Privacy policy

Version of 2 November 2026.

Draft. It will be reviewed by a lawyer before launch.

Controller

The controller of your data is POWER Rubber Robert Piotrowski, Moszna-Parcela 55A, 05-840 Brwinów, Polska, CEIDG, NIP 5342331435, REGON 365271408, contact: kontakt@packoloopo.com.

What data we process and why

  1. Email address and name from your Google, Facebook or Apple account: logging in and running your account (Art. 6(1)(b) GDPR).
  2. Account type, business name and EU VAT number (if you provide them) and the language of emails: marking business listings and contacting you in your language (Art. 6(1)(b) GDPR).
  3. Listing content, photos (without GPS data), town, country and approximate pickup point: publishing the listing (Art. 6(1)(b) GDPR).
  4. Exact pickup address and directions: visible only to the author of the listing and the person who booked the pickup (Art. 6(1)(b) GDPR).
  5. Bookings (time slot, name of the person booking): arranging the pickup between the parties (Art. 6(1)(b) GDPR).
  6. Content reports (reason, description, name and email of the reporter), moderation decisions and account blocks: obligations under the Digital Services Act (Art. 6(1)(c) GDPR) and protecting users against abuse (Art. 6(1)(f) GDPR).

Who receives the data

  1. Supabase (database, login, photos; servers in Frankfurt, EU).
  2. The operator of the server running the website: Cyber_Folks S.A. (Polska).
  3. The map provider (map tiles) and the OpenStreetMap Foundation (Nominatim address search, United Kingdom – a country with an EU adequacy decision). Your browser sends them the address you type or the point on the map.
  4. The email provider (sending login links).
  5. Public authorities where the law requires it (e.g. an order to provide information under Art. 10 DSA).

How long

  1. Account data, listings, photos and bookings: until the listing or the account is deleted.
  2. Reports and moderation decisions: 2 years after the decision, for appeals and possible legal claims. If the reporter deletes their account, the report remains without a link to the account.

Your rights

You have the right to access, rectify and erase your data (the “Delete account” button under My account), to restrict processing, to data portability and to object to processing based on legitimate interest.

You can lodge a complaint with the Polish data protection authority (Prezes UODO) or with the authority in the country where you live or work.

Cookies

We use only strictly necessary cookies: to keep you logged in and to remember the language you chose. We use no advertising or analytics cookies.