Thank you for visiting our website. Protecting your privacy and safeguarding your personal data are our priorities. This Privacy Policy is intended to provide you with clear and transparent information about the personal data we collect, the purposes for which we process it, how we protect it, and the rights you have in connection with the processing of your personal data.

‍

1. Controller of Personal Data

‍

The controllers of your personal data are:

FINANTEQ S.A., with its registered office at ul. Nałęczowska 16, 20-701 Lublin, Poland, Tax Identification Number (NIP): 713-308-75-58, Statistical Identification Number (REGON): 061722409, entered into the Register of Entrepreneurs of the National Court Register maintained by the District Court Lublin-Wschód in Lublin with its seat in Świdnik, VI Commercial Division of the National Court Register, under KRS No. 0000521114 (hereinafter referred to as "Finanteq"), and Senacor Technologies AG, with its registered office at Düsseldorfer Straße 13, 65760 Eschborn, Germany, registered with the Commercial Register (Handelsregister) maintained by the Local Court (Amtsgericht) of Frankfurt am Main under HRB No. 110482 (hereinafter referred to as "Senacor"), hereinafter jointly referred to as the "Controller".

‍

2. Scope and Purposes of the Processing of Personal Data

‍

Through the forms available on the Website, we may ask you to provide personal data such as your first name, last name, telephone number and e-mail address.

‍

Where you participate in a recruitment process, providing the personal data required under the Polish Labour Code is necessary for the consideration of your application. Failure to provide such data will prevent you from participating in the recruitment process. Providing any additional personal data is voluntary.

‍

We process your personal data for the following purposes:

‍

1. Contact Form

‍

Your personal data are processed:

• for the purpose of responding to your enquiry submitted via the contact form;
• on the basis of your consent (Article 6(1)(a) of the GDPR);
• until you withdraw your consent or until the correspondence has been completed.

‍

2. Recruitment

‍

a) Participation in the current recruitment process

‍

Your personal data are processed:

• to the extent required by applicable law, on the basis of Article 6(1)(c) of the GDPR in conjunction with Article 22¹ of the Polish Labour Code;
• with respect to any additional personal data voluntarily provided beyond the statutory requirements, on the basis of your consent (Article 6(1)(a) of the GDPR);
• for the duration of the recruitment process and subsequently for the period necessary to defend against potential legal claims, but no longer than six (6) months following the completion of the recruitment process, unless you withdraw your consent with respect to the personal data processed on that basis beforehand.

b) Participation in future recruitment processes

‍

Your personal data are processed:

• on the basis of your consent (Article 6(1)(a) of the GDPR);
• for a period of two (2) years or until you withdraw your consent, whichever occurs first.

Withdrawal of your consent shall not affect the lawfulness of processing carried out prior to such withdrawal.

‍

3. Recipients of Personal Data

‍

Your personal data may be disclosed to entities providing services necessary for the operation of the Website and the conduct of our business activities, including providers of IT services, hosting services, e-mail services, analytical tools, recruitment management systems, and other processors acting on our behalf.

Such entities process personal data solely on the basis of appropriate contractual arrangements and in accordance with our instructions.

Your personal data may also be disclosed to entities authorised under applicable law to request access to such data, including supervisory authorities, law enforcement authorities and courts.

‍

4. Transfers of Personal Data Outside the European Economic Area (EEA)

‍

In connection with the use of certain third-party services (such as Google Analytics), your personal data may be transferred to countries outside the European Economic Area, in particular to the United States.

‍

In such cases, we ensure an adequate level of protection for your personal data by implementing the safeguards provided for under the GDPR, in particular the European Commission's Standard Contractual Clauses or other appropriate safeguards.

‍

5. Your Rights in Relation to Personal Data

‍

You have the right to:

• access your personal data (Article 15 of the GDPR);
• request the rectification of your personal data (Article 16 of the GDPR);
• request the erasure of your personal data (Article 17 of the GDPR);
• request the restriction of processing (Article 18 of the GDPR);
• exercise your right to data portability (Article 20 of the GDPR);
• withdraw your consent at any time where processing is based on your consent (Article 7 of the GDPR);
• object to the processing of your personal data (Article 21 of the GDPR);
• lodge a complaint with the President of the Personal Data Protection Office (Article 77 of the GDPR).

‍

6. Data Security and Contact Details of the Data Protection Officer

‍

We implement appropriate technical and organisational measures to ensure the security of the personal data we process and to protect such data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or unauthorised access.

