Legal

Privacy Policy

Last updated August 13, 2026

PD Capital sp. z o.o. (“PD Capital”, “we”, “us”, “our”) is committed to maintaining high standards of confidentiality, transparency, and data protection. We respect the privacy of individuals who interact with us, including visitors to our website, business partners, advisors, and representatives of portfolio and prospective portfolio companies.

This Privacy Policy explains how we collect, use, disclose, and safeguard personal data in accordance with applicable data protection laws, in particular Regulation (EU) 2016/679 (the “GDPR”).

Data Controller

The controller of your personal data is PD Capital spółka z ograniczoną odpowiedzialnością, with its registered office in Warsaw, ul. Twarda 18, 00-105 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register maintained by the District Court for the Capital City of Warsaw in Warsaw, 12th Commercial Division of the National Court Register, under KRS No. 0001070078, NIP 5252980851, share capital: PLN 50,000.00.

For matters relating to privacy and the processing of personal data, you may contact us at: info@pdcapital.pl

Scope of this Policy

This Privacy Policy applies to individuals whose personal data we may process in the course of our business activities, including:

  • website visitors;
  • business partners and advisors;
  • representatives, officers, and employees of portfolio and prospective portfolio companies;
  • persons who contact us regarding potential investments, transactions, or other business opportunities; and
  • other professional contacts.

It covers all interactions with PD Capital across digital and offline channels.

Personal Data We Collect

We collect personal data that you voluntarily provide to us, including when you contact us, engage in business discussions, or explore potential cooperation.

This may include:

  • your name, professional role, and company affiliation;
  • contact details, such as your email address and telephone number;
  • the content of correspondence and other information or documents that you choose to provide to us.

Where we obtain personal data from sources other than directly from you, we process such data in accordance with the GDPR and provide the information required by applicable data protection law.

Website Enquiries

When you submit an enquiry through our website, we process the personal data you provide for the purpose of responding to your request and, where relevant, maintaining subsequent business communication relating to that request.

Technical Data

When you use our website, our servers and security systems may automatically process certain technical data, including your IP address, date and time of access, requested URL, browser and device information, and security logs. We process such information where necessary to operate, maintain, and protect our website and IT systems.

Purpose of Data Processing

We process personal data only where necessary and for legitimate business purposes, including:

  • establishing and maintaining professional relationships;
  • evaluating and managing potential or ongoing business opportunities;
  • responding to inquiries and communications;
  • improving our website and digital presence;
  • ensuring security and integrity of our systems.

We do not process personal data for purposes unrelated to our core business activities.

Legal Basis for Processing

Depending on the context, personal data is processed on the basis of:

  • our legitimate interests in conducting and developing business relationships;
  • your consent, where required, including in relation to non-essential cookies or specific communications;
  • the necessity to perform a contract with you or to take steps at your request before entering into a contract; or
  • the necessity to comply with applicable legal obligations.

Providing personal data is voluntary. However, failure to provide information necessary to respond to your enquiry may prevent us from responding to your request.

Where particular personal data is required by law or is necessary to enter into or perform a contract, we will inform you accordingly.

Data Sharing

We do not sell personal data and treat all information shared with us with strict confidentiality.

Where necessary, personal data may be shared with:

  • selected professional advisors and service providers supporting our operations;
  • affiliated entities within our investment structure; and
  • public authorities where required by applicable law.

Personal data is shared only where necessary and in accordance with applicable confidentiality and data protection requirements.

International Data Transfers

In the course of our international business activities, personal data may be transferred outside the European Economic Area (EEA).

Where applicable, such transfers are made on the basis of an adequacy decision of the European Commission or subject to appropriate safeguards, including Standard Contractual Clauses or other mechanisms recognised under applicable data protection law.

You may contact us at info@pdcapital.pl for further information about the safeguards applicable to such transfers.

Data Retention

Personal data relating to enquiries, business communications, and potential business opportunities is generally retained for up to 3 years from our last substantive contact.

Data relating to contractual relationships, legal obligations, or legal claims may be retained for longer where required by applicable law or until the relevant limitation periods expire.

Your Rights

In accordance with the GDPR, where applicable, you have the right to:

  • access your personal data;
  • request correction or deletion;
  • restrict the processing of your personal data;
  • object to processing based on our legitimate interests;
  • receive and transfer your personal data in a structured, commonly used, and machine-readable format;
  • withdraw consent at any time where processing is based on consent. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal; and
  • lodge a complaint with a competent supervisory authority.

In Poland, the competent supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).

Automated Decision-Making and Profiling

We do not use personal data for automated decision-making or profiling within the meaning of Article 22 GDPR.

Right to Object

Where we process your personal data on the basis of our legitimate interests, you have the right to object to such processing on grounds relating to your particular situation.

Where personal data is processed for direct marketing purposes, you may object at any time, and we will stop processing your personal data for such purposes.

To exercise your right to object, please contact us at info@pdcapital.pl.

Cookies

Our website uses cookies for the proper functioning, security and administration of the website.

In particular, we use:

  • Google reCAPTCHA to protect our contact form against spam, automated submissions and abuse. In connection with the use of reCAPTCHA, Google may process certain technical information, such as IP address, device and browser information, and interaction data, and may use cookies or similar technologies. More information is available in Google’s Privacy Policy and Terms of Service.
  • Wordfence Security to protect the website against malicious activity, unauthorised access and other security threats. For these purposes, Wordfence may process technical information, including IP addresses and information relating to requests made to the website, and may use cookies or similar technologies where necessary to provide security functionality. More information is available in the Wordfence Privacy Policy.
  • A cookie consent mechanism to remember the user’s cookie preferences.
  • WordPress technical cookies, which are used solely for administrator authentication and access to the website’s administration panel and are not used for ordinary website visitors.

We do not use Google Analytics or other analytics, advertising, marketing, profiling or behavioural tracking tools.

The cookies and similar technologies used on the website are limited to purposes related to website functionality, security, spam protection, administrator authentication and the storage of cookie preferences. You can manage or disable cookies through the settings of your web browser or device. 

Data Security

We implement appropriate technical and organizational measures to protect personal data against unauthorized or unlawful access, loss, destruction, alteration, or disclosure.

Access to personal data is restricted to authorized personnel and service providers who require such access for legitimate business purposes and are subject to appropriate confidentiality and data protection obligations.

External Links

Our website may contain links to third-party websites. PD Capital is not responsible for the privacy practices of such websites, and we encourage you to review their privacy policies independently.

Changes to this Policy

We may update this Privacy Policy from time to time. The current version will always be available on our website.

Contact

For any questions regarding this Privacy Policy or the processing of your personal data, please contact us at info@pdcapital.pl.