Privacy Policy

1. General Information

This Privacy Policy sets out the rules for the processing of personal data on the https://www.balkanhome.eu website operated by:

Hereinafter referred to as the "Controller".

The Controller processes personal data in accordance with the GDPR (Regulation (EU) 2016/679 of the European Parliament and of the Council) and other applicable laws.

The Controller:

• Cometweb, operated by Mateusz Sawicki,
• address: Poland, Rumia, Jachtowa 147/2,
• Tax ID (NIP): 5882502099,
• email: contact@balkanhome.eu

2. Scope

This Policy applies to all users of the Service, in particular those who:

• create an account,
• publish listings,
• contact others through forms,
• subscribe to the newsletter,
• make payments,
• use the Service without registration.

3. Categories of Data Processed

The Controller may process the following categories of data:

• identification data (for example: first name, last name, company name),
• contact data (email address, phone number),
• account and login data,
• listing data, including data published voluntarily,
• invoice data (company name, address, Tax ID / NIP / VAT number),
• payment data to the extent provided by the payment operator (payment status, amount, date, invoice reference; card details are processed only by Stripe),
• subscription plan data (selected plan, billing period, plan status, renewal dates),
• data submitted through contact forms,
• newsletter-related data,
• IP address and technical data (logs, device identifiers, cookies).

4. Purposes and Legal Bases for Processing

5. Data Published Publicly

Data included in listings are published publicly.

The user decides independently about the scope of the data they publish.

The Controller is not responsible for any further use of such data by third parties.

6. Data Recipients and Processors

Data may be disclosed to the following entities:

• Stripe Payments Europe, Ltd. (payment processing, storage of payment methods, recurring charges, invoices issued through Stripe),
• the Polish Ministry of Finance, as the operator of the National e-Invoicing System (KSeF), to the extent invoice data are transmitted to it,
• Resend (transactional e-mail),
• Supabase (database and authentication),
• Vercel (hosting),
• Google Ireland Ltd. (Google Analytics, only with the user consent),
• providers of IT, hosting, accounting, and legal services,
• advertisers, in the case of contact form submissions.

7. Transfers of Data Outside the EEA

Some processors may process data outside the European Economic Area.

In such cases, appropriate safeguards are applied, including Standard Contractual Clauses (SCCs).

8. Data Retention Period

Data are retained as follows:

• user account data: until the account is deleted,
• listings: for the duration of publication and archiving,
• marketing data: until consent is withdrawn,
• subscription plan and payment history data: for the duration of the agreement and afterwards until the limitation period for claims expires,
• invoice data: for the period required by law (in Poland, 5 years from the end of the tax year),
• technical data: for as long as necessary to ensure security.

9. User Rights

The user has the right to:

• access their data,
• rectify their data,
• erase their data,
• restrict processing,
• data portability,
• object to processing,
• withdraw consent.

10. Voluntary Provision of Data

Providing data is voluntary, but it may be necessary to use selected features of the Service.

11. Automated Decision-Making

The Controller does not engage in automated decision-making or profiling within the meaning of the GDPR.

12. Cookies

The Service uses cookies. Detailed information is available in the Cookie Policy.

13. Billing and Invoicing Data

Data provided for invoice purposes are processed in order to comply with legal and accounting obligations.

Payment method details (such as card numbers) are collected and stored exclusively by Stripe. The Service Provider receives only the information needed to confirm the payment and maintain the plan: payment status, amount, date, and an invoice reference.

Invoice data (name, address, tax identification number) are provided by the user during payment and can be updated in the Stripe customer portal available from the user account.

14. Newsletter

The user may subscribe to the newsletter.

The user may unsubscribe at any time using the link provided in the message.

Providing data for the newsletter is voluntary.

15. Data Security

The Controller applies technical and organizational measures designed to protect data, including safeguards for IT systems and access controls.

16. Changes to This Policy

This Policy may be updated. The current version is published on https://www.balkanhome.eu.

17. Contact Regarding Personal Data

For matters related to personal data, please contact:

• email: contact@balkanhome.eu