Draft pending review by a lawyer. Version of 04.11.2026.

Personal Data Processing Agreement

This translation is provided for convenience. The Polish version is the legally binding one.

This agreement is concluded by acceptance during the registration of a company account between the User (Controller) and Fire Protection Solutions Jakub Baran (Processor) and constitutes the agreement referred to in Article 28(3) of the GDPR.

1. Subject matter and purpose

The Controller entrusts the processing of personal data that may be contained in Model files and Results (e.g. names of buildings, addresses, names of designers in descriptions) solely for the purpose of performing Jobs in the Service.

2. Nature and type of data

Ordinary data, incidentally contained in technical files; categories of data subjects: employees and contractors of the Controller, owners of buildings. The Processor does not analyse the content of the files for personal data.

3. Obligations of the Processor

1. Processes data only on the documented instruction of the Controller, which is the starting of a Job.
2. Ensures that persons with access to the data have committed themselves to confidentiality.
3. Applies the security measures described in the Privacy Policy (encryption in transit, no remote access to servers, deletion of machines after the Job, administrator access log, backups).
4. Uses the sub-processors listed in the Privacy Policy (section 3); gives 14 days' notice by e-mail of any intention to add a new one, and the Controller may object.
5. Assists the Controller in fulfilling the rights of data subjects and the obligations under Articles 32–36 of the GDPR.
6. Notifies the Controller of a personal data breach without undue delay and no later than 48 hours after becoming aware of it.
7. After the end of the provision of services deletes the data: Results 30 days after the Job is completed, other data when the Account is deleted, unless the law requires their retention.
8. Makes available to the Controller the information necessary to demonstrate compliance with the obligations under Article 28 of the GDPR and allows audits at an agreed time, no more than once a year, at the Controller's expense.

4. Place of processing

The European Union. Transfers outside the EEA only in the cases indicated in the Privacy Policy, on the basis of standard contractual clauses.

5. Duration

The agreement remains in force for as long as the Account exists. It terminates when the Account is deleted.

Service provider: Fire Protection Solutions Jakub Baran, ul. Grzybowa 7A/2, 05-825 Grodzisk Mazowiecki, NIP 6182094888, REGON 528892780, e-mail biuro@fp-solutions.pl, tel. +48 790 782 993.