Last updated: 31 October 2026
1. Who we are
This Privacy Policy explains how personal data is processed when you visit polandfdi.com (the "Website"), contact us or use the tools available on the Website.
The controller of your personal data is EXEC GROUP SP. Z O.O., ul. Grawerska 111, 51-180 Wrocław, Poland, entered in the National Court Register (KRS) under number 0000814454, NIP 8952211978, REGON 384907372 ("Poland FDI", "we", "us"). Poland FDI is a brand operated by EXEC GROUP SP. Z O.O.
You can contact us about personal data at:
- contact@polandfdi.com
- p.lopatka@polandfdi.com
- by post: EXEC GROUP SP. Z O.O., ul. Grawerska 111, 51-180 Wrocław, Poland
We have not appointed a Data Protection Officer. Please send all data-protection requests to the contacts above.
2. What data we process
Depending on how you interact with us, we may process:
- Identification and contact data: first and last name, email address, phone number, company name, job title.
- Enquiry and project data: information you provide about your company, sector, investment plans, location requirements, timelines and any message content.
- Assessment data: answers you give in the Poland Investment Readiness Score™ and the AI Location Advisor, and the results generated from them.
- Opportunity Desk data: your enquiry about a listed opportunity, your investor profile and any documents you request or receive.
- Membership and cooperation data: information submitted in applications to join our advisory network or partner ecosystem.
- Technical and usage data: IP address, browser type, device information, pages visited and interactions with the Website, collected through cookies and similar technologies (see Section 9).
We do not ask for special categories of personal data. Please do not include such data in your messages.
3. Purposes and legal bases
We process personal data under the EU General Data Protection Regulation (GDPR) for the following purposes:
| Purpose | Legal basis |
|---|---|
| Responding to enquiries submitted through the contact form, by email or by phone | Art. 6(1)(b) GDPR (steps taken at your request before entering into a contract) and Art. 6(1)(f) GDPR (our legitimate interest in responding to business correspondence) |
| Providing the Readiness Score, AI Location Advisor and report downloads | Art. 6(1)(b) GDPR (providing the service you requested) |
| Handling Opportunity Desk enquiries, including confidentiality (NDA) and know-your-customer checks | Art. 6(1)(b) GDPR and Art. 6(1)(f) GDPR (verifying counterparties and preventing fraud) |
| Scheduling and holding meetings | Art. 6(1)(b) GDPR |
| Managing business relationships and keeping records of our contacts | Art. 6(1)(f) GDPR (maintaining business relationships) |
| Verifying that an email address is valid and deliverable | Art. 6(1)(f) GDPR (data accuracy and preventing misuse of forms) |
| Sending business communications about our services | Art. 6(1)(f) GDPR for existing business contacts, or your consent where required by law (Art. 6(1)(a) GDPR) |
| Website analytics and non-essential cookies | Your consent (Art. 6(1)(a) GDPR) |
| Performing contracts with clients and partners | Art. 6(1)(b) GDPR |
| Accounting and tax obligations | Art. 6(1)(c) GDPR |
| Establishing, pursuing or defending legal claims | Art. 6(1)(f) GDPR |
| Securing the Website and our systems | Art. 6(1)(f) GDPR |
Where we rely on legitimate interest, you may object at any time (see Section 7).
4. Automated tools
The Readiness Score and the AI Location Advisor use automated processing, including AI-based tools, to produce a preliminary, indicative result from the information you provide. These results do not constitute decisions producing legal effects or similarly significant effects within the meaning of Art. 22 GDPR. Any advice or recommendation we give you is reviewed by a person.
5. Who receives your data
Your data may be shared with:
- Service providers acting on our behalf (processors) who support the operation of the Website, data hosting, email, customer relationship management, email-address validation, meeting scheduling and analytics. They process data only on our instructions and under data processing agreements.
- Partners and advisors in our network, only where needed to handle your enquiry and after informing you, for example a legal, tax or real-estate specialist relevant to your project.
- Counterparties of an Opportunity Desk listing, only with your agreement and, where applicable, after a confidentiality agreement is in place.
- Professional advisors (lawyers, accountants, auditors) and public authorities where required by law.
We do not sell personal data.
6. Transfers outside the EEA
Some of our service providers may process data outside the European Economic Area, including in the United States. In such cases we ensure an adequate level of protection, for example through an adequacy decision of the European Commission (including the EU-US Data Privacy Framework, where the recipient is certified) or the European Commission's Standard Contractual Clauses. You can request information about these safeguards using the contacts in Section 1.
7. Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy,
- rectify inaccurate data,
- erase your data,
- restrict processing,
- data portability,
- object to processing based on legitimate interest, including at any time to processing for direct marketing,
- withdraw consent at any time, without affecting the lawfulness of processing before withdrawal.
To exercise these rights, contact us at contact@polandfdi.com or p.lopatka@polandfdi.com. We will respond within one month, which may be extended in the cases provided for in the GDPR.
You also have the right to lodge a complaint with the supervisory authority in Poland: the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), www.uodo.gov.pl, or with the authority in your EU country of residence or work.
8. How long we keep data
- Enquiries and business contacts: for as long as needed to handle the enquiry and maintain the business relationship, and then until you object or until our records are reviewed and the data is no longer needed.
- Readiness Score, AI Location Advisor and Opportunity Desk data: for as long as needed to provide the service and follow up on it.
- Contract and accounting data: for the period required by Polish tax and accounting law.
- Data needed for legal claims: until the relevant limitation periods expire.
- Data processed on the basis of consent: until you withdraw consent.
- Cookies: for the lifetime described in the cookie settings.
9. Cookies and similar technologies
The Website uses cookies and similar technologies:
- Strictly necessary: required for the Website to work and to remember your cookie choices. These do not require consent.
- Analytics and marketing: help us understand how visitors use the Website, recognise returning visitors and improve our communication. These are used only with your consent.
The Website also loads fonts from an external provider, which involves transmitting your IP address to that provider.
You can change your cookie choices at any time using "Cookie settings" in the footer of the Website or in your browser. Blocking some cookies may affect how the Website works.
10. Is providing data required?
Providing data is voluntary. Fields marked as required in our forms are needed for us to respond to your enquiry or provide the requested tool. Without them we cannot handle your request.
11. Security
We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including access controls, encrypted connections and limiting access to persons who need it.
12. Links to other websites
The Website contains links to external websites, including social media and sources of the data we publish. This Privacy Policy does not apply to those websites.
13. Changes to this Privacy Policy
We may update this Privacy Policy. The current version is always available on this page, with the date of the last update shown at the top.
