Privacy Policy

Effective from: 2026-05-26 · version 1.0

§ 1. Data Controller

The data controller of personal data (GDPR, EU Regulation 2016/679) is:

§ 2. What data we process

• Registration Data (Account): e-mail, password (hash), name, optionally phone.
• Object Data: name, address, contact, description, photos, coordinates.
• Technical Data: IP address, session, User-Agent, visit date.
• Invoice Data: name/first and last name, NIP, address.
• Newsletter: e-mail address (after voluntary subscription).

§ 3. Purposes and legal bases

• Account and services — Art. 6 sec. 1 lit. b GDPR.
• Payments/invoices — Art. 6 sec. 1 lit. c GDPR (5 years).
• Security (logs, anti-spam) — Art. 6 sec. 1 lit. f GDPR (logs up to 90 days).
• Newsletter, analytics — Art. 6 sec. 1 lit. a GDPR (consent).

§ 4. Data recipients

Data may be entrusted to entities supporting the Service (hosting, payment operator, invoicing, newsletter) based on entrustment agreements.

§ 5. Cookies

The Service uses essential cookies (session, language) and — with consent — analytical cookies. Consent can be withdrawn in browser settings.

§ 6. Your rights

You have the right to access, rectification, erasure, restriction, data portability, objection, withdrawal of consent, and to lodge a complaint with the UODO.

§ 7. Contact

For privacy matters: e-mail.

Information document — consultation with a legal advisor is recommended.