1. Data Controller
   Your personal data is controlled by Bastion Advisory Sp. z o.o., Warsaw, Poland.
2. What data we process and why
   We process personal data provided in connection with the use of our website, contacting us, delivering advisory services, and recruitment processes.
   Data is processed for:

• • responding to enquiries,
  • performing services and contractual obligations,
  • complying with legal requirements,
  • conducting recruitment.

Processing is based on Art. 6(1)(a), (b), (c) or (f) GDPR.

3. Data recipients
   Data may be shared with IT providers, legal advisors, accounting firms, and our other service providers—only as necessary for our operations.
4. Data retention
   Data is stored only for the period required to fulfil the purposes for which it was collected or until consent is withdrawn.
5. Your rights
   You have the right to access, rectify, delete, restrict processing, transfer your data, object to processing, and withdraw consent at any time.
   You also have the right to lodge a complaint with your data protection authority.
6. Contact
   For privacy matters:
   rodo@bastiongroup.com