TreasuryStream

Privacy Policy

Last updated: 07 May 2026

1. Data Controller

The controller of your personal data is:

2. Purposes and Legal Bases for Processing

We process your personal data for the following purposes and on the following legal bases:

  • Responding to contact enquiries — Art. 6(1)(b) GDPR (contract / pre-contractual measures) or Art. 6(1)(f) GDPR (legitimate interests).
  • Providing advisory services — Art. 6(1)(b) GDPR (performance of a contract).
  • Legal obligations (accounting, taxes) — Art. 6(1)(c) GDPR.
  • Website analytics (analytical cookies) — Art. 6(1)(a) GDPR (consent).
  • Own marketing — Art. 6(1)(f) GDPR (legitimate interests) or Art. 6(1)(a) GDPR (consent).

3. Data We Collect

  • Contact form data: name, email address, company name, message content.
  • Technical session data: IP address, browser type, operating system, visit timestamp — stored in server logs.
  • Cookie data (if you have consented): anonymous analytical session identifiers.

4. Cookies

Essential (always active): technical session cookies required for the website to function correctly. No consent required.

Analytical (with your consent): enable anonymous traffic analysis (e.g. Google Analytics or Vercel Analytics). Activated only after you give consent. You may withdraw consent at any time by clicking "Cookie settings" in the footer.

Session cookies expire when you close your browser; analytical cookies are retained for up to 13 months.

5. Recipients of Your Data

Your data may be disclosed to:

  • IT infrastructure and hosting providers (Vercel Inc., USA — under Standard Contractual Clauses).
  • Analytics service providers (if you have consented).
  • Public authorities — only as required by law.

We do not sell or share personal data with third parties for marketing purposes without your consent.

6. Data Retention

  • Contact enquiries / form submissions: 3 years from last contact (legitimate interest + potential claims).
  • Client data (contracts, invoices): 5 years from the end of the tax year (legal obligation).
  • Server logs: 90 days.
  • Analytical cookie data: up to 13 months or until consent is withdrawn.

7. Your Rights

Under GDPR you have the following rights:

  • Access — right to obtain a copy of your data (Art. 15 GDPR).
  • Rectification — right to correct inaccurate or incomplete data (Art. 16 GDPR).
  • Erasure — right to request deletion of your data (Art. 17 GDPR), subject to legal requirements.
  • Restriction of processing — right to request suspension of processing in certain circumstances (Art. 18 GDPR).
  • Portability — right to receive your data in a structured, machine-readable format (Art. 20 GDPR).
  • Objection — right to object to processing based on legitimate interests (Art. 21 GDPR).
  • Withdrawal of consent — right to withdraw consent at any time without affecting prior processing.
  • Lodging a complaint — right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence.

To exercise any of these rights, contact us at: [email protected]. We will respond within 30 days.

8. Data Security

We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss or destruction. All communication with our server uses encrypted HTTPS connections.

9. Changes to This Policy

We reserve the right to update this policy. We will notify you of significant changes by updating the date at the top of this document. We encourage you to review this page periodically.

10. Contact

For data protection enquiries please contact:
[email protected]
TreasuryStream Kamil Kołodziejczyk
ul. Pieskowa Skała 13/4, 02-699 Warszawa, Polska