Document

Privacy policy

The controller of personal data processed by PRKatalog.info is Łukasz Szramuk, operating the project as a private individual. Privacy requests can be sent to kontakt@prkatalog.info.

Data we process and why

For website submissions we process the submitted website details, notes, contact email, moderation status, and technical anti-abuse information. For accounts we process the email address, authentication identifiers, and listing relationships. For reviews we process the displayed name, rating, review text, moderation status, and technical anti-abuse information. We use this data to provide the requested features, communicate about submissions, moderate content, secure the service, and prevent abuse.

Legal bases

Data needed to provide an account, submission, review, or requested communication is processed to perform the requested service or take steps at your request. Security, moderation, fraud prevention, and service improvement rely on the controller's legitimate interests. Aggregated traffic measurement relies on the same legitimate interests: it is cookieless and stores no identifier on your device, so it does not require consent.

Service providers and transfers

PRKatalog uses Vercel for hosting, delivery, and cookieless Vercel Web Analytics, Supabase for the database and authentication, and may use Resend or another configured provider for email. Submitted editorial text may be processed by OpenAI when automated translation is enabled. Some providers may process data outside the European Economic Area under the safeguards they publish for their services.

Retention

Rejected submissions are normally retained for up to 90 days, pending submissions for up to 12 months, and approved listing data while the listing remains published. Account data is retained until account deletion and then for up to 30 days for technical cleanup. Rejected reviews and security logs are normally retained for up to 90 days unless a longer period is necessary to establish, exercise, or defend legal claims.

Your rights

Depending on the processing basis, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw consent without affecting earlier lawful processing. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

Contact

Send privacy, account, deletion, and data-access requests to kontakt@prkatalog.info. To protect users, PRKatalog may ask for information necessary to verify that the request concerns your data or account.