Data Processing Agreement

1. Subject and roles

The Client (controller) entrusts the Operator (processor) — Kamil Bartecki EVO-CODE, NIP 5050083887 — with the processing of personal data of the Client's End Users, to the extent necessary to provide the MeetMe Service, under Art. 28 GDPR.

2. Scope, nature and purpose

Categories of data: identification and contact data of End Users (name, phone, e-mail), booking and visit history. Categories of persons: the Client's clients (End Users). Purpose: provision of the booking and management Service. Duration: for the term of the main Agreement.

3. Processor's obligations

• process data only on the Client's documented instructions;
• ensure the confidentiality of persons authorized to process;
• apply technical and organizational security measures appropriate to the risk (Art. 32 GDPR);
• assist the Client in responding to data-subject requests and in fulfilling obligations under Art. 32–36 GDPR;
• after the end of processing, delete or return the data, at the Client's choice, subject to mandatory retention.

4. Sub-processors

The Client grants general authorization to use sub-processors (hosting, e-mail, payment providers). The Operator imposes the same data-protection obligations on them and informs the Client of intended changes, allowing objection.

5. Audit

The Operator makes available information necessary to demonstrate compliance and enables audits, including inspections, conducted by the Client or an authorized auditor, with reasonable notice.

6. Personal data breaches

The Operator notifies the Client of a personal data breach without undue delay after becoming aware of it, providing the information needed for the Client's notifications.

7. Liability and final provisions

Liability is governed by the Terms of Service and generally applicable law. Matters not regulated herein are governed by the GDPR and the Polish Personal Data Protection Act. The binding language version is Polish.