Add a service price

Privacy policy

Data controller

The data controller is Online Marketing Help sp. z o.o., ul. św. Filipa 23/3, 31-150 Kraków, KRS 0000786528. For data-related enquiries, contact: kontakt@indekscen.pl.

What data we collect and why

  • “How much did you pay?” form: service, amount, locality, service date, rating, description and, optionally, the contractor's name and website; optionally, an e-mail address (to confirm the submission via a link and for contact regarding it) and an attachment (receipt, invoice, bill, quotation). Purpose: to build a price index and reviews database (legitimate interest, Article 6(1)(f) of the GDPR), confirm and verify the submission and make contact regarding it (consent, Article 6(1)(a)), and demonstrate that reviews marked as verified come from customers who actually used the service (legal obligation towards consumers, Article 6(1)(c)). We publish the service, amount, locality, service date, rating, description, contractor details and verification level, but never the e-mail address or attachment. We send the confirmation link by e-mail via Resend (an e-mail service provider processing data on our behalf); the link is valid for 60 days. Only our editorial team can view the attachment; its initial analysis (amount, date, issuer and items) and comparison with the submission may be carried out by an automated tool based on Anthropic's language model (which processes data on our behalf and does not use it to train models). The decision is made by a member of our editorial team and is not based solely on automated processing (Article 22 of the GDPR). We retain the attachment as evidence of verification while the submission is published; we may delete it earlier and will delete it promptly at the author's request. For a quick review (photo and rating), the document text is read by software in your browser, while the photo and extracted text are sent to the server (and stored for our editorial team); we check the contractor's NIP (Polish tax ID) from the document against the Ministry of Finance's public VAT Taxpayer Register to establish the company's name and locality. We record the IP address only as an irreversible hash to limit the number of submissions.
  • “For businesses” form: company name, price list address, city, e-mail address. Purpose: adding the price list to the index and making contact regarding it (Article 6(1)(b) and (f)).
  • “For businesses” form: company details and price list; the NIP (Polish tax ID), which we do not publish, is used to verify that the entry was added by the company. We publish the website, while the telephone number and e-mail address, if permitted by the company, are shown to customers after they click “View telephone number and e-mail address”. Legal basis: performance of a contract and legitimate interest (Article 6(1)(b) and (f) of the GDPR).
  • “View phone number and e-mail” on company price lists: your e-mail address and phone number, as well as information about which company's contact details you viewed and its sector. Purpose: to send you commercial information about services in this sector, including offers from companies in the sector, by e-mail, phone and SMS. Legal basis: your consent (Article 6(1)(a) GDPR and electronic communications legislation). You may withdraw your consent at any time by writing to kontakt@indekscen.pl; withdrawal does not affect the lawfulness of processing carried out before it. We retain the data until consent is withdrawn, for no longer than 3 years after the last contact. We also record the wording and date of your consent as proof.
  • Company directory (/firmy/, /firma/): company details from their own public websites: trading name and website address, services and cities covered by the website, page title, and prices from the public price list, including a quotation and date. We do not publish phone numbers, e-mail addresses, postal addresses or surnames beyond what the company itself has included in its name or website address. For sole traders who are natural persons (for example, a sole proprietorship), this constitutes personal data. Purpose: to inform consumers who provides a given service and at what price (legitimate interest, Article 6(1)(f) of the GDPR). Data source: public company websites. We retain the data for as long as it remains on the company's website and update it whenever the index is rebuilt. You have the right to object (Article 21 of the GDPR): we will remove the listing following a request submitted through the form or sent to kontakt@indekscen.pl, and add the domain to the exclusion list so that the listing does not reappear.
  • Property transaction prices (/ceny-nieruchomosci/, /ceny-mieszkan/, /ceny-domow/, /ceny-dzialek/ and other property price sections, /gmina/): information pursuant to Article 14 of the GDPR. We publish transaction data for flats, houses, plots of land, garages and commercial premises from the Property Price Register (RCN, Polish official register of real-estate transactions), maintained by county heads and city mayors and made available by the Head Office of Geodesy and Cartography (WFS service), county authorities (their WFS services), and the cities of Łódź, Wrocław, Kraków and Warsaw (their services and data files). Scope: date of the notarial deed, building address (locality, street, number), location on the map approximated to around 100 m, area of the premises, building or plot, designation in the local development plan, floor area, number of rooms, floor, market type, price and category of the parties (e.g. individual, legal entity, municipality (gmina)). We do not publish names, flat or plot numbers, deed numbers or notaries' details, and we remove these data when downloading them. The dataset does not allow us to identify whom a transaction concerns; however, for someone who knows the parties to the transaction, it may constitute information about that person (Article 11 of the GDPR). Purpose: providing information about actual prices on the housing market (legitimate interest, Article 6(1)(f) of the GDPR); the Act of 26 September 2025 made these data available for reuse (Article 40a(2)(1)(k) of the Geodetic and Cartographic Law), and we publish the resulting material with attribution of the source (Article 40c(3)). We retain the data indefinitely and update them monthly. You have the right to object (Article 21 of the GDPR) using the form (select “Property transaction at my address”) or by contacting kontakt@indekscen.pl, providing the address and, if possible, the date of the deed. Each objection is considered individually by the service administrator: submitting an objection does not automatically hide or remove anything, and the administrator may refuse if publication serves an important legitimate purpose (transparency of market prices) that overrides the interests of the person lodging the objection (Article 21(1) of the GDPR). We will inform you of the decision within one month at the latest.
  • Notifications about new transactions (/powiadomienia/): e-mail address, selected property types and localities, the wording and time of consent, and a shortened IP address (proof of consent). Purpose: to send notifications about new transactions and commercial information related to the service, based on your consent (Article 6(1)(a) GDPR, Article 10 of the Polish Act on Providing Services by Electronic Means, Article 172 of the Polish Telecommunications Law). Subscription requires confirmation via a link in an e-mail. You can withdraw your consent at any time using the link in each e-mail; we will then delete your address. We send e-mails through Resend (an e-mail service provider that processes data on our behalf). We retain the data until consent is withdrawn.
  • “Add a review in a month” reminder (a request for a contribution after extended browsing): e-mail address, the service concerned, the wording and time of consent, and a shortened IP address (proof of consent). Purpose: to send one confirmation message and one reminder after approximately 30 days, based on your consent (Article 6(1)(a) GDPR, Article 10 of the Polish Act on Providing Services by Electronic Means). We send nothing unless you click the confirmation link. E-mails are sent through Resend. We delete the address no later than 120 days after sign-up; you can withdraw your consent earlier using the link in each e-mail. The contribution request itself uses no cookies: the number of pages viewed and the time spent are stored only in your browser's memory, and we receive only aggregate counts (how many times the request was shown and dismissed), with no personal identifier.
  • Report form: the report's content and, optionally, an e-mail address. Purpose: handling the report and fulfilling obligations under the Digital Services Act (Article 6(1)(c) and (f)).
  • Spam protection: a hash of the IP address (irreversible and salted) is stored for one hour.

