Site
Privacy notice
CDFI Atlas sets no cookies and runs no analytics or ads. It loads nothing from other companies unless you open a map. The only personal data involved is what our host processes to deliver pages and what you choose to send us.
Who is responsible
The controller of personal data on this site is ZILIO Marzena Rewers, Gliwicka 35, 42-600 Tarnowskie Góry, Poland (VAT PL6451705993), contact@cdfiatlas.com. ZILIO Marzena Rewers is a sole proprietorship registered in Poland, so the EU General Data Protection Regulation (GDPR) applies to everything below, wherever you are.
What the site does not do
- No cookies, no analytics, no advertising, no tracking pixels and no social-media plugins.
- No scripts, fonts or images from other companies: everything is served from our own site, except map tiles after you choose to open a map (below).
- No browser storage unless you use the shortlist (below). The finder runs in your browser; the ZIP code and filters you choose are not sent to us.
- No accounts, no newsletter, and we do not take loan applications.
Your shortlist
If you press Save to shortlist on a lender page, the lenders you saved and any notes you type on the shortlist page are kept in your browser's local storage on your device. They are never sent to us, and we cannot see them. Nothing is stored until you press the button. Clear list on the shortlist page, or clearing this site's data in your browser, deletes them, and the site deletes them itself after 6 months without a change. This storage is part of the feature you ask for when you press the button, so it needs no consent banner (ePrivacy Directive article 5(3); Polish Electronic Communications Law, article 399). A link made with Share this list holds only the lenders' page names, after a # that browsers do not send to servers; your notes are never in it.
Maps and directions
Lender and county pages have a Show on map button. Nothing is loaded from anyone else until you press it. When you do, your browser fetches the map background (tiles, styles and place-name fonts) from OpenFreeMap (openfreemap.org), a free map service built on OpenStreetMap data. Like any web server, OpenFreeMap receives your IP address, browser details and the map area being shown; it sets no cookies. The map program itself (MapLibre) is served from our own site. The map does not ask for or use your location.
Directions links on lender pages open Google Maps with the lender's address. That happens only if you click one, and Google's privacy policy then applies.
Hosting
The site is served by Cloudflare, Inc. (United States), which hosts it for us under its data processing addendum. Like any web host, Cloudflare processes technical data for each request, such as your IP address, the page address (including a ZIP code if you open a finder link that contains one), the referring page and your browser's user-agent string, to deliver pages and protect the site from attacks. Cloudflare may process this data outside the European Economic Area under the safeguards the law requires (the EU-U.S. Data Privacy Framework and standard contractual clauses). We keep no server logs of our own. Legal basis: GDPR article 6(1)(f), our legitimate interest in running a secure site.
Messages you send us
When you use the contact form or email contact@cdfiatlas.com, we receive your email address, your message, and anything else you add (name, organisation, page address). We use it to reply and to make the correction you ask for (article 6(1)(f), legitimate interest in answering you; article 6(1)(b) where you ask us to act on your listing). To stop spam, the contact form limits how many messages one connection can send per minute; Cloudflare counts them under a one-way hash of the IP address, not the address itself, and the count expires after a minute.
Messages from the form and emails to contact@cdfiatlas.com are passed on by Cloudflare's email service to our Gmail mailbox, so Google (United States) processes them as well. We use an AI assistant to sort messages and draft replies; it runs on OpenAI's models, so message text is processed by OpenAI (United States) as well. We do not use your message for anything else, do not add you to any list and do not share it with lenders unless you ask us to.
We delete messages 12 months after our last exchange with you. For corrections and removals we keep a log of the date, the topic and the lender page concerned, without your name, address or message, so we can show when each request was handled.
People named on lender pages
Lender pages show business information: the lender's name, address, general phone numbers and general email addresses (such as info@), and short quotes from the lender's own public website. We do not publish personal email addresses. If a quote names you, or you work for a listed lender and want something about you removed, tell us and we will remove it within 7 days.
Your rights
You can ask us for a copy of your personal data, to correct it, to delete it, to restrict its use, or object to how we use it, through the contact page or contact@cdfiatlas.com. You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or the authority where you live in the EU.
We do not sell or share personal information, and we make no automated decisions about you.
Changes
If this notice changes (for example if the site ever shows advertising), the new version will be posted here with a new date before the change takes effect.
Last updated 15 November 2026.
Source: CDFI Atlas, cdfiatlas.com/privacy/. © 2026 CDFI Atlas. Quoting with a link is welcome; republishing the pages or the compiled data is not (terms of use).