Privacy and personal data protection policy
Legal bases for data processing
Processing is carried out based on the following legal foundations:
- Contract performance: When data is necessary for the provision of services requested by the user.
- Legal obligation: When Polish regulations impose on us the obligation to verify identity or report specific events.
- Legitimate interest: To ensure network security, detect fraud, and improve technical tools.
- Consent: In the case of voluntary additional services, such as subscribing to informational communications.
Purposes of data use
The collected information is used for:
- Proper user account management and verification of entitlements.
- Providing efficient technical support and resolving reported issues.
- Analyzing service performance to implement ergonomic improvements.
- Protection against cyber threats and actions violating the terms and conditions.
- Fulfilling regulatory requirements regarding operational transparency in Poland.
Retention period and data deletion
We store personal data only for the period necessary to achieve the purposes for which it was collected, or for the time required by law (e.g., statute of limitations for claims, tax obligations). After this period, data is permanently and securely deleted or subjected to anonymization, which prevents the information from being attributed to a specific person.
Data sharing and international transfers
We never sell user data to third parties. Data may only be transferred to trusted technology providers (e.g., server operators) who act on our behalf based on data processing agreements. In situations provided by law, we may be obliged to provide data to law enforcement agencies in Poland. In the case of transfers outside the European Economic Area, we apply Standard Contractual Clauses approved by the European Commission.
Security measures
We apply advanced technical and organizational measures to protect data against loss, unauthorized access, or modification. These include:
- SSL/TLS connection encryption.
- Intrusion detection systems and firewalls.
- Strict access control for authorized personnel.
- Regular security audits of IT infrastructure.
User rights
In accordance with GDPR, every user has the right to:
- The right to access their data.
- The right to rectify incorrect information.
- The right to erasure of data ('right to be forgotten').
- The right to restriction of processing.
- The right to data portability.
- The right to object to processing based on legitimate interest.
Privacy Contact
To exercise your rights or obtain additional information, please contact us at: [email protected]. Each request is analyzed individually, and responses are provided within the timeframes stipulated by Polish law.
Changes to Privacy Policy
The policy is regularly reviewed and updated. All changes will be published on this subpage. Continued use of the service after changes have been introduced means acceptance of the new version of the document.