EAASY PL · EN · DE · FR · ES · IT
⚠️ This is a document template (educational material), not legal advice. Have it reviewed by a lawyer before publishing or commercial use.

Privacy Policy

Last updated: 2026-06-23

This policy describes what data EAAsy processes (GDPR).

Data controller

The data controller is STARTORBIT Sp. z o.o., ul. Władysława Trylińskiego 2, 10-683 Olsztyn, NIP 7394032668, KRS 0001234782, REGON 544530662 (Sąd Rejonowy w Olsztynie, VIII Wydział Gospodarczy KRS). For data matters, email admin@eaasy.eu.

What data and why

Account: email and password (stored as a hash) — to sign you in and run your account.

Sites and audits: the URLs you scan and scan results — to provide the service (audit, statement, monitoring).

Legal basis

Performance of a contract (providing the service) — Art. 6(1)(b) GDPR — and legitimate interest (security, improvement) — Art. 6(1)(f) GDPR.

Retention

Account data — until you delete your account. Scan results — until deleted by you or with the account. (Confirm exact periods with a lawyer.)

Recipients and processors

Infrastructure providers (hosting, database), the payment operator Paynow (mBank S.A.) (when processing payments), and — when generating fixes — an AI model provider. We share only data needed to run the service.

Your rights

You have the right to access, rectify, erase, restrict and port your data, and to lodge a complaint with a supervisory authority.

To exercise your rights, email admin@eaasy.eu.