Privacy Policy

Privacy Policy

Privacy Policy of Simply-cash.com

This Privacy Policy defines the rules for collecting, processing, and protecting the personal data of users of the Simply-cash.com website operating at https://simply-cash.com (hereinafter referred to as the "Website"), in accordance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter referred to as "GDPR")[cite: 3].

1. Data Controller

The Controller of your personal data is:

D-Link Dawid Zdeb
ul. Krakowska 56
24-220 Niedrzwica Kościelna, Lublin Voivodeship, Poland
NIP (TAX ID): 946-230-47-85

You can contact the Data Controller via:

  • E-mail address: dawid.zdeb@simply-cash.com
  • Phone number: +48 607869441

2. Purpose and Legal Basis for Processing Personal Data

Your personal data is processed for the following purposes and under the following legal bases:

  • Provision of services offered on the Website:
    • Contact Form: We process your data (e-mail address, first/last name/nickname) in order to respond to your inquiry. The legal basis is Article 6(1)(b) of the GDPR, i.e., necessity of processing to take steps at the request of the data subject prior to entering into a contract or for the performance of a contract.
    • Facebook Login: If you use the option to log in via Facebook, we process the data made available to us by Facebook to enable you to use the Website. The legal basis is Article 6(1)(b) of the GDPR, i.e., necessity of processing for the performance of a contract.
  • Statistics and Traffic Analysis on the Website: We collect data anonymously (IP address, browser type, screen resolution, approximate location, pages visited, time spent on a subpage, operating system type, previous subpage address, referring site address, browser language, internet connection speed, internet service provider) using analytical tools such as Clicky and Google Analytics. The purpose is to optimize the functioning of the Website, adapt it to users' needs, and improve the quality of provided services. The legal basis is Article 6(1)(f) of the GDPR, i.e., the legitimate interest of the Controller. This data is collected in an anonymized manner, meaning it is not combined with your personal data and does not allow your identification.
  • Online Payment Processing (ad refresh service): If you use the paid advertisement refresh service, your data necessary to complete the transaction (e.g., transaction ID, amount) is passed to the payment service provider Autopay S.A. The legal basis is Article 6(1)(b) of the GDPR, i.e., necessity of processing for the performance of a contract.
  • Fulfillment of Legal Obligations Imposed on the Controller: Data may be processed to fulfill obligations resulting from legal regulations, e.g., tax or accounting regulations related to the provision of paid services. The legal basis is Article 6(1)(c) of the GDPR.

3. Types of Collected Data

We collect the following categories of data on the Website:

  • Data provided voluntarily by you:
    • E-mail address
    • Username / Login
    • First Name / Last Name / Nickname
    • Data necessary for payments / tax settlements (when using the paid ad refresh service)
  • Data collected automatically (anonymously):
    • IP address
    • Browser type
    • Screen resolution
    • Approximate location
    • Pages opened on the Website
    • Time spent on the relevant page
    • Operating system type
    • Address of the previous subpage
    • Referring website address
    • Browser language
    • Internet connection speed
    • Internet service provider

4. Data Recipients

Your personal data may be transferred to the following categories of recipients:

  • Online Payment Operators: Autopay S.A. based in Sopot (ul. Powstańców Warszawy 6, 81-718 Sopot, KRS: 0000321680, NIP: 5851351185), an entity providing electronic and payment card processing services.
  • Analytics Service Providers: Clicky (Roxy Software, Inc.) and Google Analytics (Google Ireland Limited / Google LLC).
  • Public Authorities: In cases where the obligation to provide data results from mandatory provisions of law.

5. Data Retention Period

Your personal data will be stored for the period necessary to achieve the purposes for which it was collected, as well as:

  • Contact Form Data: For the period necessary to answer the inquiry and for any potential further contact, no longer than 3 years from the last contact.
  • User Account Data (if applicable): For the duration of maintaining an account on the Website, and after its deletion – for up to 3 years for archiving purposes and defense against potential claims.
  • Data Collected Automatically (anonymously): For a period no longer than 12 months, or until an effective objection is submitted.
  • Payment and Settlement Data: For the period required by tax and accounting laws, usually 5 years from the end of the calendar year in which the transaction took place.

6. Your Rights

In connection with the processing of your personal data, you have the following rights under the GDPR:

  • Right of Access (Art. 15 GDPR): You have the right to obtain confirmation from the Controller as to whether or not personal data concerning you is being processed, and where that is the case, access to the data and information regarding its processing.
  • Right to Rectification (Art. 16 GDPR): You have the right to request the Controller to immediately rectify inaccurate personal data concerning you, as well as to complete incomplete data.
  • Right to Erasure (“Right to be Forgotten”) (Art. 17 GDPR): You have the right to request the Controller to immediately erase your personal data if one of the grounds specified in the GDPR applies (e.g., the data is no longer necessary for the purposes for which it was collected, or consent has been withdrawn and there is no other legal basis).
  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the Controller to restrict processing in cases specified in the GDPR (e.g., when you contest the accuracy of the data, or processing is unlawful).
  • Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data concerning you, which you provided to the Controller, in a structured, commonly used, and machine-readable format, and you have the right to transmit that data to another controller, provided processing is based on consent or contract and carried out by automated means.
  • Right to Object (Art. 21 GDPR): You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) GDPR (legitimate interest of the Controller), including profiling. In such a case, the Controller will no longer process the personal data unless demonstrating compelling legitimate grounds for processing that override your interests, rights, and freedoms, or for the establishment, exercise, or defense of legal claims.
  • Right to Lodge a Complaint with a Supervisory Authority (Art. 77 GDPR): You have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland) if you believe that the processing of your personal data violates the GDPR provisions.

To exercise the above rights, please contact the Data Controller via e-mail at: dawid.zdeb@simply-cash.com or by phone.

7. Requirement to Provide Data

Providing personal data is voluntary; however, it is necessary to use certain features of the Website (e.g., contact form, Facebook login, paying for the ad refresh service). The consequence of not providing data will be the inability to use these features.

8. Automated Decision-Making and Profiling

Your data will not be used for automated decision-making, including profiling, in a way that produces legal effects concerning you or similarly significantly affects you. Automatically collected data (e.g., via Clicky or Google Analytics) serves only for statistical analysis and Website optimization, not for individual user profiling.

9. Data Protection Officer

The Controller informs that they have not appointed a Data Protection Officer (DPO). In matters concerning the processing of personal data and exercising your rights related to data processing, you can contact the Controller directly.

10. Changes to the Privacy Policy

The Controller reserves the right to make changes to this Privacy Policy at any time. Any changes will be published on this page. It is recommended to regularly review this Privacy Policy to stay informed of its current version.

Date of last update: 07.09.2026