Privacy Policy of the Spotnest.com Platform

Last updated: 11/09/2026

1. General Information

The controller of personal data collected through the Spotnest.com website is Piotr Rogalski, conducting an unregistered business activity (działalność nierejestrowana), with a correspondence address at ul. Domaniewska 37 lok. 2.43, 02-672 Warszawa (hereinafter: the “Controller”).

2. What Data Do We Process?

We collect personal data strictly necessary for the proper provision of property listing services:

• Registration data: E-mail address (necessary for account creation and verification).
• Verification data: Telephone number (used exclusively for identity verification and unlocking additional listing limits).
• Listing data: Content of the offers, property specifications, and images (stored and served via BunnyCDN).
• Technical data: IP address, server logs, device information (processed by Vercel to ensure the security and stability of the platform).

3. Purpose and Legal Basis for Processing

Your personal data is processed in accordance with the GDPR for the following purposes:

• Provision of services (Art. 6(1)(b) GDPR): Performance of the agreement for the provision of electronic services (account management and listing publication).
• Security and safety (Art. 6(1)(f) GDPR): Legitimate interest in preventing abuse, including the creation of multiple accounts to bypass free listing limits (e-mail/SMS verification).
• Legal obligations (Art. 6(1)(c) GDPR): Financial accounting and compliance with statutory tax documentation retention requirements.

4. Data Recipients

In order to ensure the highest quality of service, we cooperate with specialised technical sub-processors:

• Vercel Inc.: Application hosting and server infrastructure.
• Cockroach Labs: Data storage in a secure, multi-regional CockroachDB database.
• Bunny.net (BunnyCDN): Storage and delivery of images and media files.
• Directus: Content Management System (CMS) used for platform administration.
• Stripe Inc. / Stripe Payments Europe, Ltd.: Payment gateway provider handling all financial transactions.
• Google Ireland Limited: Analytics and marketing services (Google Ads). The platform implements Google Consent Mode v2 to adjust tracking tags based on your privacy choices. If you enter the platform via an advertisement, advertising identifiers (such as GCLID) may be processed.

5. Your Rights

Under the GDPR, you have the right to:

• Access your personal data and receive a copy of it.
• Request the rectification (correction) of your data.
• Request the erasure of your data (“the right to be forgotten”).
• Object to the processing of your data (e.g., for marketing purposes).
• Request data portability to another entity.

To exercise any of your rights, please send your request to: contact@spotnest.com.

6. Cookies and Tracking Technologies

The Spotnest.com platform uses cookies to maintain user sessions and for analytical purposes. You can manage your cookie preferences directly in your web browser settings; however, disabling cookies may impact the proper functionality of certain platform features.

7. Data Retention Period

Your personal data will be stored for the duration of your active account on the platform. Following account deletion, data necessary for financial, accounting, and tax compliance (such as Stripe transaction history) will be retained for a period of 5 years, in accordance with applicable statutory laws.

8. Amendments to the Policy

The Controller reserves the right to amend this Privacy Policy to reflect updates in legal frameworks or technical operations. Registered users will be notified of any material changes via e-mail.

For any enquiries, please contact us at: contact@spotnest.com.