Personal Data Protection Policy

This Personal Data Protection Policy explains how PRIME NETTO Sp. z o.o. processes and protects personal data in connection with the Upservice website, platform, applications, communications and related services.

The data controller is:
PRIME NETTO Sp. z o.o.
Bolesława Prusa 2
00-493 Warszawa
Republic of Poland

NIP: 5423317190
REGON: 380524668
KRS: 0000736704

Contact email for privacy matters: info@upservice.io

This Policy applies where PRIME NETTO Sp. z o.o. acts as a data controller. Where our business customers upload or manage personal data inside the Upservice platform, we usually act as a data processor on behalf of that customer.

Depending on how you use Upservice, we may process the following categories of personal data:

• name, surname, email address, phone number, company name and job title;
• account registration and login information;
• billing, subscription and payment-related information;
• messages, support requests, demo requests and other communications;
• product usage data, including pages visited, features used, clicks, logs and timestamps;
• technical data, including IP address, browser, device type, operating system, approximate location and cookie identifiers;
• marketing preferences, consent records and email interaction data;
• information entered into the Upservice platform by users or customer organizations.

We do not intentionally collect sensitive personal data unless it is necessary for a specific service and permitted by law.

We collect personal data:

• directly from you when you register, contact us, request a demo, subscribe or use our services;
• from your company, workspace administrator or other authorized users;
• automatically through cookies, logs, analytics tools and similar technologies;
• from service providers, integrations or public business sources where permitted by law.

We process personal data for the following purposes:

• to provide and manage access to Upservice;
• to create and administer user accounts;
• to process subscriptions, billing and payments;
• to respond to support requests, inquiries and demo requests;
• to improve the website, platform, product features and user experience;
• to maintain security, prevent fraud and detect misuse;
• to send service-related notifications;
• to send marketing communications where permitted by law;
• to comply with tax, accounting, legal and regulatory obligations;
• to establish, exercise or defend legal claims.

We process personal data based on one or more of the following legal bases:

• performance of a contract or steps before entering into a contract;
• compliance with legal obligations;
• our legitimate interests, such as operating and improving Upservice, securing our services and communicating with business users;
• your consent, where required by law, including for certain cookies or marketing communications.
• You may withdraw your consent at any time where processing is based on consent.

We use cookies and similar technologies to operate the website, remember preferences, analyze usage, improve performance and support marketing activities.

Strictly necessary cookies may be used without consent. Analytics, advertising, tracking or similar non-essential cookies are used only where permitted by law and, where required, based on your consent.

You can manage cookie preferences through our cookie consent tool or browser settings.

For more information, please see our Cookie Policy.

We may send marketing communications about Upservice products, features, offers, events and content.

Where required by law, we send marketing communications only with your consent. You can unsubscribe at any time by clicking the unsubscribe link in our emails or by contacting us at info@upservice.io.

Opting out of marketing does not affect important service-related communications.

We may share personal data with:

• hosting, cloud infrastructure and storage providers;
• email, communication and customer support providers;
• analytics, marketing and cookie management providers;
• payment, billing, accounting and finance providers;
• security, monitoring and anti-fraud providers;
• professional advisers, including lawyers, accountants and auditors;
• public authorities, courts or regulators where required by law;
• integration providers, where you or your organization choose to connect them;
• successors or potential buyers in connection with a merger, acquisition, restructuring or sale of business assets.

We do not sell personal data.

Where service providers process personal data on our behalf, they must follow our instructions, protect the data and use appropriate technical and organizational safeguards.

PRIME NETTO Sp. z o.o. is established in Poland. Some service providers, partners or users may be located outside Poland or outside the European Economic Area.
Where personal data is transferred outside the EEA, we use appropriate safeguards required by applicable law, such as European Commission adequacy decisions, Standard Contractual Clauses or other lawful transfer mechanisms.
Where privacy laws in the Philippines, India, Saudi Arabia, South Africa, the United Arab Emirates or other applicable regions apply, we will take reasonable steps to comply with relevant local requirements.

We keep personal data only for as long as necessary for the purposes described in this Policy.

In general:

• account data is kept while the account or customer relationship is active;
• billing, accounting and tax records are kept for the period required by law;
• support and communication data is kept as long as needed to handle requests and maintain business records;
• marketing data is kept until you unsubscribe, withdraw consent or object;
• security logs are kept for a limited period needed to protect our systems.

When data is no longer needed, we delete, anonymize or securely archive it, unless retention is required by law.

We use appropriate technical and organizational measures to protect personal data against unauthorized access, loss, misuse, alteration, disclosure or destruction.
These measures may include access controls, encryption, backups, monitoring, logging, role-based permissions, staff confidentiality obligations and vendor security reviews.
No online service is completely secure. If you believe your account or data has been compromised, please contact us immediately.

If GDPR or other applicable privacy laws apply, you may have the right to:

• access your personal data;
• correct inaccurate or incomplete data;
• request deletion of your data;
• restrict processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• receive your data in a portable format;
• withdraw consent where processing is based on consent;
• lodge a complaint with a supervisory authority.

To exercise your rights, contact us at info@upservice.io.

We may need to verify your identity before responding.

If you believe that we process your personal data unlawfully, you may lodge a complaint with the Polish supervisory authority:

President of the Personal Data Protection Office
Urząd Ochrony Danych Osobowych
ul. Stanisława Moniuszki 1A
00-014 Warszawa
Poland

You may also contact another competent data protection authority in your country of residence or workplace, where applicable.

Upservice may be used or promoted in different regions, including the Philippines, India, Saudi Arabia, South Africa and the United Arab Emirates.

Where local data protection laws apply, users in these regions may have additional rights, including rights to access, correction, deletion, objection, withdrawal of consent, data portability, complaint filing or other rights provided by applicable law.

We will process personal data in accordance with applicable local requirements where those laws apply to our activities.

We do not make decisions based solely on automated processing, including profiling, that produce legal effects concerning you or similarly significantly affect you.

Upservice is intended for business use and is not directed to children.
We do not knowingly collect personal data from children. If you believe that a child has provided us with personal data, please contact us and we will take appropriate steps to delete it, unless we are legally required to retain it.

We may update this Policy from time to time to reflect changes in our services, legal requirements or data processing practices.
The updated version will be published on this page with a new “Last updated” date.

For privacy questions or requests, contact us:

PRIME NETTO Sp. z o.o.
Bolesława Prusa 2
00-493 Warszawa
Republic of Poland

Email: info@upservice.io