1. General Information
This Privacy Policy sets out the rules for processing and protecting personal data of users of the website www.vikybizu.com.

The Data Controller is the owner of the Vikybizu website (hereinafter referred to as the “Controller”).
You can contact the Controller via email: .moc.liamg%40845reliv

---

2. Scope of Collected Data
The Controller may process the following personal data:


Fundacja Rozwoju Przedsiębiorczości "Twój StartUP"

ul. Żurawia 6/12 lok 766, 00-503 Warszawa - Adres Rejestrowy
NIP: 5213641211, REGON: 146433467, KRS: 0000442857


---

3. Purposes and Legal Basis for Processing
Personal data is processed on the basis of:

a) Contract performance (Art. 6(1)(b) GDPR):
- order processing
- delivery of products

b) Legal obligation (Art. 6(1)(c) GDPR):
- accounting and tax obligations

c) Consent (Art. 6(1)(a) GDPR):
- marketing activities
- use of cookies (analytics)

d) Legitimate interest (Art. 6(1)(f) GDPR):
- ensuring website security
- prevention of fraud or abuse

---

4. Data Recipients
Personal data may be shared with:

- payment service providers (e.g. Stripe)
- hosting providers
- IT service providers
- courier and postal services

All third parties process data in accordance with GDPR and based on appropriate agreements.

---

5. Transfers Outside the EEA
Due to the use of external services (e.g. Stripe, Google Analytics), personal data may be transferred outside the European Economic Area (EEA).

Such transfers are carried out in compliance with applicable legal mechanisms, including Standard Contractual Clauses approved by the European Commission.

---

6. Data Retention Period
Personal data is stored:

- for the duration of the contract and after its completion as required by law (e.g. tax regulations)
- until consent is withdrawn (where processing is based on consent)
- until limitation periods expire

---

7. User Rights
Users have the right to:

- access their personal data
- rectify their data
- request deletion (“right to be forgotten”)
- restrict processing
- data portability
- object to processing

Users also have the right to lodge a complaint with a supervisory authority:
President of the Personal Data Protection Office (UODO), Poland.

---

8. Voluntary Provision of Data
Providing personal data is voluntary but necessary to complete an order.

---

9. Automated Decision-Making
Personal data is not used for automated decision-making, including profiling.

---

10. Changes to the Policy
The Controller reserves the right to make changes to this Privacy Policy.