effective from 15 October 2026
Privacy Policy
This policy explains how we process the personal data of people who sign up their community through the form on community-thebarsapp.com. It covers this site only. The THE BARS app has its own privacy policy.
Who we are
The controller of your personal data is AT THE BARS P.S.A., with its registered office at ul. Ignacego Mościckiego 1, 24-100 Puławy, Poland, entered in the Polish National Court Register (KRS) under number 0001241754, tax ID (NIP) 7162852406.
For anything about your personal data, write to us at hello@thebarsapp.com.
We have not appointed a Data Protection Officer, as we are not required to.
What data we collect
- your first name, email address, city and community name, as entered in the form,
- your Instagram handle, if you choose to give it,
- the language of the page you signed up from, the date of your sign-up and a record of your consent,
- your IP address and technical browser data, logged automatically by the server and used to protect the form from abuse.
Giving us your data is voluntary, but without your first name, email, city and community name we cannot accept your sign-up or send your invite.
Why we use it and on what legal basis
- To accept your sign-up, send your invite to THE BARS and news about the app opening in your city, and get in touch about your community: based on your consent (Art. 6(1)(a) GDPR). Your consent covers receiving these messages by email, in line with Art. 398 of the Polish Electronic Communications Law.
- To protect the form from spam and abuse and keep the site secure: based on our legitimate interest (Art. 6(1)(f) GDPR).
- To show that we obtained your consent and to establish, exercise or defend legal claims: based on our legitimate interest (Art. 6(1)(f) GDPR).
How long we keep it
We keep your sign-up data until you withdraw your consent, and no longer than 12 months after THE BARS app opens in your city. If you create an account in the app, the app's privacy policy applies from then on.
After you withdraw your consent or that period ends, we delete your data. We may keep a record of your consent and its withdrawal (your email address and the dates) until any possible claims are time-barred.
To limit the number of sign-ups from one IP address we use a hash of the IP address, which we delete after 10 minutes. Server logs are kept by our hosting provider under its own rules.
Who we share it with
We never sell your data. Only companies that provide services to us and process data on our behalf, under data processing agreements, have access to it:
- VH.pl: hosting for the site and the form script,
- Supabase Inc.: the database where sign-ups are stored (servers in the European Union, Stockholm region),
- the email provider we use to send invites,
- Google Ireland Limited: fonts (Google Fonts). When the page loads, your browser downloads fonts from Google's servers, which receive your IP address. The legal basis is our legitimate interest in a consistent look of the site (Art. 6(1)(f) GDPR).
Transfers outside the European Economic Area
Supabase Inc. and Google have companies in the United States and may access data from outside the European Economic Area, for example for technical support. Such transfers rely on a European Commission adequacy decision (the EU-US Data Privacy Framework) or on standard contractual clauses approved by the European Commission (Art. 45 and 46 GDPR).
Your rights
You have the right to:
- access your data and get a copy of it (Art. 15 GDPR),
- have your data corrected (Art. 16 GDPR),
- have your data deleted (Art. 17 GDPR),
- restrict how we process it (Art. 18 GDPR),
- data portability (Art. 20 GDPR),
- object to processing based on our legitimate interest (Art. 21 GDPR),
- withdraw your consent at any time. This does not affect the lawfulness of processing carried out before you withdrew it.
To use any of these rights, write to hello@thebarsapp.com. We will reply within one month.
You can also complain to the Polish data protection authority, the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, uodo.gov.pl), or to the supervisory authority in the country where you live or work.
Cookies
This site does not use cookies or analytics tools and does not track your activity.
Other information
We do not make automated decisions about you and do not profile people who sign up through the form.
This site is not intended for people under 16.
We may update this policy. The date of the latest change is shown at the top of this page.