Privacy Policy

1. Who is responsible for your data

The data controller is Fundacja Rozwoju Przedsiębiorczości „Twój StartUp”, ul. Żurawia 6/12 lok. 766, 00-503 Warszawa, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS 0000442857, NIP 5213641211, REGON 146433467 — operating the OREVANTO store.

You can reach us about anything in this policy at [email protected] or +48 519 546 260.

2. What data we collect and why

• Cart contents — products and quantities are stored in your browser. The website does not send your cart to us or accept online orders or payments at this time.
• Records of previously placed orders — contact and delivery details needed to fulfil those contracts and meet accounting obligations. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and legal obligation (Art. 6(1)(c) GDPR).
• Correspondence — if you write to us, we keep the conversation to handle your request. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Technical logs — our hosting provider (Cloudflare) processes connection data such as IP address to deliver and protect the site. Legal basis: legitimate interest in secure operation (Art. 6(1)(f) GDPR).

3. Analytics without cookies

We use Cloudflare Web Analytics, a privacy-friendly measurement tool that does not use cookies and does not collect personal identifiers. It gives us aggregated numbers — visits, page views, countries — nothing that identifies you.

Because we do not set tracking cookies or use advertising pixels, this site does not need a cookie-consent banner.

4. Who receives your data

Cloudflare may process data outside the EU/EEA. International transfers are governed by applicable transfer mechanisms.

• Cloudflare, Inc. — hosting, content delivery, security and privacy-friendly, cookieless analytics of the website.
• Delivery carriers — details necessary to deliver previously placed orders.
• Accounting and legal service providers of the Foundation, where required by Polish tax and accounting law.

5. How long we keep data

• Order and invoice data: 5 years from the end of the calendar year of the transaction, as required by Polish accounting and tax law.
• Correspondence: up to 12 months after the matter is closed.

6. Your rights

Under the GDPR you have the right to:

• access your data and receive a copy (Art. 15)
• rectify inaccurate data (Art. 16)
• erasure — “right to be forgotten” (Art. 17)
• restriction of processing (Art. 18)
• data portability (Art. 20)
• object to processing based on legitimate interest (Art. 21)
• withdraw consent at any time, without affecting the lawfulness of processing before withdrawal (Art. 7(3))

7. Complaints

If you believe we handle your data improperly, you can lodge a complaint with the Polish supervisory authority: President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl — or with the data protection authority of your EU country of residence.

8. Changes

If we change this policy, we will publish the new version on this page with an updated date. Material changes will be announced on the site.