Privacy Policy

Last updated: 13 March 2026  ·  Data Controller: Marcin Baranowski, JDG, VAT PL6692020067, Mielno, Poland  ·  [email protected]

1. Who We Are

Polish-Flags.com is operated by Marcin Baranowski (sole proprietorship / JDG, VAT PL6692020067, Mielno, Poland). We process your personal data as the Data Controller within the meaning of the GDPR (EU Regulation 2016/679).

2. What Data We Collect

Data category	Purpose	Legal basis
Name, email, address, phone	Providing registration service	Contract performance (Art. 6(1)(b) GDPR)
Vessel details (name, length, type, year)	Registration application	Contract performance
Passport / ID scan	Identity verification for official registration	Legal obligation (Art. 6(1)(c) GDPR)
Payment information	Payment processing (via Stripe/PayU)	Contract performance
IP address, browser, visit logs	Website security and analytics	Legitimate interest (Art. 6(1)(f) GDPR)

3. How We Use Your Data

We use your data exclusively for:

• Preparing and submitting your vessel registration application to Polish authorities
• Communicating with you about your order
• Issuing invoices and processing payments
• Complying with legal obligations (archiving, tax records)

We do not use your data for marketing purposes. We do not sell your data to third parties.

4. Who Receives Your Data

Your data is shared only with parties essential for service delivery:

• Polish registration authority (Starostwo Powiatowe) — to process your registration application
• REJA24 system — official Polish vessel register (operated by the Ministry of Infrastructure)
• Courier companies — to deliver your registration documents
• Stripe / PayU — payment processing (they operate under their own GDPR-compliant policies)

5. Data Retention

We retain your personal data for:

• 5 years after the service — for legal and tax obligations
• Immediately deleted on request — if the service was not completed

6. Your Rights

Under GDPR, you have the right to:

• Access your personal data held by us
• Rectification of inaccurate data
• Erasure ("right to be forgotten") — where no legal obligation requires retention
• Restriction of processing
• Data portability
• Object to processing based on legitimate interest
• Lodge a complaint with the Polish Data Protection Authority (UODO): uodo.gov.pl

To exercise your rights, contact us at: [email protected]

7. Cookies

Our website uses only essential technical cookies required for the website to function. We do not use advertising, tracking or analytics cookies that require consent.

8. International Transfers

Your data is stored within the EU/EEA. Payment data processed by Stripe may be transferred to the USA under Standard Contractual Clauses ensuring an equivalent level of protection.

9. Contact

For any privacy-related questions: [email protected]