01 · AT A GLANCE
The essentials
Contact details you submit, account and workspace details, security metadata, and service data sent under your workspace.
To answer you, provide and secure the service, keep reliable governance records, and meet legal obligations.
You may ask for access, correction, deletion, restriction, portability, or object to processing where the relevant right applies.
Email contact@agentgatefee.com with “Privacy” in the subject line.
02 · WHO IS RESPONSIBLE
Controller and contact
Bartosz Kowalczyk, trading as AgentGateFee, is the data controller for the website, direct enquiries, account access, service security, and his own customer administration described in this policy.
Bartosz Kowalczykul. Gieysztora 4/161
02-999 Warszawa, Poland
contact@agentgatefee.com
Privacy requests can be sent to the email address above. If a customer submits personal data inside an Agent Event or connected service, the customer normally decides why that content is processed and acts as controller; AgentGateFee processes that content on the customer's documented instructions and applicable agreement.
03 · WHAT WE PROCESS
Purposes, legal bases, and retention
| Activity and data | Purpose and legal basis | Retention |
|---|---|---|
| Website delivery and securityIP address, request time, requested path, browser/request metadata, and security events. | Deliver and protect the site, diagnose faults, and prevent abuse. Legitimate interests in operating a secure and reliable service (Article 6(1)(f) GDPR). | Operational logs are retained for no more than 30 days. |
| Contact enquiriesName, work email, optional company, message, and one-way keyed abuse-control digests derived from email and network address. | Answer the enquiry and take requested pre-contract steps (Article 6(1)(b)), or our legitimate interest in business correspondence (Article 6(1)(f)). | The message body is not stored in the AgentGateFee database. Mailbox correspondence is ordinarily removed within 12 months after the last substantive contact. Abuse-control digests expire within 2 days. |
| Registration and account accessWork email, organization and workspace names, verification status, one-time challenge and session digests, and a keyed request-address digest. | Create, authenticate, and administer the service requested by you (Article 6(1)(b)); prevent account abuse under our legitimate security interest (Article 6(1)(f)). | Challenges: up to 1 day. Necessary browser session: 7 days. Expired or revoked session records: up to 30 days. Account identity and workspace configuration: while active, then removed or minimized under the account closure lifecycle. |
| Service and governance recordsResource configuration, account actions, entitlements, usage metadata, security audits, and minimized decision/governance records. | Provide the contracted service and requested evidence (Article 6(1)(b)); maintain security, integrity, accountability, and legal claims (Article 6(1)(f)); comply with applicable law where required (Article 6(1)(c)). | Operational data follows the active plan or contract. Narrowly minimized audit, commercial, security, and governance records may be retained for up to 10 years where their integrity, legal-obligation, or claims purpose remains justified. |
We receive this data from you, your browser, or an authorized user of your workspace. Providing contact data is voluntary, but we cannot answer without a reachable address and message. The account fields are required to create and secure the service. We do not use these data for advertising profiles or sell personal data.
04 · CUSTOMER SERVICE DATA
Agent Events and controller roles
Developer OBSERVE accepts data selected and sent by a customer. Customers must avoid including personal data that is not necessary for their governance purpose and must not send passwords, payment-card data, or other secrets. The active plan or customer agreement sets the operational retention period for Agent Event data.
Where that content contains personal data, the customer is normally the controller and AgentGateFee is its processor. Requests about data submitted by an organization may therefore need to be handled first by that organization. We support customers in responding as required by the applicable agreement and data-protection law.
AgentGateFee does not use website, contact, or account data to make solely automated decisions that produce legal or similarly significant effects about the person visiting or operating the account.
05 · RECIPIENTS AND TRANSFERS
Who can process the data
Access is limited to authorized people who need it to operate, secure, or support AgentGateFee. We use service providers for European hosting, email transport and mailbox delivery, and essential infrastructure. They may process only the data needed to provide their service and are subject to contractual and security controls.
- Hetzner Online GmbH — website and application hosting.
- OVH Groupe SA — outbound email transport and forwarding.
- Google LLC — the receiving support mailbox.
We may also disclose data where required by law, to protect rights or security, or in connection with a business reorganization under appropriate safeguards. Where a provider processes personal data outside the European Economic Area, we rely on an applicable adequacy decision or approved contractual safeguards, such as the European Commission's Standard Contractual Clauses, and supplementary measures where required. You may ask us for information about the safeguard relevant to your data.
07 · YOUR RIGHTS
Requests, objections, and complaints
Depending on the processing and applicable law, you may have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- request deletion or restriction of processing;
- receive data you provided in a portable format where processing is automated and based on contract or consent;
- object, on grounds relating to your situation, to processing based on legitimate interests; and
- withdraw consent at any time where consent is the legal basis.
These rights can have legal exceptions. To exercise one, email contact@agentgatefee.com. We may need proportionate information to verify that the request concerns you. We aim to reply within one month, subject to the extensions allowed by law.
You may lodge a complaint with the Polish supervisory authority, the President of the Personal Data Protection Office (UODO), or with the supervisory authority in the EEA country where you live or work or where you believe an infringement occurred.
08 · CHANGES
Keeping this policy current
We may update this policy when the service, providers, or legal requirements change. The effective date at the top identifies the current version. If a change materially affects an active account, we will provide an appropriate additional notice through the service or by email.
Last updated: