a service that forwards contact form messages to our mailbox;
- Google LLC / Google Ireland Ltd. — e-mail provider (Gmail / Google Workspace) where messages are received;
- telecommunications and IT providers we use in our day-to-day business;
- public authorities — only where required by law.
We do not sell personal data or share it with third parties for marketing purposes.
5. Transfers outside the European Economic Area
Some of the providers listed above (Vercel, FormSubmit, Google) may process data on servers outside the EEA, including in the United States. In that case the transfer is based on a European Commission adequacy decision (the EU-US Data Privacy Framework, for providers certified under it) or on standard contractual clauses approved by the European Commission (Art. 46(2)(c) GDPR). You can obtain a copy of these safeguards by contacting us.
6. How long we keep data
- enquiries that do not result in a contract — until the correspondence ends, and then for up to 12 months in case the conversation continues;
- client data — for the duration of the contract and then for the period required by tax and accounting law (as a rule, 5 years from the end of the calendar year in which the tax payment deadline expired);
- server logs — for the period set by the hosting provider, usually no longer than a few weeks;
- data processed in connection with claims — until the limitation period expires.
7. Your rights
In connection with the processing of your data, you have the right to:
- access your data and receive a copy (Art. 15 GDPR);
- rectification (Art. 16);
- erasure (Art. 17);
- restriction of processing (Art. 18);
- data portability (Art. 20) — for data processed on the basis of a contract;
- object to processing based on legitimate interest (Art. 21);
- lodge a complaint with the Polish data protection authority: President of the Personal Data Protection Office (Prezes UODO), ul. Stawki 2, 00-193 Warsaw (uodo.gov.pl).
To exercise your rights, write to info@kamanfinance.com. We will respond without undue delay and in any event within one month.
8. Automated decisions and profiling
We do not make automated decisions or profile website visitors.
9. Cookies and browser storage
The website does not use analytics or marketing cookies. See our Cookie policy for details.
10. Changes to this policy
We may update this policy, for example if the law changes or new features are added to the website. The current version, with its effective date, is always available on this page.