Privacy Policy
Document dated June 12, 2025
Privacy Policy of the BtrustUP Application
(„Application”)
Dear User!
We care about your privacy and want you to feel comfortable while using our services. Therefore, we are providing you with the key information regarding the principles for processing your personal data and the use of cookies in our Application. This information has been prepared in accordance with the provisions of the General Data Protection Regulation (GDPR).
DATA CONTROLLER
BTRUST.PL SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ with its registered office at: ul. Rozwojowa 2, 44-240 Żory, entered into the National Court Register – register of entrepreneurs maintained by the DISTRICT COURT IN GLIWICE, X COMMERCIAL DEPARTMENT OF THE NATIONAL COURT REGISTER, under number KRS: 0001127518, NIP 6511748234, REGON 529678630, with the share capital in the amount of PLN 50,000.00.
If you have any questions regarding the processing of your personal data, you can contact us by sending an email to: [email protected].
YOUR RIGHTS
Pursuant to the GDPR, you have the right to request:
- access your personal data, including obtaining a copy of the data (Article 15 GDPR, or – where applicable – Article 13(1)(f) GDPR);
- rectify your data (Article 16 GDPR);
- erase your data (Article 17 GDPR);
- restrict the processing of your data (Article 18 GDPR);
- data portability – i.e., to receive your data in a structured, commonly used, machine-readable format and to transmit it to another controller (Article 20 GDPR).
You also have the right to object at any time to the processing of your personal data:
- on grounds relating to your particular situation – where the processing is based on our legitimate interests (Article 6(1)(f) GDPR), including profiling (Article 21(1) GDPR);
- where the personal data are processed for direct marketing purposes, including profiling, to the extent related to such direct marketing (Article 21(2) GDPR).
Please contact us if you wish to exercise your rights. You can also object to our use of cookies – more information is available in the section below. In particular, you may use the cookie banner or adjust your browser settings accordingly.
If you believe that your personal data are being processed unlawfully, you have the right to lodge a complaint with the President of the Personal Data Protection Office.
PERSONAL DATA AND PRIVACY
The information presented below has been divided into two sections:
- Section A: concerns the processing of personal data of users of the Application;
- Section B: concerns the processing of personal data made available within the service.
A. DATA PROCESSING IN CONNECTION WITH THE USE OF THE SERVICE
Below you will find detailed information on the processing of your personal data, depending on the specific actions you undertake.
1. Using the services offered in the Application (including creating an account)
| For what purpose? | |
|---|---|
| Performance of the agreement for the provision of services offered in the Application. | |
| On what legal basis? | |
| Agreement for the provision of services (Article 6(1)(b) GDPR). | In the case of paid services – legal obligation, particularly related to accounting, obliging us to process your personal data (Article 6(1)(c) GDPR). |
| How long? | |
| For the duration of the above-mentioned agreement. | Until the expiration of our legal obligations. |
| Furthermore, your data will be processed until the end of the period during which claims may be pursued – either by you or by us (see the final table in this section for details). | |
| What happens if you do not provide your data? | |
| You will not be able to use our services. | |
2. Contacting us (e.g., to ask a question)
| For what purpose? | |
|---|---|
| Handling your inquiries or requests. | |
| On what legal basis? | |
| Agreement or actions taken at your request with a view to concluding an agreement (Article 6(1)(b) GDPR) – if your inquiry or request concerns an agreement to which we are or may become a party. | Our legitimate interest, consisting in processing your personal data for the purpose of communication (Article 6(1)(f) GDPR) – if your inquiry or request is not related to an agreement. |
| How long? | |
| For the duration of the agreement binding us or – if no agreement is concluded – until the expiry of the period for asserting claims – see the last table of this section*. | Until the expiry of the limitation period for potential claims – see the final table in this section – or until we accept your objection to processing.* |
| Furthermore, your data will be processed until the end of the period during which claims may be pursued – either by you or by us (see the final table in this section for details). | |
| What happens if you do not provide your data? | |
| We will not be able to respond to your inquiry or request. | |
* depending on which applies in a given case
3. Browser settings or other similar actions allowing marketing activities
| For what purpose? | |
|---|---|
| Direct marketing, consisting of displaying personalized advertisements (you can read more about this in the “Profiling” and “Cookies and other similar technologies” sections of the Privacy Policy). | |
| On what legal basis? | |
| Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR). | |
| How long? | |
