Privacy policy.

1. Controller and contact

The controller for this website is Falcon Capital PSA, a Polish simple joint-stock company at ul. Wadowicka 7, Kraków, Poland. KRS: 0000926207. NIP: 6772469421.

Privacy requests can be sent by post to this address, marked “Personal data protection”. Company details are also available in the Imprint. The company privacy email and any data protection officer details remain to be confirmed.

2. Website and form scope

The website presents Falcon PM’s sectors, projects and investment mandates. The form is intended to help understand an investor and their criteria before sharing detailed materials.

Once SMTP is configured, the form emails your enquiry to Falcon PM. Data is sent to the website server and configured mailbox. The form backend does not create an enquiry database. Until submission, entries remain in browser memory.

There are no user accounts or payments. Completing the form does not automatically grant access to projects, teasers or NDAs.

3. Data and purposes

Form fields cover name, company or fund, position, company website, business email, country, investor or intermediary role, represented entity and mandate.

Investment criteria include sectors, locations, project type and stage, investment value range, risk profile, target return, timing, capital source and a description of the sought investment. Do not provide sensitive personal data, identity documents, passwords or unnecessary information about others.

Submission is used to handle enquiries, review mandates and prepare a discussion about cooperation.

4. Legal bases

Business correspondence may rely on steps taken at the individual’s request before entering a contract (GDPR Article 6(1)(b)) or the company’s legitimate interest in business communication, particularly with company representatives (Article 6(1)(f)).

Website security and operation may rely on legitimate interests in protecting the service and preventing misuse. Legal obligations may require processing under Article 6(1)(c). Where a function requires consent, its purpose and conditions will be presented before it starts.

5. Providers and technical data

Images and animation frames are served from this website. The server receives technical request information, including IP address, time, resource address and information supplied by the browser. Production hosting, log scope and retention remain to be confirmed.

The current version loads fonts through Google Fonts from fonts.googleapis.com and fonts.gstatic.com. These requests disclose technical information, including IP address, to Google. Consult Google’s documentation and privacy policy for further details.

The recipient is the company identified as the controller. Hosting and email providers remain to be confirmed. Server-side spam protection does not use an external CAPTCHA service.

Google Fonts — Privacy policy ↗

6. Transfers outside the EEA

External services, including Google fonts, may involve processing outside the European Economic Area. Specific locations and transfer arrangements require confirmation of provider terms.

Before final publication, actual recipients and applicable transfer safeguards must be specified where transfers occur, including those associated with production hosting and email.

7. Retention

Submitted enquiries are received in the configured mailbox. The backend stores technical session data and attempt counters associated with a protected hash of the IP address. Counters older than two hours are periodically removed. Mailbox and hosting log retention remain to be confirmed.

Future applications and correspondence will be retained as needed to handle enquiries, maintain the business relationship, protect legal claims or fulfil legal obligations. Specific application and log retention periods must be set before submission and production hosting are launched.

8. Cookies and browser storage

The website does not set advertising or analytics cookies. The form uses the session cookie “falcon_form” to protect submissions. The localStorage entry “falcon-language-choice” stores only a manually selected language, without form data.

A manually selected language stays saved until site data is cleared. Without a choice, the browser language is used: Polish, German or English, with English for other languages. The lang URL parameter specifies a particular language version.

Any cookies or similar technologies added by production hosting need separate verification. Functions requiring consent will be described and enabled in accordance with applicable device storage and access rules.

9. Your rights

Subject to GDPR conditions, you may request access, rectification, erasure, restriction and portability. You may object to processing based on legitimate interests and withdraw consent, where used, for future processing.

Requests can be sent to the controller’s postal address above. You may complain to Poland’s President of the Personal Data Protection Office or another competent supervisory authority. The site does not make solely automated decisions with legal effects or automatically qualify investors.

Urząd Ochrony Danych Osobowych ↗

10. Updates and outstanding information

This policy will be updated when features, providers or processing change. Its version date appears above. Before final publication, the privacy contact, hosting, email, recipients, retention and safeguards for any transfers must be confirmed.