1. Who is responsible for your data
The data controller is KODiSEO Paweł Filipkowski, Chrobrego 4/7, 14-100 Ostróda, Poland, tax identification number 7411908934. For privacy questions or requests concerning your information, email kontakt@kodiseo.pl. This policy covers accounts, seller profiles, listings, inquiries and technical operation of beta.klimapro.site.
2. Information you provide
For a guest inquiry, we process your name, email address and verification-link information, and email you when a reply is available. An account can receive the conversation only after mailbox verification and an explicit link-confirmation step. When you register, we process your username, email address, password in hashed form and the profile information you choose to provide. Seller records may include a store name, description, location, public contact details, images and business details. Listings contain the text, images, prices and product or service details submitted by the seller. Inquiries contain your account identifier, recipient, related listing, subject, message and submission date. Auction tests record your account identifier, bid amount and time. Do not include sensitive information in public listings or messages.
3. Technical information
Our website and technical providers may process your IP address, browser information, request time, visited address, session identifiers and security events to deliver the site, maintain sessions and investigate abuse. Passwords are not published or made available to sellers. The platform does not make decisions about you with legal or similarly significant effects through automated profiling.
4. Purposes and legal bases
Account administration, seller tools and delivery of inquiries are necessary to provide the platform service you request, under Article 6(1)(b) GDPR. Preventing abuse, protecting accounts, diagnosing faults and handling general correspondence serve our legitimate interests in a secure and reliable service, under Article 6(1)(f). We process information required to fulfil a specific legal obligation under Article 6(1)(c). If an optional feature relies on consent, we will request it separately and explain how to withdraw it.
5. Public information and recipients
Storefronts and published listings are visible to other visitors. Information included in a public description, image or contact field may therefore be accessible publicly. A seller receiving your inquiry sees the account name and message needed to respond. Auction history uses a masked participant label rather than your email address. Authorised platform administrators can access information needed for support and moderation. Hosting, email, security and maintenance providers process information as necessary to operate the service. We do not sell your personal information.
6. Cookies and saved listings
Essential session cookies support sign-in and security. They are used to provide functions you request. Your shortlist is stored on your device using local storage under klima_ui.shortlist.v2. It contains the saved listing identifiers, titles, links, image links, prices and locations, and remains until you remove items or clear your browser storage. It is not synchronised with your account. This version has no advertising pixels or optional analytics added by the marketplace theme. Blocking essential cookies may prevent sign-in; clearing local storage removes your shortlist.
7. How long information is kept
Account and profile records are kept while your account remains active and are reviewed when you request account closure or deletion. Listing and message records are kept for the operation of your account and handling of related inquiries, disputes or abuse reports. When these purposes end, information should be deleted or anonymised unless a legal obligation or an unresolved claim requires continued retention. Technical logs and backups follow the operational retention periods of the hosting and security providers. Data retained for a legal claim is limited to what is needed until the relevant claim or limitation period ends. Contact us for the retention information applicable to a particular record.
8. Your rights
Subject to the conditions set out in the GDPR, you may request access, correction, erasure, restriction, or a portable copy of information processed automatically on the basis of consent or a contract. You may object to processing based on legitimate interests, and withdraw consent where processing relies on it. Withdrawal does not affect earlier lawful processing. Email kontakt@kodiseo.pl with your request; we may need proportionate information to verify your identity. We normally respond within one month. You can lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or the supervisory authority in your country of residence or work.
9. Service providers and international processing
The site uses technical infrastructure for hosting, email delivery and security. A provider may operate infrastructure in more than one country. If processing involves a transfer outside the European Economic Area, the applicable GDPR transfer requirements must be met, such as an adequacy decision or appropriate contractual safeguards. You can request information about the providers involved in your data and the relevant transfer arrangements by contacting the controller.
10. Your choices and account closure
Browsing public listings does not require an account. Supplying registration information is voluntary, but the required fields are needed to create an account and use messaging. You can edit available profile fields in your account settings. To request account closure or removal of personal information not editable there, contact kontakt@kodiseo.pl. Sellers receiving information in a separate commercial relationship may act as independent controllers; request their privacy information directly.
11. Payments and changes to this policy
The checkout processes the contact and delivery details you enter while you complete its steps. Card details are entered on Stripe’s hosted checkout, and test transactions do not create commercial orders. Stripe is a payment service provider; see stripe.com/privacy for its privacy information. Auction activity in this environment is non-binding testing. If payment, advertising or other processing features are introduced, this policy will be updated to explain the additional processing before those features are used. The effective date above identifies the current version.