| Until the expiration or deletion by you of cookies used for marketing purposes*. | |
| What happens if you do not provide your data? | |
| You will not receive suggestions for products or services that may be of interest to you. |
* depending on which applies in a given case
4. Browser settings or other similar actions allowing analytical activities
| For what purpose? | |
|---|---|
| Analysis of how you use and navigate the Application, in order to improve its functionality (you can read more about this in the “Analytical Activities” and “Cookies and other similar technologies” sections of the Privacy Policy). | |
| On what legal basis? | |
| Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR). | |
| How long? | |
| Until the expiration or deletion by you of cookies used for marketing purposes*. | |
| What happens if you do not provide your data? | |
| We will not take into account how you use and navigate the Application in our development work. |
* depending on which applies in a given case
5. Expressing your consent to receive marketing content from us (e.g., information about special offers)
| For what purpose? | |
|---|---|
| Sending marketing content, in particular special offers. | Analysing the effectiveness of messages we send, in order to develop general principles for effective communication in our business (you can read more about this in the “Analytical Activities” section of this Privacy Policy). |
| On what legal basis? | |
| Your consent to our marketing activities (Article 6(1)(a) GDPR). | Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR). |
| How long? | |
| Until you withdraw your consent – you may do so at any time. Personal data processing carried out before the withdrawal of consent remains lawful. | Until we consider your objection to processing. |
| Furthermore, your personal data will be processed until the expiry of the period during which claims can be asserted – either by you or by us (more information is provided in the final table of this section). | |
| What happens if you do not provide your data? | |
| You will not receive our marketing materials, including information about our special offers. | |
6. Signing up for the newsletter
| For what purpose? | |
|---|---|
| Sending the newsletter. | Analysing the effectiveness of the content we send, in order to develop general principles for effective communication in our business (you can read more about this in the “Analytical Activities” section of this Privacy Policy). |
| On what legal basis? | |
| Agreement for the provision of newsletter service (Article 6(1)(b) GDPR). | Our legitimate interest in processing data for the above purpose (Article 6(1)(f) GDPR). |
| How long? | |
| Until you unsubscribe from our newsletter. | Until we consider your objection to processing. |
| Furthermore, your data will be processed until the expiry of the period during which claims can be asserted – either by you or by us (more information is provided in the final table of this section). | |
| What happens if you do not provide your data? | |
| You will not be able to receive information concerning the Application and our services. | |
7. Establishment, exercise or defence of potential claims related to the concluded agreement or provided services.
| For what purpose? | |
|---|---|
| Establishing, pursuing or defending potential legal claims related to the agreement concluded or services provided. | |
| On what legal basis? | |
| Our legitimate interest in processing personal data for the above purpose (Article 6(1)(f) GDPR). | |
| How long? | |
| Until the end of the limitation period for potential claims or until we consider your objection to processing*. | |
| What happens if you do not provide your data? | |
| We may be unable to establish, pursue or defend claims. |
* depending on which applies in a given case
B. BUSINESS DATA PROCESSED WITHIN THE SERVICE
If we process your personal data within the service, such data originates primarily from publicly available and lawful registers, such as: Central Register and Information on Economic Activity (CEIDG), National Court Register (KRS), Road Transport Entrepreneurs Register (KREPTD)
In such cases, we primarily process information disclosed in those registers – including, but not limited to:
- name and surname, company name, NIP (Tax Identification Number), REGON (National Official Register of Business Entities), address of business activity, functions performed in economic entities, possessed qualifications (licenses/permits/certificates), and publicly available contact details, if available.
- this may also include, for example, vehicle registration numbers or information regarding the frequency with which an entity is verified by other users.
We process this data in order to support the verification and assessment of the credibility of entities in the transport and logistics industry. This is achieved by providing Application users with access to structured business information, facilitating the search for entrepreneurs, and verifying their qualifications. The legal basis for such data processing is our legitimate interest (Article 6(1)(f) GDPR), which consists in enabling users to access data for the purpose described above.
We will process this data until we consider your potential objection to such processing.
