Exchange Privacy Policy

PRIVACY AND COOKIE POLICY FOR THE DOMKAMIENIA.PL WEBSITE

Version dated June 1, 2026

For Dom Kamienia Sp. z o.o., the protection of Users’ personal data is a priority. This document sets forth the rules for the collection, processing, and use of personal data and cookies within the closed e-commerce platform operating at domkamienia.pl (hereinafter: the Platform).

PART I: GDPR INFORMATION NOTICE

§ 1. Personal Data Controller

The
controller of the personal data of Platform Users, as defined in Regulation (EU) 2016/679 of the European Parliament and of the Council of April 27, 2016, (GDPR) is:
Dom Kamienia Sp. z o.o., with its registered office in Warsaw, at ul. Czerniakowska 145, apt. 1/B16, 00-453 Warsaw, entered in the Register of Entrepreneurs of the National Court Register under KRS number: 0000330789, Tax ID (NIP): 9522069030, Statistical Identification Number (REGON): 141848749 (hereinafter referred to as: the Controller).
The Controller may be contacted regarding data protection matters at the following email address: rodo@domkamienia.pl

§ 2. What data do we process, and who does it pertain to? 

The
platform operates on a B2B model; however, we process the personal data of individuals, including:

1. Individuals operating a sole proprietorship (JDG).
2. Employees, representatives, and contact persons designated by companies (e.g., developers, wholesalers, manufacturers).
   The data processed may include, in particular: first name, last name, company name, tax identification number (NIP), national business registry number (REGON), registered office/delivery address, email address, phone number, bank account number, and login information (username, IP address).

§ 3. Purposes and Legal Basis for Data Processing

Personal
data is processed by the Controller for the following purposes:

1. Provision of electronic services—for the purpose of registering and maintaining an Account on the Platform, verifying business identity, and enabling access to a closed database and marketplace (Article 6(1)(b) of the GDPR—performance of a contract).
2. Financial settlements and accounting—for the purpose of automatically generating pro forma invoices and VAT invoices, maintaining accounting records, and fulfilling tax obligations (Article 6(1)(c) of the GDPR—legal obligation).
3. Communication and Customer Service – to communicate regarding operational matters related to the Platform’s functioning and to handle inquiries (Article 6(1)(b) and (f) of the GDPR – legitimate interest in building relationships with customers).
4. Defense against claims and enforcement of rights—to safeguard the legal interests of the parties, e.g., in the event of disputes regarding subscription fees or violations of the terms of service (Article 6(1)(f) of the GDPR—the Controller’s legitimate interest).
5. Fraud Prevention and Security – to verify the credibility of companies and eliminate spam, fraud, or competitive activities (Article 6(1)(f) of the GDPR – legitimate interest).

§ 4. Data Retention Period

Personal
data will be retained for the following period:

1. Active ownership of an Account on the Platform (until the Account is deleted or the User is suspended).
2. Required by tax and accounting laws (invoices and accounting documents—for a period of 5 years from the end of the calendar year in which the tax payment deadline expired).
3. Required for the statute of limitations on any claims arising under the Civil Code (typically 3 years for claims related to the conduct of business).

§ 5. Recipients of Personal Data

1. Personal data may be transferred to third parties that support the Controller in its day-to-day operations, based on data processing agreements (so-called data processors). These include: IT and hosting service providers, invoicing system providers, accounting firms, and payment processors.
2. Since the Platform is used to establish business contacts, the contact and registration information of companies (including sole proprietorships) posted in the database or classifieds section is visible to other logged-in and verified Platform Users, to which the User consents by choosing to use the services of the classifieds section/database.
3. The administrator does not transfer personal data outside the European Economic Area (EEA) or to international organizations.

§ 6. Rights of Data Subjects

Every data subject has the right to:

1. Access your personal data and receive a copy of it.
2. Correcting your personal information.
3. Data erasure (“right to be forgotten”)—unless there are other legal grounds preventing erasure (e.g., the obligation to retain accounting records).
4. Restrictions on data processing.
5. Transferring data to another data controller.
6. Object to data processing based on the Controller’s legitimate interest (Article 6(1)(f) of the GDPR).
   To exercise your rights, please contact the Controller at the email address provided in § 1.

Every person also has the right to file a complaint with the supervisory authority—the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw)—if they believe that the processing of their data violates the provisions of the GDPR.

§ 7. Voluntary Provision of Data

Providing personal information is entirely voluntary; however, it is a prerequisite for registering on the Platform, purchasing subscription packages, receiving a pro forma invoice, and using the database and marketplace. Failure to provide this information will prevent the conclusion of a service agreement.

PART II: COOKIE POLICY

§ 8. What are cookies?

1. The domkamienia.pl website uses cookies. These are small text files stored on the User’s device (computer, tablet, smartphone) by the Administrator’s IT system while the User is browsing the Platform.
2. Cookies do not cause any configuration changes to the User's device or software.

§ 9. Purpose of Using Cookies

The administrator uses cookies for the following purposes:

1. Essential (technical) – these cookies enable the Platform to function properly, maintain the User’s session after logging into their Account (so the User does not have to enter their password on every subpage), and ensure security.
2. Analytical and statistical—used to study user behavior on the website (e.g., tracking visits, analyzing the most popular tabs), which allows for the optimization of the website’s performance. In this regard, the Administrator uses tools such as Google Analytics, Google Tag Manager, Google Search Console, Microsoft Clarity, Zapier, n8n, and the CMP Consent Management Platform – Consent Mode (Cookie Bot / Cookie Yes).

§ 10. Managing Cookies

1. By default, web browsers allow cookies to be stored on the user's device.
2. Users can change their browser's cookie settings at any time—they can block cookies or choose to be notified each time a cookie is placed on their device.
3. Detailed information about the options and methods for managing cookies is available in the settings of your web browser (e.g., Chrome, Firefox, Safari, Edge).
4. Restricting or disabling the use of essential (technical) cookies may affect certain features of the Platform or prevent you from properly accessing the members-only area.

PART III: FINAL PROVISIONS

§ 11. Amendment of Provisions

1. If necessary (e.g., in the event of the implementation of new technologies, changes in laws or regulations, or guidelines from a regulatory authority), Dom Kamienia may amend the provisions of this Privacy and Cookie Policy.
2. Users will be notified of any changes by the publication of a new version of the document on the domkamienia.pl website, with the new effective date indicated at the very beginning.

§ 12. Contact Information

For
more information about the processing of your personal data, including answers to questions regarding the scope and exercise of your rights under the Privacy Policy, please contact the Data Controller directly.

Here are the contact details:

Email address: rodo@domkamienia.pl or kontakt@domkamienia.pl

Document approved by: the Management Board of Dom Kamienia Sp. z o.o.
, Warsaw, June 1, 2026.