‍

If you have any questions regarding the processing of your personal data, you may contact our Data Protection Officer (DPO):

Peter Suhren

Phone: +49 421 69 66 32-822

Fax: +49 421 69 66 32-81

E-mail: psuhren@first-privacy.com, dataprivacy@finanteq.com

‍

7. Cookies

‍

The Website uses cookies and similar technologies to ensure its proper operation, improve its functionality and analyse how the Website is used. Cookies are small text files stored on your device that help us ensure the proper and secure functioning of the Website.

‍

We use the following categories of cookies:

• Strictly necessary cookies – enable the proper functioning of the Website and do not require your consent;
• Functional cookies – remember your selected settings and preferences;
• Analytical cookies – enable us to analyse how the Website is used and compile anonymous statistics that help us improve the Website.

Cookies other than strictly necessary cookies are used only after obtaining your consent through the cookie banner. You may withdraw your consent or modify your cookie preferences at any time using the settings available in the cookie banner or through your web browser settings.

‍

8. Google Analytics

‍

The Website uses Google Analytics, a web analytics service provided by Google LLC, to generate anonymous statistics regarding the use of the Website. The information collected through Google Analytics is used exclusively for analytical purposes and helps us develop and improve the Website.

‍

Further information on how Google processes personal data is available in Google's Privacy Policy:

https://policies.google.com/privacy

‍

9. Changes to the Privacy Policy

‍

This Privacy Policy may be updated from time to time to reflect changes in applicable law, the operation of the Website or the scope of the services provided.

The current version of this Privacy Policy is always available on the Controller's website at www.finanteq.com.

‍

Last updated: 1 August 2026.

‍

‍

FINANTEQ MOBILE APPLICATIONS PRIVACY POLICY

‍

1. Scope

‍

This Mobile Applications Privacy Policy sets out the principles governing the processing of personal data of users of mobile applications made available by Finanteq S.A.

The controller of the personal data of users of mobile applications made available by Finanteq S.A. is Finanteq S.A. with its registered office in Lublin, ul. Nałęczowska 16, 20-701 Lublin, Poland, entered in the Register of Entrepreneurs of the National Court Register under KRS No. 0000521114, Tax Identification Number (NIP): 713-30-87-558, Statistical Identification Number (REGON): 061722409 (the "Controller"). To the extent not governed by this Privacy Policy, the provisions of the Controller's general Privacy Policy available on the Controller's website shall apply.

‍

2. Categories of Personal Data Processed

‍

Depending on the functionality of the application, we may process:

• data provided during registration, including first name, last name and e-mail address;
• information collected during use of the application, including information about the services used, device information and location information obtained from the device;
• statistical data collected through Google Analytics.

‍

3. Purposes and Legal Bases for Processing

‍

Personal data are processed for:

• providing services through the application, including creating and maintaining a user account and enabling the application's functionalities, pursuant to Article 6(1)(b) GDPR;
• ensuring application security and resolving technical issues, pursuant to Article 6(1)(f) GDPR;
• statistical analyses and monitoring the use of the application, on the basis of consent where required by law pursuant to Article 6(1)(a) GDPR;
• compliance with legal obligations pursuant to Article 6(1)(c) GDPR.

‍

4. Recipients of Personal Data

‍

Personal data may be disclosed to service providers acting on behalf of the Controller, including IT, hosting, analytics, cloud and maintenance providers, and to public authorities where required by law.

‍

5. Transfers outside the EEA

‍

Where the application uses providers established outside the EEA (e.g. Google LLC), personal data may be transferred outside the EEA subject to appropriate safeguards under the GDPR, including the European Commission's Standard Contractual Clauses.

‍

6. Retention

‍

Data are retained for the period of use of the application and thereafter as required by law or for legal claims. Data processed on the basis of consent are retained until consent is withdrawn.

‍

7. Data Subject Rights

‍

The user has the right to:

• access their data;
• rectify (correct) their data;
• erase their data ("right to be forgotten");
• restrict the processing of their data;
• data portability – in cases provided for by the GDPR;
• object to the processing of their data;
• withdraw consent at any time, provided that the processing is based on consent;
• lodge a complaint with the President of the Personal Data Protection Office.

‍

8. Device Permissions

‍

The User has control over the scope of data provided, including personal data, by modifying the device settings regarding information transmitted while using the application. The User may at any time manage the consents granted to the application, in particular those concerning access to location, camera, device storage, microphone, or push notifications, via the device’s operating system settings.

‍

9. Data Security

‍

The Controller implements appropriate technical and organizational measures to ensure the protection of personal data in accordance with the GDPR requirements, in particular securing the data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

‍

10. Changes

‍

The current version is available at www.finanteq.com.

‍

Last updated: 1 August 2026.

‍