This English version is provided for convenience. In case of any discrepancy, the Polish version prevails.
This policy explains what personal data we process in connection with the stripboard.pro website and the app.stripboard.pro application, why, on what legal basis, who we share it with and what rights you have.
1. Controller and contact
The controller is Jakub Mączka, running a business under the name Jakub Mączka Production (Omka Production), al. Jana Pawła II 27, 00-867 Warsaw, Poland, tax ID (NIP) 7671628404, REGON 380683088 (we).
For any data protection matter, email kontakt@stripboard.pro (ideally with the subject "Personal data") or write to the postal address above. We have not appointed a data protection officer because we are not required to.
2. When we are controller and when we process data for a customer
We are the controller of data we collect for ourselves: enquiries and correspondence, account data and technical data.
Data that customers enter into their projects (e.g. crew lists, cast, phone numbers, pick-up addresses, schedules, photos, documents) we process on the customer's behalf as a processor, under the Data Processing Agreement (Annex 1 to the Terms). The controller of that data is the customer, i.e. the company or person running the production. If your data appears in a production's project, please direct questions and requests to that production. If you write to us, we will forward your message to the customer.
3. What data, why and on what basis
Messages and forms on the website
- Data: name, email, message; in the offer form also company name, number of seats and needs.
- Purpose and basis: preparing an offer at your request (Art. 6(1)(b) GDPR); replying to other questions on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
- Retention: 12 months from the last message, unless we conclude an agreement.
Account, sign-in and use of the application
- Data: email, password (stored only as a cryptographic hash), name, organisation memberships and roles, date of acceptance of the Terms.
- Purpose and basis: concluding and performing the account and service agreement (Art. 6(1)(b) GDPR).
- Retention: until the account is deleted, then up to 30 days, and in backups until they expire.
Project invitations
- Data: email of the invited person, inviter's name, project name, role.
- Purpose and basis: enabling the collaboration the inviter asks for, on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
- Retention: invitations are valid for 7 days; a record of the invitation is kept in the project history together with the project.
Complaints, withdrawal and claims
- Data: data from complaints and correspondence.
- Purpose and basis: legal obligations (Art. 6(1)(c) GDPR) and defence against claims on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
- Retention: until claims become time-barred.
Security and diagnostics
- Data: IP address, browser type, request time and address, error codes, account identifier.
- Purpose and basis: protecting the service against abuse and fixing errors on the basis of our legitimate interest (Art. 6(1)(f) GDPR).
- Retention: according to our hosting providers' retention, currently from 1 hour to a few days. The project change log is kept together with the project.
Providing data is voluntary, but without an email address we cannot reply, and without account data you cannot create an account. We do not make decisions based solely on automated processing, including profiling, that have legal effects on you. We do not send newsletters or marketing messages.
4. Who we share data with
We use suppliers who process data only on our instructions:
- Supabase Pte. Ltd. (Singapore): database, sign-in and file storage. Data is stored in the European Union (Ireland); standard contractual clauses (SCCs) apply in case of access from outside the EEA.
- Vercel Inc. (USA): website and application hosting, servers in the EU and the USA; standard contractual clauses.
- Plus Five Five, Inc. (Resend, USA): sending emails such as account confirmation, password reset and invitations. Emails are sent from the EU (Ireland), logs and metadata are stored in the USA; EU-US Data Privacy Framework and standard contractual clauses.
- home.pl sp. z o.o. (Szczecin, Poland): email service for kontakt@stripboard.pro.
- Google Cloud Poland sp. z o.o. (Warsaw), as part of Google Maps Platform: location address suggestions. Our server sends Google only the typed address text, without account data or your IP address.
- Openweather Ltd (United Kingdom): weather forecasts. Our server sends only the location coordinates and date. Transfers to the UK rely on the European Commission's adequacy decision.
We may also disclose data to public authorities where required by law.
When you click "Open in Google Maps" or "Navigate" in the application, or scan a QR code from a document, you go to a Google service that processes your data on its own terms.
5. Your rights
- You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object to processing based on our legitimate interest.
- To exercise your rights, email kontakt@stripboard.pro. We reply within one month and may ask you to confirm your identity, e.g. by writing from the address linked to your account.
- You have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
6. Cookies and data stored in your browser
The stripboard.pro website does not set cookies and does not load analytics or advertising tools. The application stores in your browser only information strictly necessary to provide the service you request, so no consent is required and the application does not show a cookie banner. The full list is in the Cookies notice.
7. Security
Data in the application is separated between organisations at database level, files are kept in private storage and shared through links valid for at most 1 hour, and connections to the service are encrypted. Security measures are described in the Data Processing Agreement.
8. Changes
We will announce material changes in the application and by email. The current version is always available on stripboard.pro.