Privacy policy
Current for 2026.
Who processes the data
The data controller is Fundacja „Twój StartUp”, which runs our studio under the westrona brand. For data matters write to kontakt@westrona.com.
What data we collect
Only what you enter in the contact form yourself: your name or company name, a phone number and the text of your message. Together with the enquiry we store the address of the page it was sent from, so that we know what it concerns.
Why, and on what legal basis
The data serves solely to answer your enquiry and prepare an offer. The basis is Article 6(1)(b) GDPR — steps taken prior to entering into a contract — and (f), our legitimate interest in replying to someone who wrote to us. We send no newsletters and profile no one.
Where enquiries go
An enquiry from the form goes to two places at once. The first is our database hosted on Cloudflare infrastructure, where the enquiry is stored. The second is a notification that reaches us in the Telegram messenger so that we can reply the same day; it carries the same data you entered in the form. Telegram processes it on servers outside the European Economic Area, on the terms described in the Telegram privacy policy.
Beyond those two recipients we pass the data to no one: we do not sell it and do not share it with third parties for marketing.
How long we keep it
We keep enquiries for up to 24 months from the last contact. If it leads to working together — for as long as accounting law requires. You can ask us to delete it sooner at any time.
Your rights
You have the right to access your data, correct it, delete it, restrict its processing, transfer it, and to object. An email to kontakt@westrona.com is enough. You may also lodge a complaint with the Polish supervisory authority — Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office).
Connected Facebook and Instagram profiles
As part of the Obecność service, a client may connect their Facebook Page and the Instagram professional account linked to it in the Client account (westrona.com/konto), using Meta's Facebook Login for Business. After connecting we store: the Page ID and name, the Instagram account ID and username, and an access token issued by Meta Platforms Ireland Ltd. that lets us publish content only on those profiles and only on the client's instructions — every post is triggered manually by our team, nothing publishes on its own. We do not read private messages and do not collect lists of friends or followers. The legal basis is performance of the contract (Article 6(1)(b) GDPR). The token is kept on Cloudflare infrastructure until the client disconnects the profile (the “Odłącz” button in the Client account) or the service ends; photos uploaded for publication are kept for up to 30 days. The profile can also be disconnected on Meta's side: Settings → Apps and websites → westrona. Details and data deletion instructions: westrona.com/konto/polaczenia.
Cookies and statistics
The site uses no advertising or tracking cookies. The only thing we store in your browser is your choice of light or dark theme — technically an ordinary entry in the device's local storage, with no identification of a person. Visit statistics are collected in a cookie-free way, on the hosting side.
Scripts and fonts
We serve every font and script from our own server. There are no advertising pixels, social media plugins or external analytics tools here.