Privacy Policy

§1. Data Controller

The controller of your personal data within the meaning of the General Data Protection Regulation (GDPR / RODO) is:

IMMOGROWTH SP. Z O.O. (operating under the brand “SerwiFlow”)
Orlinskiego 3C
31-878 Kraków, Poland
KRS: 0000827245
REGON: 385475443
NIP: 9452233842
Email: contact@serwiflow.com

For any question regarding the processing of your personal data, you may contact us at the email address above.

§2. Scope of this Policy

This Privacy Policy explains how we collect, use, store, and protect the personal data of Users of the Platform available at www.serwiflow.com, including both Clients (persons seeking translation services) and Translators (independent professionals offering their services).

§3. Categories of Data We Process

Depending on how you use the Platform, we may process the following categories of personal data:

• Clients: first and last name, email address, phone number (optional), city and country, and the content of translation requests, including any documents you choose to upload;
• Translators: the data above plus profile information (languages, sworn-language qualifications, official register number, services, description, photo, address), and documents submitted for verification of credentials;
• All Users: account login data, technical data (IP address, browser, device), and usage data;
• Payment data (Translators only): billing information processed by our payment provider Stripe. We do not store or process payment card numbers ourselves.

§4. Purposes and Legal Bases of Processing

We process personal data for the following purposes and on the following legal bases under Article 6 GDPR:

• Providing the Platform and managing accounts — performance of a contract (Art. 6(1)(b));
• Connecting Clients with Translators and transmitting translation requests — performance of a contract and legitimate interest (Art. 6(1)(b) and (f));
• Verifying Translator credentials — legitimate interest in maintaining a trustworthy platform (Art. 6(1)(f));
• Processing Subscription payments and issuing invoices — performance of a contract and legal obligation (Art. 6(1)(b) and (c));
• Handling complaints and communications — legitimate interest (Art. 6(1)(f));
• Statistical analysis via Google Analytics 4 — your consent (Art. 6(1)(a));
• Complying with legal and accounting obligations — legal obligation (Art. 6(1)(c)).

§5. Recipients and Processors

We share personal data only with trusted service providers acting as processors on our behalf, and only to the extent necessary:

• Stripe — payment processing;
• Supabase — database and authentication;
• IONOS, Netlify, GitHub — hosting and technical infrastructure;
• Google (Analytics 4) — usage statistics, subject to your consent.

Some of these providers may process data outside the European Economic Area. Where this occurs, such transfers are based on appropriate safeguards under the GDPR, in particular the European Commission’s Standard Contractual Clauses.

Where a Client and a Translator establish contact through the Platform, the data necessary to fulfil the request (such as name and contact details) is shared between them so that they may conclude and perform their agreement directly.

§6. Retention Periods

We retain personal data only for as long as necessary for the purposes described above:

• Account and profile data — for the duration of the account; after closure, data is deleted or anonymised, except where longer retention is required by law;
• Accounting and invoicing data — for 5 years from the end of the relevant accounting year, in accordance with Polish tax and accounting law;
• Data related to claims — until the expiry of the applicable limitation periods;
• Analytics data — for the period defined in Google Analytics settings.

§7. Your Rights

Under the GDPR, you have the right to:

• access your personal data and obtain a copy of it;
• request rectification of inaccurate data;
• request erasure of your data (“right to be forgotten”);
• request restriction of processing;
• data portability;
• object to processing based on legitimate interest;
• withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.

To exercise these rights, contact us at contact@serwiflow.com. You also have the right to lodge a complaint with the supervisory authority — the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa.

§8. Cookies and Analytics

The Platform uses cookies that are strictly necessary for its operation, which do not require consent.

We also use Google Analytics 4 to obtain anonymous statistics about how the Platform is used. These analytics cookies are only activated after you give your consent through the cookie banner. You may withdraw your consent at any time by changing your cookie preferences.

§9. Data Security

We apply appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

§10. Changes to this Policy

We may update this Privacy Policy from time to time. The updated version will be effective upon publication on the Platform, and where the changes are material, we will inform registered Users by appropriate means.

§11. Governing Law

This Privacy Policy is governed by Polish law and the GDPR. This Policy forms an integral part of our Terms & Conditions.