Privacy Policy (GDPR)

1. General Information

This Privacy Policy defines the principles of processing and protecting personal data of Users of the znajdzwypozyczalnie.pl service. The data controller is EK-CODES Eryk Kozyra, Tax ID (NIP): 7963010272, REGON: 521582616, address: ul. Staszica 6/8/32, 26-600 Radom, Poland, email: [email protected]

2. Legal Basis for Data Processing

Personal data is processed on the basis of:

User consent (Art. 6(1)(a) GDPR) – for newsletter subscription or other voluntary consents
Contract performance (Art. 6(1)(b) GDPR) – to provide advertisement publication services
Legal obligation (Art. 6(1)(c) GDPR) – for issuing invoices and maintaining accounting documentation
Legitimate interest of the controller (Art. 6(1)(f) GDPR) – for analytical purposes and ensuring service security

3. Scope of Processed Data

User account data:

Email address, first and last name or company name, Tax ID (NIP) (optional for businesses)

Invoice data:

First and last name or company name, address, postal code, city, country, Tax ID (NIP) (for businesses), EU VAT number (for EU businesses)

Advertisement data:

Rental company contact details (address, phone, email, website, social media), photos, service descriptions

Technical data:

IP address, browser type, operating system, visit time (for security and statistical purposes)

4. Cookies

The Service uses only cookies strictly necessary for proper functioning. According to regulations, these cookies do not require user consent. We use the following cookies:

CONTENT_LANGUAGE – stores selected interface language (validity: 1 year)

Supabase authentication cookies:

sb-access-token – user authentication token (session, HTTPS only)
sb-refresh-token – session refresh token (validity: 7 days)

Stripe payment cookies:

__stripe_mid – fraud prevention identifier during payments (validity: 1 year)
__stripe_sid – payment session identifier (validity: 30 minutes)

Detailed information about Stripe cookies is available in Stripe's policy: https://stripe.com/cookies-policy/legal

The Service does not use marketing or tracking cookies. All cookies used are necessary for the proper functioning of the service and do not require user consent in accordance with Article 173(3) of the Telecommunications Law.

5. Data Recipients

Personal data may be transferred to the following recipients:

Supabase Inc. (USA) – database hosting, secured by SCCs contractual clauses
Stripe Inc. (USA) – payment processing, in accordance with Stripe's privacy policy
Public authorities – in cases provided for by law

6. Data Retention Period

Active account data – for the duration of the account's existence
Invoicing data – 5 years from the end of the tax year (legal requirement)
Advertisement data – for the duration of the advertisement's publication plus 30 days
Server logs – up to 90 days

7. User Rights

You have the following rights regarding your personal data:

Right of access – you can request a copy of your data
Right to rectification – you can correct inaccurate data
Right to erasure – you can request deletion of data (with legal restrictions)
Right to restriction of processing – you can limit data processing
Right to data portability – you can receive your data in a structured format
Right to object – you can object to processing based on legitimate interest
Right to lodge a complaint with the supervisory authority (UODO – Office for Personal Data Protection)

To exercise your rights, contact us at: [email protected]

8. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss, or destruction. Data is stored on secure servers with encryption (HTTPS, SSL/TLS).

9. Policy Changes

We reserve the right to change this Privacy Policy. Users will be informed of changes with at least 7 days' notice via email or notification in the Service. Continued use of the Service after changes take effect constitutes acceptance of the new Privacy Policy.

10. Contact

For questions regarding personal data processing, please contact: [email protected] or write to the address: EK-CODES Eryk Kozyra, ul. Staszica 6/8/32, 26-600 Radom, Poland.