Privacy policy

1. Data controller

The controller of your personal data is AkcjaBiznes, registered at ul. Sąsiedzka 7, 93-330 Łódź, Poland, VAT ID: 7312024623. For matters relating to the GDPR you can contact us at: [email protected].

This policy covers the Scatto application available at scatto.pl — both the host panel (for weddings, birthdays, barbecues, company events and others) and the guest view opened with a QR code.

2. What data we process

• Account data – e-mail address, password (stored as a cryptographic hash) and the names, types and dates of the events run on the account.
• Billing data – the data required to issue an invoice and handle subscription payments.
• Content entered in the application – photos and videos, the guest list (first and last name, attendance confirmation, plus-one, seat at the table), the schedule, the menu and song requests together with the name of the person requesting them.
• Technical data – IP address, device and browser information, server logs, data stored in local browser storage.

3. Purposes and legal bases for processing

• Providing the service and running the account – Article 6(1)(b) GDPR (performance of a contract).
• Settlements, accounting and tax obligations – Article 6(1)(c) GDPR (legal obligation).
• Application security, handling reports and pursuing or defending claims – Article 6(1)(f) GDPR (legitimate interest).
• Marketing contact, if you ask for it – Article 6(1)(a) GDPR (consent, which you can withdraw at any time).

4. Guest data

The guest list, attendance confirmations, table assignments and song requests are entered by the host using the application or by the guests themselves. In that respect the data controller is the user of the application (the host), and AkcjaBiznes processes this data as a processor — solely in order to provide the service, on the basis of a data processing agreement concluded together with the acceptance of the terms of service.

5. Data recipients

Data may be shared with entities that support us in providing the service: hosting and infrastructure providers, payment operators, the e-mail provider and the accounting office. Each of them acts on the basis of a data processing agreement. We may also disclose data to public authorities where required by law.

6. Transfers outside the EEA

We store data on servers within the European Economic Area. If any provider processes data outside the EEA, this will take place solely with the safeguards required by the GDPR, in particular standard contractual clauses.

7. How long we keep data

• Account data and content – for the duration of the agreement, and for 30 days after the account is deleted.
• Accounting documents – 5 years from the end of the tax year.
• Data needed to defend claims – until the limitation period expires.

8. Your rights

You have the right to: access your data, rectify it, erase it, restrict its processing, transfer it, object to processing based on legitimate interest, and withdraw consent at any time. To exercise these rights, write to [email protected].

You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw).

9. Providing data is voluntary

Providing data is voluntary but necessary in order to register an account and use the application. Guests can use the QR view without providing any data — except in the sections that require it (for example, confirming attendance).

10. Cookies and browser storage

We use cookies and local browser storage (localStorage) for purposes necessary to run the application: maintaining the session, remembering guest view settings and saved content. You can delete them in your browser settings — this may, however, prevent some features from working.

11. Automated decisions

We do not make decisions based solely on automated processing, and we do not carry out profiling.

12. Changes to this policy

We will announce changes to the Privacy policy in the application or by e-mail to the address assigned to the account. The current version applies from the date given at the top of the document.