PROFILING
Within the Application, we perform profiling – this will apply to you if you allow such activities. This profiling consists of the automatic assessment of which products or services you may be interested in, based on the content you view. As a result, advertisements for products or services displayed within the online services you use will be better tailored to you and your needs.
The profiling we perform does not result in decisions that produce legal effects concerning you or similarly significantly affect you.
ANALYTICAL ACTIVITIES
1. Analysis of business data available within the service
As part of the Application’s operation, we carry out analytical activities with respect to data processed within the service, such as data from public registers or data related to user activities within the service. These activities consist of compiling, analysing, and comparing data in order to organise and present it clearly in the form of reports.
2. Analysis of Application user data
Within the Application, we carry out analytical activities aimed at increasing its intuitiveness and accessibility – this will apply to you if you allow such activities. As part of the analysis, we will take into account how you navigate the Application – for example, how much time you spend on a given subpage or tab, or which areas of the Application you click on. Thanks to this, during the development of the Application, we will be able to optimise its layout, appearance, and the content it contains, to improve its functionality.
Additionally, if you express a desire to receive marketing messages or our newsletter, we may analyse the effectiveness of our messages. For example, we may check whether and how a given message influenced activity in our Application. These actions help us establish general principles for sending such messages in our business – for example, with regard to optimal sending times or how to formulate effective content.
DATA SECURITY
When processing your personal data, we apply organisational and technical measures in accordance with applicable legal provisions, including the use of connection encryption via an SSL/TLS certificate.
COOKIES AND OTHER SIMILAR TECHNOLOGIES
Our Application, like most websites, uses so-called cookies and other similar technologies (such as local storage and session storage). These files:
- are saved in your device’s memory (computer, phone, etc.);
- do not alter your device’s configuration or settings.
In this Application, cookies and other similar technologies are used for the following purposes:
- remembering your session
- statistical
- marketing
- providing Application functions.
To learn how to manage cookies, including how to disable them in your browser, you can use your browser’s help file. You can familiarize yourself with this information by pressing the F1 key in your browser. Additionally, you will find relevant instructions on the following subpages, depending on the browser you use:
To set your preferences regarding the use of cookies in the Application or to learn more about the cookies used in the Application, their functions and retention periods, use the functionality available in the footer of the Application page.
By using the appropriate options in your browser, you can at any time:
- delete cookies,
- block the use of cookies in the future.
In such cases, we will no longer process data associated with those cookies.
EXTERNAL SERVICES / DATA RECIPIENTS
We use the services of external entities that support us in running our business. We entrust your personal data to them for processing – these entities process data solely on our documented instruction.
Below you will find a list of recipients of your personal data:
| Action | Data Recipients | Transfer of data outside the European Union |
|---|---|---|
| Any action in connection with the Application (also applies to data processed within the service) | Hosting provider | No transfer |
| IT /technical support provider | No transfer | |
| Persons cooperating with us based on civil law contracts, supporting our current operations | No transfer | |
| External cloud storage provider | Yes – United States of America, United Kingdom** | |
| Visiting the Application page with marketing-enabled settings | Marketing services provider | Yes – United States of America, United Kingdom** |
| Visiting the Application page with analytics-enabled settings | Analytics services provider | Yes – United States of America, United Kingdom** |
| Using the services offered in the Application (including creating an account) | Payment provider | No transfer |
| Business software provider (e.g., accounting software) | No transfer | |
| Standard office software provider (including email inbox) | Yes – United States of America, United Kingdom** | |
| Accounting office | No transfer | |
| Signing up for the newsletter or expressing consent to send marketing messages | Newsletter or marketing communication provider | No transfer |
| Contacting us (e.g., sending an inquiry) | Standard office software provider (including email inbox) | tak – Stany Zjednoczone Ameryki, Wielka Brytania ** |
Additionally: relevant public authorities to the extent we are obliged to provide them with data.
TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
** In connection with the above, your personal data may also be processed by entities located outside the European Union. An adequate level of data protection is ensured through the application of appropriate safeguards, including:
- the participation of these entities in the Data Privacy Framework, which is a program established by an implementing decision of the European Commission that sets out principles ensuring appropriate protection of your personal data – in the case of entities based in the United States of America;
- the European Commission’s adequacy decision of 28 June 2021, adopted pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, confirming an adequate level of protection for personal data transferred to the United Kingdom.