Legal documents

GDPR Information Notice

Version: 1.0.0 Updated: 2026-04-16 Effective from: 2026-04-16

1. Data Controller

The controller of your personal data is Łukasz Jagodziński, with its registered address at: ul. Sumakowa 10, 62-069 Palędzie, gm. Dopiewo, VAT ID (NIP): 7842195025.

Controller contact: contact@spotlane.app

2. Data Protection Contact

The Controller has not appointed a Data Protection Officer (no legal obligation). For matters relating to personal data processing please contact the Controller directly at: contact@spotlane.app.

3. Purpose and Legal Basis for Processing

We process your personal data for the following purposes:

1. Entering into and performing the Application use agreement — Art. 6(1)(b) GDPR.

2. Compliance with legal obligations of the Controller — Art. 6(1)(c) GDPR.

3. Pursuing legitimate interests of the Controller: ensuring Application security, service analytics, asserting or defending claims — Art. 6(1)(f) GDPR.

4. Marketing activities and communication — solely on the basis of your consent — Art. 6(1)(a) GDPR.

4. Categories of Data Processed

We process the following categories of personal data:

— identity data: email address, username, optional phone number;

— profile data: name/handle, profile picture, vehicle information;

— location data: coordinates of spots and routes (provided consciously by the user);

— technical data: IP address, device identifier, activity logs;

— user content: photos, comments, posts, meetup group messages;

— SSO data (if you use Google or Apple sign-in): external identifiers.

5. Recipients of Data

Data may be shared with:

— processors acting on behalf of the Controller (cloud infrastructure, email, analytics providers) — only under data processing agreements;

— public authorities — only when required by mandatory applicable law;

— other Application users — only in respect of publicly visible content.

6. Transfers to Third Countries

The Controller may transfer data to entities outside the European Economic Area (EEA) only where appropriate safeguards required by the GDPR are in place (e.g. standard contractual clauses adopted by the European Commission).

7. Retention Periods

Personal data is retained for:

— the period arising from the agreement and legal obligations (generally up to 5 years after the agreement ends, or longer if required by law);

— until consent is withdrawn — where processing is based solely on consent;

— 3 years from the expiry of the limitation period for claims — for asserting and defending claims.

8. Your Rights as a Data Subject

You have the following rights under the GDPR:

1. Right of access (Art. 15 GDPR) — you may request information about the data we process.

2. Right to rectification (Art. 16 GDPR) — if data is inaccurate or incomplete.

3. Right to erasure (Art. 17 GDPR) — the "right to be forgotten", when data is no longer needed or you withdraw consent.

4. Right to restriction of processing (Art. 18 GDPR).

5. Right to data portability (Art. 20 GDPR) — in respect of data processed on the basis of consent or a contract.

6. Right to object (Art. 21 GDPR) — against processing based on legitimate interests.

7. Right to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal.

8. Right to lodge a complaint with a supervisory authority: President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland (uodo.gov.pl).

Please submit requests to: contact@spotlane.app

9. Automated Decision-Making and Profiling

Data may be processed in an automated manner for the purposes of the spot scoring algorithm. Scoring influences the order in which content is displayed in the Application but does not produce legal or similarly significant effects for you.

We do not apply automated decision-making within the meaning of Art. 22 GDPR that would produce significant legal effects without human involvement.

10. Voluntary Nature of Data Provision

Providing data is voluntary, but necessary to use the Application. Failure to provide data required for registration makes it impossible to create an account.

11. Contact

For all matters concerning personal data processing and exercising your GDPR rights, please contact us:

Łukasz Jagodziński

ul. Sumakowa 10, 62-069 Palędzie, gm. Dopiewo

Email: contact@spotlane.app