Privacy Policy.

Data Controller

The controller of your personal data is GPPL Sp. z o.o., with its registered office at ul. Ostrobramska 101A/301, 04-041 Warsaw, Poland, entered in the Register of Entrepreneurs of the National Court Register (KRS) kept by the District Court for the Capital City of Warsaw in Warsaw, 14th Commercial Division of the National Court Register, under KRS number 0001017113, NIP 1133084887, REGON 524352242, share capital PLN 50,000.00.

In all matters concerning the protection of your personal data you may contact the controller by email at office@verifykator.pl or by post at the registered address above.

1. Data We Collect

• Information you provide. When you order a report: your e-mail address and invoice details (company or full name, NIP, address). For the free check: the e-mail address we send the result to. When you contact us: what you write. Payment data is processed by Przelewy24.
• Usage data. We collect information on how you interact with our website (IP address, browser type, pages visited) to improve our service.
• Search inquiries. We process the company identifiers (NIP, KRS) you enter to provide the relevant business reports.

2. Public Data vs. Personal Data

Reports contain data about natural persons linked to the company checked (e.g. beneficial owners, shareholders, sole traders), taken from public registries (KRS, CRBR, CEIDG), sanctions lists and press articles found by a search engine. We process them to prepare the counterparty verification report.

3. How We Use Your Information

• To provide and maintain our services.
• To notify you about updates or changes to our platform.
• To improve our analytical engine and ensure the accuracy of our reports.
• To comply with legal obligations (e.g., tax and financial regulations).
• To show and send the result of a free check to the e-mail address you enter, at your request (art. 6(1)(b) GDPR).
• To send commercial information about Verifycator by e-mail — only with your separate, voluntary consent (art. 6(1)(a) GDPR). You can withdraw it at any time by writing to office@verifykator.pl; withdrawal does not affect earlier processing.

4. Data Sharing

We do not sell your personal data. We only share information with third parties when it is strictly necessary to:

• Railway — hosting (servers in the EU),
• Postmark — e-mail delivery (USA),
• Serper.dev — Google search for press coverage; it receives the names of the companies and persons checked (USA),
• Google — Google Analytics and Tag Manager (USA),
• Przelewy24 — payments,
• BizRaport and OpenSanctions — data providers; they receive the identifiers or names of the companies and persons checked,
• public authorities, where the law requires it.

Some of these processors are based in the USA, so data may be transferred outside the EEA.

5. Your Rights (GDPR Compliance)

As a user of our service, you have the right to:

• Access your personal data.
• Correct any inaccuracies.
• Request the deletion of your data ("right to be forgotten").
• Withdraw consent at any time, without affecting processing before the withdrawal.
• Lodge a complaint with the President of the Personal Data Protection Office (PUODO).
• Object to or restrict the processing of your data.

6. Contact Us

If you have any questions regarding this Privacy Policy or your data, please contact us:

GPPL Sp. z o.o. Registered address: Ostrobramska 101A/301, 04-041 Warsaw, Poland NIP: 1133084887 · KRS: 0001017113 Phone: +48 22 266 29 74 (Mon–Fri, 9:00–18:00) Email: office@verifykator.pl