Privacy and Cookies Policy

This document constitutes an integral part of the Regulations and defines the rules for processing personal data and using cookies on the Stealer.pl website.

Effective from: April 1, 2026

§1 Personal Data Administrator

The administrator of personal data of Stealer.pl Users is Marcin Kowalczyk, conducting business activity, residing at ul. Sportowa 9, 63-810 Borek Wielkopolski, Tax Identification Number (NIP): 9721359747 (hereinafter: 'Administrator').

In all matters related to personal data processing and privacy protection, the User may contact the Administrator electronically at the e-mail address: pomoc@stealer.pl.

§2 Purposes and Basis of Data Processing

Users' personal data are processed for the following purposes and on the following legal bases:

Conclusion and performance of the agreement for the provision of electronic services, including providing Access to the Software – Art. 6(1)(b) GDPR.

Fulfillment of legal obligations incumbent on the Administrator, in particular accounting and tax obligations related to issuing invoices – Art. 6(1)(c) GDPR.

Handling inquiries, notifications and complaints – Art. 6(1)(f) GDPR (legitimate interest of the Administrator).

Pursuing claims or defense against claims related to the concluded agreement – Art. 6(1)(f) GDPR.

Providing personal data is voluntary, but necessary to conclude the agreement and provide the Service. Failure to provide data may result in the inability to conclude the agreement or fulfill the order.

§3 Data Retention Period

Users' personal data are stored for the period necessary to achieve the indicated purposes, in particular:

Accounting and tax data (e.g. invoices) – for a period of 5 years from the end of the calendar year in which the tax obligation arose.

Data related to agreement performance – until the limitation period for claims arising from the agreement expires:

for consumers – up to 6 years,

for entrepreneurs – up to 3 years.

After the expiry of the indicated periods, personal data are permanently deleted or anonymized.

§4 Data Recipients

Personal data may be transferred to entities cooperating with the Administrator solely to the extent necessary to provide the Service, in particular:

electronic payment operator Przelewy24 (PayPro S.A.),

hosting and server service providers,

accounting office – within the scope of accounting services.

Personal data are not sold or made available to third parties for marketing purposes.

Personal data are not transferred outside the European Economic Area (EEA).

Payment data, including payment card or bank account data, are processed exclusively by the electronic payment operator Przelewy24 (PayPro S.A.). The Administrator does not have access to full payment data and does not store them on their servers.

§5 Rights of the Data Subject

The User has the following rights:

right of access to personal data,

right to rectify incorrect or incomplete data,

right to delete data in cases provided for in Art. 17 GDPR,

right to restrict data processing,

right to data portability,

right to object to personal data processing.

To the extent that data processing takes place based on consent, the User has the right to withdraw consent at any time, without prejudice to the lawfulness of processing carried out before its withdrawal.

The User also has the right to lodge a complaint with the President of the Personal Data Protection Office (UODO) if they consider that the processing of their personal data violates GDPR regulations.

§6 Cookies and Server Logs

The Stealer.pl website uses cookies to:

ensure proper website operation (technical cookies),

create anonymous website usage statistics (analytical cookies).

Analytical cookies are not used to identify the User.

The User may change cookie settings at any time using their web browser settings.

The website collects server logs (including IP address, date and time of request, browser information), which are used solely for technical, administrative and security purposes and stored for the period necessary to achieve these purposes.

The website may use analytical and statistical tools provided by third parties (e.g. Google Analytics), which use cookies to create anonymous statistics regarding the way the website is used.

Data collected under analytical tools are not used to identify the User and may be processed by the providers of these tools on their servers, in accordance with their own privacy policies.

§7 Final Provisions

The Privacy Policy may change in the event of changes in legal regulations or technological solutions used.

The current version of the Privacy Policy is always available on the Stealer.pl website.

Effective from: April 1, 2026