Politika privatnosti — Wieczysto.pl

1. The Controller of your personal data is Wieczysto.pl, based at ul. Wyszyńskiego 11, 41-940 Piekary Śląskie, Poland (hereinafter: the “Controller”).

2. For all matters relating to data protection and exercising your GDPR rights, you can contact the Controller by e-mail at info@wieczysto.pl, by phone at +48 451 107 788, or in writing at the registered address.

3. Personal data is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Polish data protection laws.

Depending on how you use Wieczysto.pl, we may process the following categories of personal data:

• Account and authentication data: e-mail address, full name, encrypted login credentials or third-party OAuth identifiers (e.g., Google sign-in), login logs;

• Order and subscription data: Client’s name and e-mail, cemetery name and city, grave location details (section, row, plot number, inscriptions provided to locate the grave), selected care plan, visit schedule, and before-and-after photos;

• Billing and payment data: Stripe transaction and subscription identifiers, amount, currency, and payment status (full card details are processed exclusively by Stripe);

• Contact form data: full name, e-mail address, optional phone number, and message content;

• Technical data and preferences: selected interface language stored in browser localStorage, IP address, browser type, and basic traffic analytics.

We process your personal data for the following purposes and on the following legal bases under the GDPR:

• Creating and maintaining your Client Account and operating the Client Portal (Art. 6(1)(b) GDPR — performance of a contract);

• Processing and fulfilling orders for one-time grave cleaning or Year-Round Care subscriptions, locating the grave, providing photo documentation, and handling special visit requests (Art. 6(1)(b) GDPR);

• Processing payments via Stripe and fulfilling tax and accounting obligations (Art. 6(1)(b) and (c) GDPR);

• Responding to inquiries submitted via the contact form, e-mail, or phone and preparing individual quotes (Art. 6(1)(b) and (f) GDPR — legitimate interest of communicating with users);

• Handling complaints, establishing or defending legal claims, and ensuring platform security (Art. 6(1)(f) GDPR).

1. We share your data only with trusted entities necessary to operate the website and perform the ordered service:

• Stripe (Stripe Payments Europe, Ltd. / Stripe, Inc.) — for secure processing of one-time and recurring subscription payments;

• Cloud hosting, database, and transactional e-mail infrastructure providers (the Base44 platform and its technical subprocessors);

• Local grave caretakers cooperating with Wieczysto.pl at the designated cemetery — solely to the extent required to locate the grave and carry out the work;

• Accounting services and public authorities where required by law.

2. Where international transfers outside the EEA occur in connection with global IT providers, they are safeguarded by European Commission Standard Contractual Clauses (SCCs) or adequacy decisions (such as the EU-US Data Privacy Framework).

• Data linked to your Client Account and active subscriptions is retained for the duration of your account or care contract;

• Order and billing records are retained for the period required by Polish tax and accounting regulations (generally 5 years from the end of the calendar year) and until the expiry of potential legal claims;

• Contact form inquiries that do not result in an order are stored for the time necessary to complete correspondence, for no longer than 12 months.

Under the GDPR, you have the right to:

• access your personal data and receive a copy thereof (Art. 15 GDPR),

• rectify inaccurate or incomplete data (Art. 16 GDPR),

• request erasure of your data (“right to be forgotten”) where applicable (Art. 17 GDPR),

• restrict processing (Art. 18 GDPR) and request data portability (Art. 20 GDPR),

• object to processing based on legitimate interests (Art. 21 GDPR),

• lodge a complaint with the Polish supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl) or the supervisory authority in your EU country of residence.

1. Wieczysto.pl uses cookies and browser localStorage to ensure proper website operation, maintain authenticated sessions, remember your chosen interface language, and collect anonymous traffic statistics.

2. When viewing the interactive cemetery map, your browser loads map tiles from OpenStreetMap servers.

3. You can change your cookie and localStorage settings at any time in your browser. Restricting essential authentication cookies may prevent signing in to the Client Portal.

1. Providing personal data is voluntary but necessary to create a Client Account, place an order, or receive a reply to a contact inquiry.

2. The Controller applies appropriate technical and organizational safeguards (including SSL/TLS encryption and access controls) to protect your personal data.