Last update: January 2025

Suprasorte Strategic Lobby Privacy Policy

We explain simply and specifically how we protect your fintech's data and what happens with the information you provide to us.

Who manages your data?

The data administrator is the company Suprasorte Strategic Lobby. Our office is located in Warsaw at ul. Nowy Świat 6/12. We have been on the market since March 2017. Our management board, including Wojciech Sikora, is directly responsible for information security. You can contact us at +48 22 551 23 45 or by writing to info@suprasorte.com. We respond to inquiries regarding privacy protection within an average of 136 minutes. Fintech is our specialty, so we know that confidentiality is fundamental in your business. Facts matter, not promises.

We respect your time, so we do not write complicated legal treatises. We apply GDPR rules in a practical way. Your data is safe with us because we use modern encryption methods. We never sell contact lists or exchange databases with other entities. We act quickly and precisely, focusing on substantive work on regulations, not on trading information about our clients.

What information do we collect and why?

When you visit our site, the server records basic technical data. These are system logs, such as your IP address, browser type and time of entry. We do this only so that the site works without errors. In 2024, our website handled 21,348 visits, and these statistics helped us optimize the loading speed of reports. We do not use this data to identify you for private purposes.

When you fill out the documentation audit order form, ask for contact or calculate a loss in our calculator, you provide us with specific data. Usually, it is your name, surname, business e-mail and company name. We need this information to prepare an analysis within 3 business days. We use it exclusively for communication with you. If you order legislative monitoring, your e-mail will serve us to send reports every Tuesday at 9:00 AM. We do not send spam or unnecessary notifications that waste your time.

Cookies and technology

We use cookies so you don't have to enter the same information multiple times. Cookies also help us check which topics on the blog are important to you. For example, we know that an article about industry petitions was read by 1,138 people in the last quarter. This way we know which legal changes to fight for the hardest. Cookies do not give us access to your computer or private files.

You can disable cookies in your browser settings. The site will still work, although some functions may load 1.4 seconds slower. We do not use tracking scripts from external advertising companies. Our aesthetic is premium monochrome, so we value cleanliness not only in the site's appearance, but also in the code. No hidden plugins collecting data without your knowledge. We act openly and ethically.

How long do we keep your data?

Different data have different storage times. We keep financial documents and invoices for 5 years in accordance with Polish tax law. Information from contact forms is stored for 1,134 days from the last conversation. We do this to be able to return to your case if the regulator suddenly changes the interpretation of regulations we discussed. Technical server logs are cleared every 97 days.

If you send us sensitive fintech documentation for risk analysis, we apply strict rules. We remove such data from operating systems immediately after completing the order and preparing the risk table. A copy lands in an encrypted offline archive. In 2024, we conducted 37 such audits and no document leaked outside our office at Nowy Świat. We know that one mistake could destroy the trust we have been working on since 2017.

Who do we entrust your information to?

Only our specialists have access to your data: Wojciech Sikora, Anna Mazur and Marek Zając. Each of us has signed a strict confidentiality agreement (NDA). We transfer data to external entities only when it is necessary for the site to function (e.g. hosting) or settlements (accounting office). These are exclusively companies based in the European Union that meet security standards.

We never transfer information about your business plans to the media or state bodies without your explicit consent. An exception are situations when required by law, but since the beginning of Suprasorte Strategic Lobby, such a situation has not occurred. Our task is to protect your business, not to expose it. We know the corridors of the Parliament and we know how to maintain discretion in delicate legislative matters.

Your rights are important to us

You have the right at any time to ask what data about you we process. We will answer specifically and without undue delay. You can request correction of errors in your name or company name. You also have the right to be forgotten, i.e. to completely remove your data from our database. If you send such a request, we will fulfill it within 47 hours, unless blocked by accounting regulations.

You can also restrict data processing or ask for its transfer to another company. If you believe that we are violating your privacy, you can file a complaint with the President of the Office for Personal Data Protection. We encourage you, however, to contact us first. We clarify most matters during one phone call. We respect your right to peace and data security.

Technical security

Our site has an SSL certificate that encrypts every connection. Our servers are protected by firewalls and intrusion detection systems. In 2024, we blocked 483 unauthorized access attempts. Every employee uses two-step verification when logging into email systems. Paper documents are destroyed in high-security shredders.

P.S. We regularly audit our own procedures. The last security check took place on November 14, 2024, and confirmed that our safeguards are effective. We do not promise miracles, but we guarantee reliability. Your data with us is actually your data, to which no unauthorized person has access. We act quickly and precisely also in the area of cybersecurity.