Who the controller is
The controller of personal data is Artur Kowal - Personalizacja witryn internetowych, ul. Długa 2/24, 20-346 Lublin, Poland, VAT ID (NIP) 6871973559, REGON 388698362, e-mail info@seostreets.com, phone +48 723 329 301. For any matter concerning personal data please write to info@seostreets.com. We have not appointed a data protection officer, as we are not required to do so.
What we collect and why
| Data | Purpose | Legal basis | Retention |
|---|---|---|---|
| E-mail address, first name | Creating an account, sending the report, contact about the service | Art. 6(1)(b) GDPR, performance of a contract | Until the account is deleted, then three years for potential claims |
| Business name, town, street or neighbourhood, business type, website address | Carrying out the measurement and the remedial work | Art. 6(1)(b) GDPR | As above |
| Billing details including tax number and address | Issuing invoices and tax settlement | Art. 6(1)(c) GDPR, tax obligation | Five years from the end of the tax year |
| IP address, sign-in time, session identifier | Account security, abuse prevention, enforcing the one free scan limit | Art. 6(1)(f) GDPR, legitimate interest | Twelve months |
| Correspondence | Handling enquiries and complaints | Art. 6(1)(b) and (f) GDPR | Three years |
| E-mail address, where consent was given | Occasional updates about AI visibility for local businesses, at most once a month | Art. 6(1)(a) GDPR, consent | Until consent is withdrawn |
Providing data is voluntary but necessary to conclude and perform a contract. Without an e-mail address we cannot send the report; without a business name and location we cannot run the measurement.
We do not collect special categories of data, and we do not take decisions based solely on automated processing that would produce legal effects concerning Clients or similarly significantly affect them.
Who receives the data
We share data only with the processors we need in order to deliver the service, under data processing agreements:
| Recipient | Purpose | Location |
|---|---|---|
| Hosting provider | Running the site and database | European Union |
| Stripe Payments Europe, Limited | Payment and subscription processing | Ireland, with transfers to the United States |
| AI model providers: OpenAI, Anthropic, Perplexity, Google | Running the measurement. We send only the text of the question, which contains the business name, category and location | United States |
| E-mail provider | Sending reports and correspondence | European Union |
| Accountancy firm | Bookkeeping and tax settlement | Poland |
Location suggestions in the form come from OpenStreetMap. We send no personal data there, only the fragment of the place name being typed.
Data may be disclosed to public authorities where they request it on a statutory basis.
Transfers outside the European Economic Area
Some of the recipients above process data in the United States. Transfers are made under Standard Contractual Clauses approved by the European Commission and, for recipients participating in the Data Privacy Framework, under the Commission's adequacy decision.
The data sent to AI model providers is limited to the text of the question. We do not send them the Client's e-mail address, billing details or correspondence.
Your rights
You have the right to access your data, to have it rectified or erased, to restrict processing, to data portability, and to object to processing based on our legitimate interest. Where processing is based on consent you may withdraw it at any time, which does not affect the lawfulness of processing carried out beforehand.
Send any request to info@seostreets.com. We respond within one month. Where a request is complex we may extend that by a further two months and will tell you if we do.
You have the right to lodge a complaint with the President of the Personal Data Protection Office, ul. Stawki 2, 00-193 Warsaw, Poland, or with the supervisory authority in your own country.
Security
Connections to the site are encrypted. Passwords are stored only as hashes, never in plain text. Access to data is limited to people who need it to carry out their duties and who are bound by confidentiality.
Cookies
Our use of cookies is described in a separate document: Cookies.
Changes to this policy
We update this policy when the scope of processing, the list of recipients or the applicable law changes. We notify account holders of material changes by e-mail. This document applies from 27 July 2026.