Privacy Policy
How we process personal data under the GDPR (Regulation 2016/679).
1. Controller
The controller is SetRa-el KAMIL CIEŚLA, ul. Wronia 25, 98-355 Działoszyn, Polska. For data protection matters: billing@pactilo.eu. No data protection officer has been appointed; the controller handles privacy matters directly at that address. Controller registration details: SetRa-el KAMIL CIEŚLA, ul. Wronia 25, 98-355 Działoszyn, Polska, NIP 5080071038, REGON 386549675, billing@pactilo.eu.
2. Purposes and legal bases
We process data to operate your account and platform features (Art. 6(1)(b) GDPR), for security, moderation and abuse prevention (Art. 6(1)(f)), to comply with legal obligations (Art. 6(1)(c)) and, for analytics and advertising, on the basis of your consent (Art. 6(1)(a)).
3. Categories of data
We process account and profile data, content published on the platform, messages between users, documents submitted for verification, and technical data needed for security such as logs and IP addresses.
4. Recipients and processors
We share data with hosting, database and email providers. Data required to process a payment is sent to PayU, while analytics data is processed only with your consent. The current list of recipients and processors: hosting: OpenAI Sites / Cloudflare (infrastruktura globalna z zabezpieczeniami wymaganymi przez RODO); database: Supabase (region Unii Europejskiej); email: Resend (UE/EOG lub transfer na podstawie zabezpieczeń zgodnych z RODO); payments: PayU S.A. (Polska / Europejski Obszar Gospodarczy); analytics: wewnętrzna analityka PACTILO (region Unii Europejskiej).
5. Retention
Account data is kept until the account is deleted, then only where required by law or necessary to defend claims. Detailed retention periods: account: do usunięcia konta, następnie maksymalnie 3 lata dla obrony roszczeń; messages: do usunięcia konta, następnie maksymalnie 3 lata dla obrony roszczeń; jobsAndOffers: do usunięcia konta, następnie maksymalnie 3 lata dla obrony roszczeń; reviews: przez czas publikacji profilu lub do skutecznego żądania usunięcia; moderation: maksymalnie 3 lata od zamknięcia zgłoszenia; logs: maksymalnie 12 miesięcy, chyba że incydent wymaga dłuższego zabezpieczenia.
6. Transfers outside the EEA
Data is processed primarily inside the European Union. Where a provider processes data outside the EEA we rely on standard contractual clauses or another transfer mechanism permitted by the GDPR.
7. Your rights
You have the right of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. Send requests to billing@pactilo.eu.
8. Complaint to a supervisory authority
You may lodge a complaint with the supervisory authority: Prezes Urzędu Ochrony Danych Osobowych (UODO), Warsaw, Poland.
Version 1.0 · updated 2026-08-26