This English translation is provided for convenience only. In case of any discrepancy, the Polish version prevails.
Privacy policy
Last updated: 15 October 2026
This policy describes how HostBase processes the personal data of Service users in accordance with Regulation (EU) 2016/679 (GDPR).
1. Data controller
The controller of personal data is [company name, address, tax ID — to be completed]. Contact for personal data matters: kontakt@ulewicz.space.
2. Scope and purposes of processing
| Purpose | Data | Legal basis |
|---|---|---|
| Creating and maintaining an Account | name, e-mail, password (as a hash) | Art. 6(1)(b) GDPR (contract) |
| Billing and invoices | invoicing details, payment history | Art. 6(1)(c) GDPR (legal obligation) |
| Security and logs | IP address, user agent, audit logs | Art. 6(1)(f) GDPR (legitimate interest) |
| Responding to enquiries | data from the contact form | Art. 6(1)(f) GDPR |
3. Data in Customer Projects
Data that the Customer stores in their Projects (databases, Storage) is processed solely on the Customer's instructions, as a processor, under a data processing agreement (Art. 28 GDPR). We do not use it for any purposes of our own.
4. Recipients of data
- infrastructure providers (data centres in the EU),
- the payment operator Stripe — to process payments,
- an e-mail service provider — to send transactional messages,
- an accounting firm — for accounting documents.
5. Transfers outside the EEA
Account data is processed in the European Union. Where a provider (e.g. the payment operator) transfers data outside the EEA, it does so under standard contractual clauses approved by the European Commission.
6. Retention period
Account data is kept for as long as the Account exists and then for the limitation period for claims. Accounting documents are kept for 5 years from the end of the tax year.
7. Your rights
You have the right to access, rectify and erase your data, to restrict processing, to data portability and to object. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.
8. Cookies
The Service uses strictly necessary cookies only — in particular the session cookie (hb_session) that keeps you signed in and the hb_locale cookie that remembers your chosen site language. We don't use advertising cookies.
9. Changes to this policy
We will inform you of material changes to this policy by e-mail or by a notice in the dashboard.