GDPR Compliance
Last updated: April 24, 2026
CompanyFormation24 Sp. z o.o. is committed to compliance with the EU General Data Protection Regulation (GDPR) (Regulation 2016/679) and equivalent national laws including the UK Data Protection Act 2018.
Your GDPR rights
If you are a data subject under GDPR, you have the right to:
- Access — request a copy of personal data we hold about you
- Rectification — request correction of inaccurate data
- Erasure (“right to be forgotten”) — request deletion of your data, subject to overriding legal obligations
- Restriction — request that we stop processing your data while a complaint is reviewed
- Data portability — receive your data in a machine-readable format
- Objection — object to processing based on legitimate interest, including for marketing
- Withdraw consent — for any processing based on consent
- Lodge a complaint — with the Polish data protection authority (UODO) at uodo.gov.pl
Exercising your rights
To exercise any of the rights above, email [email protected] with the subject “GDPR request” and a clear description of what you would like us to do. We will respond within 30 days.
Data Processing Agreement (DPA)
Clients engaging us as a data processor (where we process personal data on the client’s behalf — for example, KYC documents of company beneficial owners) can request a Data Processing Agreement aligned with GDPR Article 28. Email [email protected].
International transfers
Where we transfer personal data outside the European Economic Area (for example, when introducing you to a non-EEA bank), we use Standard Contractual Clauses approved by the European Commission, or rely on adequacy decisions where they apply.
Data Protection Officer
For data protection enquiries: [email protected]