SPOTLANE
1. Data Controller
The controller of your personal data is Łukasz Jagodziński, with its registered address at: ul. Sumakowa 10, 62-069 Palędzie, gm. Dopiewo, VAT ID (NIP): 7842195025.
For all matters relating to personal data protection, please contact us at: contact@spotlane.app.
2. Data Protection Contact
The Controller has not appointed a Data Protection Officer. Please direct all questions and requests regarding personal data processing directly to the Controller at: contact@spotlane.app.
3. Data We Collect
When you use the Application we may collect the following categories of data:
a) Account data: email address, username (handle), password (stored in encrypted form), optional phone number.
b) Profile data: profile picture, bio, list of vehicles (make, model, production year).
c) Location data: GPS coordinates of a spot, route point or checkpoint — only when you consciously publish a spot or join a route.
d) User content: photos and videos uploaded as spots, comments, posts, meetup group chat messages.
e) Technical data: IP address, browser or OS type, device identifier, activity logs, timestamps.
f) OAuth data: identifiers from Google or Apple if you sign in via SSO.
g) Pre-launch marketing site (waitlist): email address and optional username from the signup form — processed via Cloudflare Workers with Workers KV (Cloudflare, Inc.) and, for confirmation emails, Resend, Inc. (USA — Chapter V GDPR safeguards, including SCCs). Demo map tiles on the landing page may be loaded from MapTiler AG (Switzerland/EEA). If front-end error monitoring is enabled, technical data may be sent to Sentry (Functional Software, Inc., USA).
4. Purpose and Legal Basis for Processing
We process your data for the following purposes:
a) Entering into and performing the service agreement (Art. 6(1)(b) GDPR): creating an account, logging in, managing your profile and Application features.
b) Legitimate interests of the Controller (Art. 6(1)(f) GDPR): Application security, fraud prevention, statistics and analytics, content moderation.
c) Compliance with legal obligations (Art. 6(1)(c) GDPR): tax, archiving, and other statutory requirements.
d) Consent (Art. 6(1)(a) GDPR): marketing communications, push notifications — only after explicit consent is given.
e) Consent (Art. 6(1)(a) GDPR): joining the pre-launch waitlist — voluntary consent indicated in the marketing site form; to withdraw: email contact@spotlane.app.
5. Sharing of Data
Your data may be shared only with:
a) Processors acting on our behalf: cloud infrastructure providers, analytics tools, customer support — under data processing agreements.
b) Public authorities: solely on the basis of applicable law.
c) Other Application users: only in respect of publicly available content (public profile, spots, open meetup posts).
We do not sell your personal data.
6. Transfers Outside the EEA
Some of our technical infrastructure providers may process data outside the European Economic Area. In such cases we ensure appropriate safeguards in accordance with Chapter V GDPR (e.g. standard contractual clauses).
7. Retention Periods
We process data for the period necessary to fulfil the stated purposes:
a) Account and profile data: for as long as you maintain an active account, and after deletion — for the period required by law (generally no longer than 5 years).
b) Technical and security logs: up to 12 months from the event.
c) Publicly published content: until removed by the user or the Controller.
d) Pre-launch waitlist data: up to 24 months from sign-up or until the full Application launches.
8. Your Rights
Under the GDPR you have the following rights:
a) Right of access (Art. 15 GDPR).
b) Right to rectification (Art. 16 GDPR).
c) Right to erasure (Art. 17 GDPR) — the "right to be forgotten".
d) Right to restriction of processing (Art. 18 GDPR).
e) Right to data portability (Art. 20 GDPR).
f) Right to object (Art. 21 GDPR) — in particular against processing based on legitimate interests.
g) Right to withdraw consent at any time — without affecting the lawfulness of processing carried out before withdrawal.
h) Right to lodge a complaint with a supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, uodo.gov.pl.
Submit requests to: contact@spotlane.app.
9. Data Security
We apply appropriate technical and organisational measures to protect your data against unauthorised access, loss, destruction or disclosure — including transport encryption (TLS), data-at-rest encryption, access controls and regular audits.
10. Changes to This Policy
We may update this Policy. We will notify you of significant changes at least 14 days in advance by sending a notice to the email address associated with your account or by displaying a notification in the Application.
11. Contact
If you have any questions about this Policy, please contact us:
Łukasz Jagodziński
ul. Sumakowa 10, 62-069 Palędzie, gm. Dopiewo
Email: contact@spotlane.app