Skip to content
Cohorta™
Sign up

Documents

GDPR information notice

This is a translation. The Polish version is legally binding. Read the Polish version.

Controller

The controller of personal data is YES FOR sp. z o.o., ul. Świętokrzyska 61, 32-650 Kęty, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court for Kraków-Śródmieście in Kraków, 12th Commercial Division of the National Court Register, under KRS number 0001181754, NIP (tax identification number) 5492485016, REGON 542135795, share capital PLN 100,000.00.

Data Protection Officer (DPO)

The controller has not appointed a Data Protection Officer. For matters relating to the processing of personal data, please get in touch through the contact form.

Purposes and legal bases of processing

  • Performing the agreement for the provision of platform services, Article 6(1)(b) GDPR.
  • Processing payments and accounting settlements, Article 6(1)(c) GDPR (legal obligation, Polish Accounting Act).
  • Marketing our own services, Article 6(1)(f) GDPR (the controller's legitimate interest) or point (a) (the user's consent) for email marketing.
  • Securing and maintaining the infrastructure, Article 6(1)(f) GDPR.
  • Establishing and defending claims, Article 6(1)(f) GDPR.

Data retention period

  • Account data: for as long as you use the service, and additionally for up to 3 years after the account is deleted for evidential purposes.
  • Accounting data: 5 years (Polish Accounting Act).
  • Technical logs: 90 days.
  • Marketing data: until consent is withdrawn or an objection is raised.

Recipients of data

We use the following processors:

  • Supabase Inc. (database, auth and storage hosting).
  • Vercel Inc. (application hosting).
  • Stripe (payment operator).
  • Resend (transactional email).
  • Fakturownia.pl (issuing VAT invoices).
  • Google Ireland Ltd. (Google Analytics / Tag Manager, only after consent to analytics cookies).

Transfers outside the EEA

Data may be transferred to the US as part of the Stripe, Vercel or Supabase services, on the basis of standard contractual clauses (SCCs) and the Data Privacy Framework decision. A copy of the safeguards is available on request.

Your rights

You have the right to:

  • access your data (Article 15 GDPR),
  • rectification (Article 16),
  • erasure of data (Article 17),
  • restriction of processing (Article 18),
  • data portability (Article 20),
  • object (Article 21) to processing for marketing purposes,
  • withdraw consent at any time (this does not affect the lawfulness of processing before the withdrawal),
  • lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warsaw, Poland).

Profiling and automated decision-making

The platform does not make automated decisions about you that produce legal effects. Automations (such as notifications and gamification) are used solely for communication and do not affect your rights.

Voluntary provision of data

Providing your data is voluntary, but it is necessary to create an account and use the platform.

Contact

For matters relating to the protection of personal data, write to us through the contact form or by post to: YES FOR sp. z o.o., ul. Świętokrzyska 61, 32-650 Kęty, Poland.

Version of 21 August 2026. The previous version applied from 1 June 2026; the change concerns the entity operating the platform, which since August 2026 has been YES FOR sp. z o.o.