Privacy Policy of the Spotnest.com Platform

Last updated: 26/10/2026

1. General Information

The controller of personal data collected through the Spotnest.com website is Piotr Rogalski, conducting an unregistered business activity (działalność nierejestrowana), with a correspondence address at ul. Domaniewska 37 lok. 2.43, 02-672 Warszawa (hereinafter: the “Controller”).

2. What Data Do We Process?

We collect personal data strictly necessary for the proper provision of property listing services:

• Registration data: E-mail address (necessary for account creation and verification).
• Verification data: Telephone number (used exclusively for identity verification and unlocking additional listing limits).
• Listing data: Content of the offers, property specifications, and images (stored and served via BunnyCDN).
• Technical data: IP address, server logs, device information (processed by Vercel to ensure the security and stability of the platform).

3. Purpose and Legal Basis for Processing

Your personal data is processed in accordance with the GDPR for the following purposes:

• Provision of services (Art. 6(1)(b) GDPR): Performance of the agreement for the provision of electronic services (account management and listing publication).
• Security and safety (Art. 6(1)(f) GDPR): Legitimate interest in preventing abuse, including the creation of multiple accounts to bypass free listing limits (e-mail/SMS verification).
• Legal obligations (Art. 6(1)(c) GDPR): Financial accounting and compliance with statutory tax documentation retention requirements.
• Marketing measurement and analytics (Art. 6(1)(a) GDPR): Measuring the effectiveness of advertising campaigns (Google Ads conversion tracking) and marketing analytics. This takes place only if you give your consent to advertising cookies, which you may withdraw at any time without affecting the lawfulness of processing carried out before withdrawal.

4. Data Recipients

In order to ensure the highest quality of service, we cooperate with specialised technical sub-processors:

• Vercel Inc.: Application hosting and server infrastructure.
• Cockroach Labs: Data storage in a secure, multi-regional CockroachDB database.
• Bunny.net (BunnyCDN): Storage and delivery of images and media files.
• Directus: Content Management System (CMS) used for platform administration.
• Stripe Inc. / Stripe Payments Europe, Ltd.: Payment gateway provider handling all financial transactions.
• Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland): Analytics and marketing services (Google Ads Conversion Tracking), used to measure the effectiveness of advertising campaigns and for marketing analytics, on the basis of your consent. The platform implements Google Consent Mode v2: the Google tag may store cookies on your device and send full data to Google only after you grant consent to advertising cookies (ad_storage set to granted). If you enter the platform via an advertisement, advertising identifiers (such as GCLID) may be processed.

5. Your Rights

Under the GDPR, you have the right to:

• Access your personal data and receive a copy of it.
• Request the rectification (correction) of your data.
• Request the erasure of your data (“the right to be forgotten”).
• Object to the processing of your data (e.g., for marketing purposes).
• Request data portability to another entity.

To exercise any of your rights, please send your request to: contact@spotnest.com.

6. Cookies and Tracking Technologies

The Spotnest.com platform uses strictly necessary cookies (e.g. to maintain user sessions and store your cookie choice) and, only with your consent, marketing/advertising cookies placed by Google (e.g. _gcl_au). A full list of cookies, their purpose and retention time is available on the Cookie Settings page, where you can also withdraw your consent at any time. You can additionally manage cookies in your web browser settings; however, disabling cookies may impact the proper functionality of certain platform features.

7. Data Retention Period

Your personal data will be stored for the duration of your active account on the platform. Following account deletion, data necessary for financial, accounting, and tax compliance (such as Stripe transaction history) will be retained for a period of 5 years, in accordance with applicable statutory laws.

8. Amendments to the Policy

The Controller reserves the right to amend this Privacy Policy to reflect updates in legal frameworks or technical operations. Registered users will be notified of any material changes via e-mail.

For any enquiries, please contact us at: contact@spotnest.com.