SPOTMEUP PRIVACY POLICY
This Privacy Policy contains detailed information regarding the processing of personal data by SpotMeUp sp. z o.o. based in Warsaw, ul. Stefana Okrzei 1A, apt. X, 03-715 Warsaw, registered in the entrepreneurs' register KRS under the number 0001190579, NIP: 1133177347, REGON: 542534058 (hereinafter referred to as: "Operator," "Administrator," or "we") to the extent that such data is processed by us as their administrator within the meaning of Article 4 point 7 of the GDPR (i.e., the Regulation of the European Parliament and of the Council (EU) 2016/679 of April 27, 2016, on the protection of natural persons in relation to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation).
The Operator informs that it has appointed a Data Protection Officer, who can be contacted via email at: [email protected] or in writing at the address of SpotMeUp indicated above.
If you have any questions regarding the processing of your personal data by us, please contact us at [email protected] or in writing at our address indicated above.
If you are a user of the SpotMeUp service or application or our contractor, information about the processing of your personal data can be found in the SpotMeUp Privacy Policy.
Click below to view the information clauses containing detailed information regarding the purposes, scope of data, and the period of processing your data by SpotMeUp, as well as your rights in this regard:
- Information clause related to GDPR requests
- Information clause for Clients (users of the SpotMeUp Application).
1.General information about data processing in the SpotMeUp application
In order to increase the transparency of our communications directed to you below, we remind you that in accordance with the GDPR:
We would like to inform you that:
SpotMeUp places great importance on respecting your privacy.
As a Client, you are obliged to update your personal data, particularly that which is on your Profile, Account, or in the System.
If you decide to use the services of a Partner and book an appointment/service with the Partner via the Application, SpotMeUp will provide the Partner with your data to the extent necessary for them to perform the service you have chosen. The Partner will then process your data as a separate administrator in order to fulfil the contract they have entered into with you for the provision of the service you have selected and will be solely responsible for it.
You will also be able to separately grant the Partner consent to process your data for the purposes you have chosen.
Additional purposes for which the Partner may process your data will depend on the legal bases identified by the Partner that legitimise such processing of personal data (e.g., your consent, the legitimate interest of the Partner, the fulfilment of legal obligations by the Partner).
The Partner, in pursuing their own objectives (e.g., marketing), may also use tools provided to them by SpotMeUp, including - if you give your consent - sending you marketing messages, recommendations, or promotions.
Please remember that the administrator and the entity responsible for such processing of your data is the Partner, while SpotMeUp merely provides the necessary tools (e.g., a messaging system, managing the Partner's calendar).
When creating an Account, you can express voluntary consents regarding the processing of your personal data and electronic communication.
Given that the essence of SpotMeUp's operation is making Service Reservations, which involves the need to confirm the Reservation and the timing of the Service, after making a Reservation, you will receive via the System, email/push correspondence or SMS messages containing the aforementioned confirmations. These confirmations do not contain marketing or commercial content, only information regarding the Reservation.
2.Cookie Policy
1.General information about cookies
SpotMeUp uses cookie technology or similar in its Application and on its website. This means that when you use our platform (either through the website or the mobile application), various information is exchanged between your device and the SpotMeUp server, and information about you is collected regardless of whether you have an account with us as a logged-in user.
Cookies are understood as data files (small files) stored on users' end devices, which are used, among other things, to customize the display of the website to your preferences (e.g., remembering the language you selected for the site). When you enter our service and give your consent, if required (as explained below), our server saves cookies on your end device. On your next visit, the server will read the information stored on your device from the cookies and, for example, adjust the appearance of the site to the browser you are using. Functionality similar to cookies is mainly used to avoid saving any files on your end device (phone, tablet, computer), and instead - directly on a special server, with a specific identifier assigned to you for the duration of your visit to our service.
The tools used by SpotMeUp include cookies, as well as other similar technologies, such as pixels (these are software codes embedded in a given website that allow the entity managing the pixel to track users of those websites), SDKs (software that allows for the collection of technical data on how you use the application), local data files, mobile device identifiers (a marker of your mobile device that allows for your identification and the display of personalized ads; AdID for Android software and IDFA for iOS software), digital fingerprinting (which allows for the identification of the device used by the user and tracking it, known as a digital fingerprint), which are used, among other cases, when cookies may not be an appropriate tool (e.g., in mobile applications). Referring further collectively to these technologies, we will call them "cookies".
Some of the information we collect about you in this way may be considered personal data, which we discuss further in this Policy. In this case, the provisions of the information obligation clause apply to the processing of your personal data, the link to which you can find in the Privacy Policy above, particularly regarding your rights and the transfer of personal data outside the European Economic Area.
Remember that storing information (cookies) by SpotMeUp or accessing information (cookies) already stored on a telecommunications terminal device (your phone, tablet, laptop, etc.) requires your consent, unless the use of cookies is necessary for providing the service electronically (to display content from our service to you). You can always withdraw your expressed consent. You can withdraw your consent independently through our shortcut to the cookie banner, which appears when you enter our platform (the padlock symbol in a circle on a white background at the bottom left of the screen). Withdrawing consent for cookies is also possible by changing the settings of your browser, which you can read about below:Google Chrome
Detailed information on the options for modifying browser settings, blocking, and filtering cookies can be found at:
2.Purposes of using cookies by SpotMeUp
SpotMeUp uses cookies and the information contained within them for:
- customizing the appearance of the website to the user's preferences and the specifications of their device,
- ensuring security for users;
- improving the efficiency of the site, identifying possible modifications to provide a better experience for users;
- securing access and preventing breaches (including anti-spam measures, protection against web bots);
- conducting statistical and analytical activities;
- marketing purposes, including tailoring displayed content to the user's preferences and interests.