How long

We retain submissions until they have been reviewed, and published data points (without personal data) indefinitely. We retain e-mail addresses associated with customer entries for as long as the entry is published (so that we can respond to reports concerning the entry and demonstrate its confirmation), while for other matters we delete them no later than 12 months after the matter is closed. We retain attachments to customer entries (receipts, invoices and quotations) as proof of verification for as long as the entry is published; we may delete them earlier (for example, if storage costs increase) and will delete them at the author's request.

Recipients

Data is stored in Cloudflare's infrastructure (service hosting, submission database and attachment storage). Resend sends e-mails on our behalf. Attachments to customer entries may be initially read by a language model provided by Anthropic (on our behalf, without being used to train models). We do not sell data or share it with companies listed in the index.

Cookies and analytics

The service does not use cookies for tracking or advertising. We collect visitor statistics using Cloudflare Web Analytics, without cookies or personal identifiers and in aggregate form (number of page views, country, device type and referring page). We use browser storage (localStorage) solely to remember your choices on this device: that you added an entry (so you can edit it), that you dismissed the contribution request, and the number of pages viewed, which determines whether we display the request. This data never leaves your browser.

Your rights

You have the right to access, rectify and erase your data, restrict its processing, object to its processing, transfer it and withdraw your consent. You can also lodge a complaint with the President of the Polish Personal Data Protection Office.