Privacy Policy

Your privacy is our priority. Learn how we protect and use your data.

Last updated: 22 października 2025

Policy effective from: 22 października 2025

This Privacy Policy explains what personal data we collect, how we use it, and what rights you have in relation to the processing of your data. Please read this document carefully.

1. Personal data controller

The controller of your personal data is:

Global Trade Hub S.A. with its registered office in Rzeszów (address: 35-055 Rzeszów, ul. Fryderyka Szopena 35C/W164, REGON: 529166745, NIP: 8133918669), entered in the register of entrepreneurs kept by the District Court in Rzeszów, 12th Commercial Division of the National Court Register under KRS number: 0001116528

ul. Fryderyka Szopena 35C/W164, 35-055 Rzeszów, Poland

Email: support@skipperskip.com

Tel: +48 123 456 789

2. What personal data do we collect?

As part of the Platform's operation, we collect the following categories of data:

Basic personal data

first name, last name, profile photo

Contact details

email address, phone number, optional mailing address

Payment data

information regarding service fees (processed exclusively by Stripe; we do not store payment card data)

Technical data

IP address, browser type, operating system, cookies

Activity data

history of participation requests and added ads, user preferences, ratings and reviews

3. For what purposes do we process your data?

We process your personal data for the following purposes:

1
Provision of Platform services, including user account management, processes related to adding advertisements, submitting participation requests, and processing service fees.
2
Communication with users, including responding to questions, handling requests and inquiries regarding the operation of the Platform.
3
Ensuring security, preventing abuse, unauthorized access, and violations of the terms of service.
4
Analyzing the operation of the Platform and improving it, including functionality testing, usage statistics, and user satisfaction surveys.
5
Fulfilling legal obligations, in particular those related to the settlement of service fees and tax and accounting regulations.
6
Marketing SkipperSkip services — only with the user's consent (e.g., newsletter, notifications about new platform features).

4. Legal basis for processing

The legal basis for the processing of your personal data is:

Performance of a contract (Article 6(1)(b) of the GDPR) - Data necessary for the provision of Platform services, in particular user account management, publication of advertisements, submission of participation requests, and collection of service fees.

Legal obligation (Article 6(1)(c) of the GDPR) - Fulfilling obligations under tax and accounting regulations regarding service fees.

Legitimate interests of the controller (Article 6(1)(f) of the GDPR) - Ensuring the security of the Platform, preventing abuse, maintaining services, analyzing performance, and developing functionality.

Consent (Article 6(1)(a) of the GDPR) - Processing data for marketing purposes related to SkipperSkip services, sending newsletters, analytics, and using certain cookies.

5. Who do we share your data with?

We may share your personal data with the following categories of recipients:

• Stripe – payment operator handling service fees; card details are not stored by the Platform.
• Supabase – database infrastructure and backend services provider.
• Sentry – a tool for monitoring application errors and security.
• Helpsout – a system for handling messages and contacting users.
• IT, hosting, and Platform maintenance service providers
• Government authorities to the extent required by law

All technical partners process data exclusively on the basis of a data processing agreement and are required to maintain confidentiality and apply appropriate security measures.

6. How long do we store your data?

We store your personal data for the following periods:

User account data – until the account is deleted or for 3 years from the last activity, in accordance with the principle of data minimization.

Service fee and invoice data – for 5 years, in accordance with tax and accounting regulations.

Data processed for marketing purposes – until the user withdraws their consent.

Data stored in cookies – in accordance with browser settings or for a maximum of 2 years, depending on the type of cookie.

7. Your data protection rights

Under the GDPR, you have the following rights:

Right of access to data

You can obtain information about the personal data being processed and receive a copy of it.

Right to rectification

You may request that incorrect data be corrected or incomplete data be completed.

Right to erasure ("right to be forgotten")

In certain cases, you may request the erasure of your personal data.

Right to restrict processing and data portability

You may request that the processing of your data be restricted and receive it in a structured format or request that it be transferred to another controller.

Right to object and withdraw consent

You may object to processing based on the legitimate interests of the controller (including for marketing purposes) and withdraw your consent to data processing at any time.

Right to lodge a complaint with a supervisory authority

You have the right to lodge a complaint with the President of the Personal Data Protection Office if you believe that the processing of your data violates the provisions of the GDPR.

8. Data security

We use appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, disclosure, or alteration. These include, among others:

• encrypting connections using SSL/TLS protocols
• encrypting data at rest and controlling access at the system level
• protecting against unauthorized access and abuse
• regular data backups
• system and security monitoring (e.g., using Sentry)

Payment data is processed exclusively by the certified payment operator Stripe. We do not store payment card data on our servers.

9. Cookies

The Platform uses cookies to ensure proper functioning, traffic analysis, and content personalization. Analytical and marketing cookies are activated only after the user's consent. A detailed description of the cookies used can be found in our Cookie Policy.

You can manage your cookie settings in your browser or through the cookie preferences panel available on the Platform. Please note that disabling certain cookies may affect the functionality of the Platform.

10. Changes to the Privacy Policy

Any changes to the Policy will be announced 14 days in advance. You always have the right to withdraw from the Platform and request the deletion of your data. The most current Policy is available at: https://skipperskip.com/polityka-prywatnosci

Contact regarding personal data

If you have any questions about the processing of your personal data or wish to exercise your rights, please contact us at: support@skipperskip.com

Questions about privacy?

Our privacy team is ready to help with any questions or concerns you may have.