Privacy Policy

1. Data Controller and Contact

The data controller within the meaning of GDPR is Dealable24 Sp. z o.o., with its registered office at Marcina Kasprzaka 29/318, 01-234 Warsaw, Poland (NIP: 5273110150).

For all matters relating to personal data processing, please contact:

2. Categories of Personal Data Processed

Depending on the nature of your interaction with the Website (including submission of inquiry forms), Dealable24 may process the following categories of personal data:

• identification data (first name, last name)
• contact details (email address, phone number)
• business-related information (company name, role/title)
• information submitted via forms and correspondence, including:
  • intended regulated activity and/or target licence
  • planned activity start date
  • availability of qualified staff (e.g., director/compliance officer) and recruitment needs
  • information on technical readiness (website/software)
  • information on local substance/physical presence
  • target customer geography
  • any additional information provided in free-text fields
• technical and usage data (e.g., IP address, browser type, device information, timestamps)

Dealable24 does not require the submission of confidential documents, special category personal data, or information subject to professional secrecy. If you nevertheless choose to provide such information, you do so at your sole discretion and responsibility. Please refrain from submitting any such materials unless Dealable24 expressly requests them and provides an agreed secure channel for transmission.

3. Purposes of Processing

Dealable24 processes personal data for the following purposes:

• handling inquiries submitted by buyers and sellers
• assessing potential listings, transactions, or cooperation opportunities
• facilitating communications related to deal exploration and related services
• maintaining internal records and documentation relating to business inquiries
• ensuring Website security and preventing fraud, misuse, or abuse
• fulfilling applicable legal and regulatory obligations

Dealable24 does not conduct automated decision-making (including profiling) within the meaning of Article 22 GDPR in relation to form submissions.

Submission of an inquiry or provision of information via the Website does not create a client, advisory, brokerage, fiduciary, or contractual relationship with Dealable24.

Any preliminary assessment or response provided by Dealable24 is of an informational nature only and does not constitute legal, regulatory, financial, or investment advice.

4. Legal Bases for Processing

Dealable24 processes personal data on one or more of the following legal bases:

• consent (Article 6(1)(a) GDPR), where applicable
• taking steps at your request prior to entering into a contract (Article 6(1)(b) GDPR)
• Dealable24's legitimate interests (Article 6(1)(f) GDPR), including the assessment of business inquiries, operation of a professional marketplace, prevention of misuse, and protection of legal and regulatory interests
• compliance with legal obligations (Article 6(1)(c) GDPR), where applicable

5. Operational Model (Listings and Inquiries)

At the current stage of the platform:

• company listings are published by Dealable24
• sellers contact Dealable24 to propose listing opportunities
• buyers submit inquiry forms to express interest

Dealable24 does not publicly display personal contact details of sellers or buyers. Any sharing of personal data between parties is limited, controlled, and undertaken only where relevant to a potential transaction.

6. Recipients of Personal Data

Personal data may be disclosed only where necessary and on a limited basis to:

• Dealable24 personnel responsible for handling inquiries and operations
• external professional advisors (e.g., legal, compliance, technical) bound by confidentiality obligations
• service providers supporting Website functionality (e.g., hosting, analytics, communication tools)

Dealable24 does not sell personal data and does not disclose personal data to third parties for advertising purposes. Where service providers supporting Website functionality are located outside the European Economic Area, Dealable24 ensures that appropriate safeguards are in place (such as standard contractual clauses approved by the European Commission) to protect personal data transferred to such recipients.

Dealable24 is not responsible for the actions, omissions, or representations of third parties, including buyers, sellers, advisors, or service providers introduced or identified through the Website.

7. Data Retention

Dealable24 retains personal data only for the period necessary to achieve the purposes described in this Privacy Policy. In practice, inquiry-related data is typically retained for up to 3 years from the date of last meaningful contact, unless a longer period is required by applicable law or the nature of the transaction warrants extended record-keeping.

Personal data may be retained for longer periods where necessary for compliance with legal obligations or for the establishment, exercise, or defence of legal claims.

8. Cookies and Analytics

The Website may use cookies and/or analytics tools to ensure proper operation of the Website and to improve user experience. You may manage cookies through your browser settings.

Where required by law, Dealable24 will request consent for the use of non-essential cookies.

9. Data Subject Rights

You have the following rights under GDPR, subject to applicable conditions:

• right of access
• right to rectification
• right to erasure
• right to restriction of processing
• right to object
• right to data portability
• right to withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact: info@dealable24.com

You also have the right to lodge a complaint with the competent supervisory authority. In Poland, the supervisory authority is the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych – UODO), ul. Stawki 2, 00-193 Warsaw; website: uodo.gov.pl.

10. Security Measures

Dealable24 applies reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, misuse, alteration, or disclosure.

While Dealable24 applies measures proportionate to the nature and scope of processed data, users acknowledge that no system can guarantee absolute security and that electronic communication involves inherent risks.

11. Updates to this Privacy Policy

Dealable24 may update this Privacy Policy from time to time. The updated version will be published on the Website and will indicate the date of the latest revision.

12. Scope of Responsibility

Dealable24 provides a platform for initiating business discussions and evaluating potential opportunities. Dealable24 does not guarantee the completion, legality, regulatory approval, or commercial success of any transaction and does not verify all information provided by users unless explicitly stated.