Privacy Policy

1. Introduction

Welcome to the e-commerce ranks portal ("we", "our", "us"). We are committed to protecting your personal data and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and applicable Polish data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.

2. Data Controller

The data controller responsible for your personal data is the operator of the e-commerce ranks portal. For any questions regarding data processing, please contact us at the email address provided in the Contact section below.

3. Personal Data We Collect

When you register for an account, we collect the following personal data:

• First Name and Last Name — to personalize your experience
• Email Address — for account authentication and communication
• Company Name — to understand your professional context
• Company Type — to categorize users for service improvement
• Position (optional) — to understand your role
• LinkedIn URL (optional) — for professional networking purposes
• Password — stored in hashed form for account security

We also automatically collect technical data including IP addresses, browser type, device information, and usage patterns through cookies and similar technologies.

4. Legal Basis for Processing

We process your personal data based on the following legal grounds under Article 6 of the GDPR:

• Consent (Art. 6(1)(a)) — for optional data fields and marketing communications
• Contract Performance (Art. 6(1)(b)) — to provide you with access to our ranking data and services
• Legitimate Interest (Art. 6(1)(f)) — for analytics, security, and service improvement

5. How We Use Your Data

• To create and manage your user account
• To provide access to the e-commerce ranking data
• To send email verification and password reset codes
• To send monthly ranking update notifications (if opted in)
• To improve our services and user experience
• To comply with legal obligations

6. Data Retention

We retain your personal data for as long as your account is active or as needed to provide our services. If you request account deletion, we will erase your personal data within 30 days, except where retention is required by law. Technical logs and anonymized analytics data may be retained for up to 12 months.

7. Data Sharing and Transfers

We do not sell your personal data to third parties. We may share your data with trusted service providers who assist in operating our platform (e.g., hosting providers, email services) under strict data processing agreements. Any international data transfers are conducted in compliance with GDPR safeguards, including Standard Contractual Clauses where applicable.

8. Your Rights Under GDPR

As a data subject, you have the following rights:

• Right of Access — request a copy of your personal data
• Right to Rectification — correct inaccurate data via Account Settings
• Right to Erasure — request deletion of your account and data
• Right to Restrict Processing — limit how we use your data
• Right to Data Portability — receive your data in a machine-readable format
• Right to Object — object to processing based on legitimate interest
• Right to Withdraw Consent — withdraw consent at any time without affecting prior processing

To exercise any of these rights, please contact us using the details in the Contact section. We will respond within 30 days. You also have the right to lodge a complaint with the Polish Data Protection Authority (UODO — Urząd Ochrony Danych Osobowych).

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encrypted password storage (salted SHA-256 hashing), HTTPS encryption for all data in transit, secure session management with JWT tokens, and regular security reviews.

10. Contact

For any questions about this Privacy Policy or to exercise your data protection rights, please contact us at: [email protected]