Last updated: 2026-08-11
In performance of Art. 13 section 1 and section 2 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation - GDPR), please be informed that:
The Controller of your personal data is Buenas Vibras Szymon Owczarek, operating as a sole proprietorship at: ul. Lawendowe Wzgórze 34/8, 80-175 Gdańsk, NIP: 9571055973, e-mail: contact@fasterpermit.pl (hereinafter: Controller).
In matters related to the protection of personal data and the exercise of related rights, you can contact the Controller via e-mail at: contact@fasterpermit.pl.
Your Personal Data in the form of:
a. Identification data - e.g., name and surname, PESEL/passport number;
b. Contact data - e.g., telephone number, e-mail address, residential address;
c. Other data provided for the purposes of providing services by the Controller or executing a contract;
are or will be processed for the purpose of: providing organizational and technical services by the Controller; providing electronic services (including form handling, case diagnosis).
The legal basis for data processing is, among others, the Act of 18 July 2002 on the Provision of Services by Electronic Means, as well as Art. 6 section 1 letter b GDPR (contract performance), Art. 6 section 1 letter c GDPR (legal obligation), Art. 6 section 1 letter d GDPR (protection of vital interests).
Marketing and commercial activities – handling submitted inquiries. The legal basis for processing in this scope is your consent, i.e., Art. 6 section 1 letter a GDPR.
If during the provision of the service you decide to provide sensitive data specified in Art. 9 section 1 GDPR (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health, sex life or sexual orientation) or data relating to criminal convictions and offenses (Art. 10 GDPR), this is voluntary, and the basis for processing is your explicit consent, i.e., Art. 6 section 1 letter a GDPR.
In order to increase safety and improve service quality, the Controller may record phone calls. Call monitoring covers incoming and outgoing calls.
The legal basis for processing personal data is the consent of the person expressed through a confirmatory action, i.e., continuing the telephone call with the Controller (Art. 6 section 1 letter a GDPR) and legitimate interests pursued by the Controller (Art. 6 section 1 letter f GDPR).
Your personal data may be transferred to authorized institutions specified by law (e.g. public administration authorities, courts) and processing entities that provide services to the Data Controller and to whom these data are entrusted, in particular cooperating entities providing legal services (Advocates and Legal Counsel executing power of attorney), as well as entities providing external services, e.g. IT, payment processing (Stripe), accounting, provided that data disclosure will each time be limited to the necessary scope.
Personal data may be transferred to a third country under contracts concluded with external companies (e.g., IT infrastructure providers); however, the Controller ensures that the transfer of data takes place in compliance with GDPR principles and in accordance with applicable regulations (e.g. based on Standard Contractual Clauses).
Your Personal Data will be stored for the following periods:
a. in the event of establishing cooperation - within 6 years from the end of the calendar year in which the service provision ended (for tax and legal reasons);
b. until consent is withdrawn, when required, which does not affect the lawfulness of processing carried out prior to its withdrawal;
c. telephone call recordings - up to 90 days.
You have the right to access your personal data, the right to request correction, deletion or restriction of processing of these data, the right to data portability, and the right to object to data processing. You are entitled to object without giving a reason when data is used for direct marketing purposes.
You have the right to withdraw your consent at any time, which, however, will not affect the lawfulness of the processing carried out on the basis of consent before its withdrawal.
You are entitled to lodge a complaint with a supervisory authority (President of the Personal Data Protection Office - PUODO) if you consider that the processing of personal data violates regulations.
Providing personal data is voluntary, although necessary for the provision of organizational, technical, or legal services provided through the Controller, including for case diagnosis, contract execution, sending commercial information, or responding to inquiries.
Data provided for the purpose of selecting an expert/attorney may be processed in an automated manner, but will not be subject to profiling producing legal effects.