Data protection

BidSentra Privacy Policy

Below you will find information on how we process personal data in connection with the BidSentra website and contact form.

Updated: 27 March 2026

Controller details were prepared on the basis of the attached current extract from the National Court Register (KRS no. 0001221405) and the current website configuration.

1. Data controller

Your personal data is controlled by UP TO YOU spółka z ograniczoną odpowiedzialnością with its registered office in Lublin, ul. Gospodarcza 26, 20-213 Lublin, entered in the Polish National Court Register under KRS no. 0001221405, NIP 9462763547, REGON 543872521.

For all matters relating to personal-data protection, you can contact us at: info@bidsentra.pl.

2. Scope and sources of data

We process data you provide voluntarily when using the contact form or contacting us by email, in particular your name, email address and the content of your message.

When you use the website, basic technical data may also be processed, such as IP address, date and time of the request, browser and device data, and logs necessary to ensure security and proper operation of the website.

3. Purposes and legal bases

We process your data to respond to your message, handle requests for an offer, demo or cooperation, and continue correspondence related to that contact.

The legal basis is Article 6(1)(b) GDPR where the contact is aimed at concluding a contract or taking steps prior to entering into a contract, and Article 6(1)(f) GDPR, namely our legitimate interest in handling correspondence, ensuring website security and defending against potential claims.

If you provide additional data in your message, you do so on your own initiative. Please do not send data we do not need to handle your request.

4. Whether providing data is mandatory

Providing data in the contact form is voluntary, but necessary for us to answer. If you do not provide the data, we may be unable to handle your request.

5. Recipients of data

Your data may be disclosed to entities we use to operate the website and handle contact, in particular providers of static hosting, network infrastructure and email-delivery services.

At the time of publication of this policy, we use in this respect GitHub Pages, Cloudflare and Brevo. These providers process data on our behalf or as separate controllers to the extent necessary for their services.

6. Transfers outside the EEA

Because we use certain technology providers, data may be transferred outside the European Economic Area. In such cases, we ensure that transfers take place lawfully, in particular on the basis of standard contractual clauses, adequacy decisions or other permitted transfer mechanisms.

7. Retention period

We store correspondence data for the period necessary to handle the matter and then for the time needed to demonstrate proper handling or defend against claims, no longer than the applicable limitation periods unless a longer retention period is required by law.

Technical data and service logs are retained for the period necessary to ensure security, detect abuse and maintain continuity of services, in line with our configuration and the policies of our providers.

8. Your rights

You have the right to request access to your data, rectification, erasure, restriction of processing and to object to processing based on our legitimate interest.

Where processing is based on Article 6(1)(b) GDPR, you may also request data portability.

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office if you believe your data is processed unlawfully.

9. Automated decision-making

Data submitted through the contact form is not used to make decisions about you by automated means, including profiling within the meaning of GDPR.

10. Cookies and similar technologies

As of the publication date of this policy, the website does not use its own cookies or similar technologies for analytics or marketing purposes that would require your consent.

When using the website, your browser and the technical infrastructure may still process data necessary to display the site, ensure transmission security and serve HTTP requests. If we add analytics, advertising or other non-essential cookie-based tools in the future, we will implement an appropriate consent mechanism before activating them and update this policy.

11. Changes to this privacy policy

This privacy policy may be updated if the operation of the website, the scope of processed data or applicable law changes. The current version is always published on this page.