Information pursuant to Art. 13 and 14 of the General Data Protection Regulation (GDPR) for Baufirmen-Atlas.
OceanSphere Service Sp. z o.o.
ul. Nowogrodzka 31, 00-511 Warszawa, Poland
E-mail: kontakt@oceansphere-service.com
Telephone: +48 784 132 577
We have not appointed a data protection officer; there is no obligation to do so under Art. 37 GDPR.
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| Server logs (IP address, time, requested address, browser identifier) | Operation, security, abuse prevention | Art. 6(1)(f) – legitimate interest in secure operation | 7 days |
| Account data (name, e-mail, company, password hash) | Providing access | Art. 6(1)(b) – contract | until the account is deleted |
| Payment and billing data | Handling the subscription, invoicing | Art. 6(1)(b) and (c) – contract and statutory retention | 5 years from the end of the accounting year (Polish tax law) |
| Messages you send us | Answering your enquiry | Art. 6(1)(b) or (f) | until resolved, then up to 12 months |
We do not use advertising or analytics cookies. Technically necessary session cookies serve login and form protection only.
Baufirmen-Atlas contains information about companies that we did not obtain from the data subjects themselves. Art. 14 GDPR requires us to say so.
Payments are handled by Stripe Payments Europe, Ltd. (The One Building, 1 Grand Canal Street Lower, Dublin 2, Ireland). When you take out a paid subscription, payment data is transmitted directly to Stripe. Your card details never reach our servers – they are entered on a page operated by Stripe. From Stripe we only receive whether the payment succeeded, a customer reference and the last digits of the payment method.
Legal basis: Art. 6(1)(b) GDPR. Stripe also processes data in the USA; the transfer is covered by standard contractual clauses and the EU-US Data Privacy Framework. Details: stripe.com/privacy.
No data is passed on for advertising purposes. We do not sell data.
You have the right of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing (Art. 21 GDPR). An e-mail to kontakt@oceansphere-service.com is sufficient; no particular form is required.
You may also lodge a complaint with a supervisory authority. Ours is:
You may equally contact the supervisory authority of your country of residence.
No automated decision-making or profiling with legal effect on you takes place.
We update this policy when the processing changes. The version published here is the applicable one.