GDPR Information Clause

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), we inform you:

Data Controller

The controller of your personal data is CONTRACTSPOT Sp. z o.o., al. Jana Pawła II 43A/37B, 01‑001 Warsaw, Poland. Email: contact@contractspot.io Phone: +48 574 885 996

Purposes of Processing

Your personal data may be processed for the following purposes:

• conclusion and performance of a contract (Article 6(1)(b) GDPR),
• compliance with legal obligations (Article 6(1)(c) GDPR),
• contact for informational or marketing purposes (based on consent – Article 6(1)(a) GDPR),
• establishment, exercise, or defense of legal claims (Article 6(1)(f) GDPR).

Data Recipients

Data may be transferred to entities providing services to the controller (e.g. IT, hosting, accounting), public authorities pursuant to legal obligations, and other entities authorized under the law.

Data Retention Period

Your data will be stored:

• for the duration of the contract and 5 years thereafter,
• until consent is withdrawn (in case of consent-based processing),
• for the period required by law or until the limitation period for claims expires.

Your Rights

You have the right to:

• access your data,
• rectify your data,
• erase your data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent at any time,
• lodge a complaint with the supervisory authority (PUODO).

Data Transfer Outside the EEA

We do not transfer personal data outside the European Economic Area. If required, we will apply appropriate safeguards.