Privacy Policy & GDPR Compliance

Last updated: August 11, 2026

1. Data Controller (ADO)

The Data Controller responsible for your personal data under the EU General Data Protection Regulation (GDPR) is:

Tomasz Musioł Systemy Informatyczne
NIP / Tax ID: 6351675749
REGON: 243216565
Registered Address: ul. Myśliwska 1, 44-100 Leboszowice, Poland
Privacy Contact Email: hello@gettripplan.com

2. Legal Grounds for Data Processing (Art. 6 GDPR)

We process personal data strictly under valid legal bases:

Performance of Contract (Art. 6(1)(b) GDPR): Fulfilling digital orders (Notion / PDF delivery) and scheduling strategy calls.
Legal & Tax Compliance (Art. 6(1)(c) GDPR): Maintaining financial invoicing records and tax audit compliance.
Legitimate Interests (Art. 6(1)(f) GDPR): Managing customer inquiries, preventing fraud, and maintaining website infrastructure performance.

3. Data Processors & Third-Party Vendors

We rely on trusted third-party service providers acting as data processors:

Stripe Payments Europe Ltd. (Ireland) / Lemon Squeezy LLC (USA): Payment checkout and merchant fulfillment.
Vercel Inc. (USA): Web application hosting.
Cloudflare Inc. (USA): DNS, SSL/TLS encryption, and cookieless web analytics.
Calendly LLC (USA): 1-on-1 strategy call booking.
Formspree Inc. (USA): Contact inquiry routing.

Cross-border data transfers to the US are conducted under the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCC).

4. Data Subject Rights & Supervisory Authority

Under GDPR, you hold the following rights regarding your personal data:

Right to access and obtain a copy of your personal data.
Right to rectification of inaccurate data.
Right to erasure ("Right to be forgotten").
Right to restrict processing and right to data portability.
Right to object to data processing.

You also have the right to lodge a complaint with your national supervisory authority (in Poland: President of the Personal Data Protection Office - PUODO).

5. Cookies & Analytics