Privacy policy
This policy explains what personal data we process when you use the service, on what legal basis, who we share it with, and how long we keep it. We process the data necessary to provide the service and — only with your consent — anonymous usage statistics. We build no advertising profiles, do no cross-site tracking and share no data with ad brokers.
Data controller
The controller of your personal data is:
Geokolica
Data-protection contact: [email protected]
What data we process
- Email address — provided for passwordless magic-link login and at checkout.
- Transaction data — purchases, subscriptions and invoices; the payment itself is handled by the payment provider (we never store card details).
- The analyzed property address and its coordinates — entered to generate a report.
- Saved Matchmaker comparisons and your language preference — for your convenience.
Legal bases for processing
For each processing activity we state the purpose, the legal basis (Art. 6(1) GDPR) and the retention period:
| Activity | Purpose | Legal basis | Retention |
|---|---|---|---|
| Account & authentication | Run your account and passwordless magic-link login. | Performance of a contract Art. 6(1)(b) GDPR | For the life of the account. After a deletion request the data is erased and the account is permanently purged within 30 days. |
| Payments & subscriptions | Process purchases and subscriptions and manage entitlements to content. | Performance of a contract Art. 6(1)(b) GDPR | While the purchase/subscription is active and as required for accounting. On account deletion the user link is severed and the transaction record is retained for tax law. |
| Invoicing | Issue and store invoices (accounting records). | Legal obligation Art. 6(1)(c) GDPR | Receipts are kept for 5 years counted from the end of the calendar year in which the tax payment fell due (art. 86 § 1 of the Tax Ordinance) and are never deleted — the only carve-out from the right to erasure. |
| Reports | Generate and serve the property report you requested. | Performance of a contract Art. 6(1)(b) GDPR | The report snapshot is deleted on account erasure or after 90 days for a guest. Note: the analyzed address is also copied into the retained transaction metadata (see Retention). |
| Paired report (EkoRisk.pl) | Issue and fulfil the second report included in the price: the e-mail address and the report address travel in a signed link to EkoRisk.pl (and vice versa), an account is created when a report bought on EkoRisk.pl is claimed here, and one reminder e-mail about the unclaimed report is sent. Both services are run by the same controller. | Performance of a contract Art. 6(1)(b) GDPR | The link itself stores nothing extra — the data travels in the signed token. Once the report is claimed, the account and the report snapshot follow the rules above; the reminder timestamp is stored on the purchase record. |
| Service operation & security | Keep the service reliable, detect abuse and diagnose technical issues. | Legitimate interest Art. 6(1)(f) GDPR | Server logs are ephemeral (no long-term PII store); spatial-query logs 7 days, other operational logs up to 14 months. |
| Analytics (consent) | Usage measurement in Google Analytics 4 — which features are used and where people run into trouble. Enabled only after consent is given. | Consent Art. 6(1)(a) GDPR | Until you consent, no request is sent to Google at all. Google retains event data for up to 14 months; the `_ga` cookies live up to 24 months on the device and are deleted when consent is withdrawn. IP addresses are anonymised and advertising signals stay denied, so no advertising profile is built. The consent record itself is kept for 12 months. |
| Marketing (consent) | Record a separate marketing opt-in — as a flag only (no sends). | Consent Art. 6(1)(a) GDPR | We store only the consent flag. We build no list and send no marketing email. Consent can be withdrawn at any time. |
Recipients (processors)
We entrust data to the following trusted providers, only as far as necessary to run the service. Transfers outside the EEA rely on appropriate safeguards:
| Provider | Role | Location | Transfer safeguard |
|---|---|---|---|
| Google Ireland Limited | Usage analytics (Google Analytics 4) — consent-gated | Ireland (EU), with onward transfers to the United States | Standard Contractual Clauses + EU–US Data Privacy Framework |
| Stripe, Inc. | Card / payment processing | United States | Standard Contractual Clauses + EU–US Data Privacy Framework |
| PayPro SA (Przelewy24) | Payment processing (BLIK, bank transfer, cards) | Poland (EU) | Within the EEA |
| Resend, Inc. | Transactional email delivery (magic links, receipts, report links) | United States | Standard Contractual Clauses |
| Hetzner Online GmbH | Cloud hosting / application + database infrastructure | Germany (EU) | Within the EEA |
Data retention — honestly
We keep the account and its data for the life of the account. After a deletion request the data is erased and the account is permanently purged within 30 days at the latest.
Receipts and transaction records are kept for 5 years under Polish tax law — receipts are not deleted.
Logs and analytics are kept up to 14 months (coordinate-query logs — 7 days).
Honestly: on account erasure the analyzed address copied into the retained transaction metadata may remain on the tax record, some free-preview reports (with no linked purchase) cannot be auto-deleted, and a failed synchronous erase may leave up to a 30-day window to complete. We do not promise guarantees our code does not deliver.
Your rights
In connection with our processing you have the right to:
- access your data and obtain a copy,
- rectify inaccurate data,
- erase your data (“right to be forgotten”), except invoices retained by law,
- restrict processing,
- data portability,
- object to processing based on legitimate interest,
- withdraw consent at any time (without affecting lawful processing before withdrawal).
You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
We may update this policy as the service evolves. The current version is always available on this page.