3.Scope of information collected by cookies
Through cookies, SpotMeUp collects information about how you use our platform. As mentioned above, some of the information we collect, particularly when combined with other data, may be personal data within the meaning of the GDPR, especially when you are a logged-in user of one of our platforms (SpotMeUp / SpotMeUp Biz). SpotMeUp collects the following information about you:
- technical data: user IP address, MAC address, device type/model, unique device identifier, browser and operating system type, device information (model, screen resolution, operating system), application version;
- session data: time and duration of the visit to the service, viewed tabs and clicked elements, time spent on specific subpages;
- preference data: language and location settings, saved choices (e.g., consent to cookies, content display methods);
- behavioral data: browsing and interaction history on the platform, information about previous visits (e.g., recently viewed services), information on what stage you are at in booking a service;
- authentication data (for account holders in SpotMeUp / SpotMeUp Biz): login session data (e.g., session tokens), information that allows you to remain logged in;
- other data: (e.g., the link from which you were redirected to our site, advertisements displayed to you on the platform);
- location data (e.g., based on IP address).
- When you are a logged-in user of the Application, we may combine the above-collected data with the data we process about you in connection with your account in the Application.
4.Types of cookies used
Cookies that may be placed on your end device when you use our platform can be categorized according to their features below:
5.Storage duration
In this regard, we distinguish between "persistent cookies," which are stored on the user's device for a specified period, even after the browser is closed, and "session cookies," which are temporary and exist only during the browser session and are deleted after it is closed.
6.Origin
Cookies may be placed on our platform directly by SpotMeUp - "first-party cookies" or by third parties - "third-party cookies".
7.Destiny
Essential cookies - these files are necessary to ensure the functioning of our platform, its optimisation, and to ensure the security of users. SpotMeUp does not require your consent to store and read them on your device. If you block their installation or delete them, using our platform will be difficult, and in some cases, impossible. The legal basis for processing your personal data collected through essential cookies is Article 6(1)(b) of the GDPR (necessity for the performance of a contract) and Article 6(1)(f) of the GDPR, whereby the legitimate interest pursued by SpotMeUp is to ensure the security of users and the proper functioning of our Service.
Functional cookies - these files facilitate your use of our platform, particularly by remembering your preferences. Deleting or blocking them should not prevent you from using our site, but it may reduce the comfort of using it. SpotMeUp must have your consent for their installation on your telecommunications terminal device. The legal basis for processing your personal data collected through functional cookies is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in improving your comfort while using our service.
Analytical cookies - these files do not affect your use of our platform. These cookies are used by SpotMeUp to collect information about user visits to our platform and other information that allows us to develop. For their installation on your telecommunications terminal device
SpotMeUp must have your consent. The legal basis for processing your personal data collected through analytical cookies is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in studying user preferences, planning service development, and testing new solutions.
Marketing cookies - allow us to collect information about how you use our platform and other information assigned by SpotMeUp, so that we can use this data to present you with advertisements that match your interests. For the installation of these cookies on your telecommunications terminal device, SpotMeUp must have your consent. The legal basis for processing your personal data collected through marketing cookies is Article 6(1)(f) of the GDPR, i.e., our legitimate interest in directing marketing communications to you, displaying advertisements, including personalized ones, to better tailor such communication to your preferences. In cases where the marketing information displayed to you concerns products or services from SpotMeUp partners, these entities do not participate in the processing of your personal data.
8. Duration of cookie storage
The storage period for cookies is specified in our banner, which appears to you upon your first visit to our service, and you can also always find it by clicking on the padlock symbol in a circle on a white background at the bottom left of the screen. The personal data collected through cookies is stored for as long as the grounds for their processing remain valid and for the period during which they are necessary to achieve the purposes specified by SpotMeUp in this Privacy Policy. Detailed information regarding the periods of personal data processing can be found in the information obligation clause, which you will find at the beginning of this Privacy Policy.
9.Third parties
SpotMeUp may use the services of external entities and the tools they offer, which support us in ensuring your safe use of our platform, as well as providing analytical or advertising activities.
For marketing purposes, in order to present advertisements through websites owned by the tool provider or to measure the effectiveness of advertisements, SpotMeUp uses, among others, the following tools:
- Google Ads, Branch, Appsflyer: through tracking technologies in the form of cookies and SDKs;
- Facebook, Microsoft Ad, TikTok, Pinterest, Snapchat, Reddit: through tracking technologies in the form of cookies or tracking pixels.
10.Right to lodge a complaint
In connection with the processing of your personal data by us through the use of cookies, you have the right to lodge a complaint with the supervisory authority - the President of the Personal Data Protection Office.
In connection with SpotMeUp's use of cookies, you have the right to lodge a complaint with the supervisory authority, which is the President of the Office of Electronic Communications.
Version dated 8 October 2025.
