Privacy Policy

1. General Information

The data controller is CONTRACTSPOT SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, located at al. Jana Pawła II 43A/37B, 01‑001 Warsaw, Poland, entered into the National Court Register (KRS): 0001168678, NIP: 8551611318, REGON: 541554254. For matters related to personal data processing, contact us at: Email: contact@contractspot.io Phone: +48 574 885 996

2. Purposes and Legal Basis of Processing

Personal data is processed for the following purposes:

• Contract performance and customer service Legal basis: Article 6(1)(b) of GDPR Scope: identification data, contact details, correspondence content

• Marketing activities, including newsletter distribution Legal basis: Article 6(1)(a) of GDPR (consent) Scope: name, email address, phone number

• Fulfilling legal obligations (e.g. tax, accounting) Legal basis: Article 6(1)(c) of GDPR Scope: data required by law

• Pursuing legitimate interests of the controller (e.g. enforcing claims) Legal basis: Article 6(1)(f) of GDPR Scope: data necessary for identification, contact, and documentation

3. Data Recipients

Data may be shared with:

• Employees and associates authorized by the controller
• Providers of technical and organizational services (e.g. hosting, mailing, accounting)
• Public authorities – where required by law

4. Data Retention Period

• Data processed in connection with a contract: for the duration of the contract and 5 years after its termination
• Marketing data: until consent is withdrawn
• Data processed for accounting and legal obligations: for the period required by law (usually 5 years)
• Data necessary for pursuing claims: until the expiration of claims (usually up to 6 years)

5. Rights of the Data Subject

You have the right to:

• access your personal data,
• rectify or delete your data ("right to be forgotten"),
• restrict processing,
• data portability,
• object to processing based on legitimate interests,
• withdraw consent at any time – without affecting the legality of prior processing,
• lodge a complaint with the President of the Personal Data Protection Office (PUODO).

6. Cookies

Our website uses cookies to:

• ensure proper functioning of the website,
• analyze traffic (e.g. via Google Analytics),
• conduct marketing activities (e.g. remarketing).

You can change your cookie settings in your browser or via the privacy preferences panel.

7. Automated Decision Making

We do not use automated decision-making or profiling that produces legal effects or similarly significantly affects individuals.

8. Data Transfers Outside the EEA

We do not transfer personal data outside the European Economic Area. If such transfers become necessary, we will ensure appropriate safeguards, e.g. standard contractual clauses.

9. Changes to the Policy

This privacy policy may be updated. Significant changes will be announced by publishing a new version on our website.