PRIVACY POLICY

Last Updated: September 2025

Quick Summary - What This Means for You

We help businesses find suppliers and vice versa. To do this, we collect personal information about business representatives (like names and contact details) and business requirements. We share relevant information between potential business partners to facilitate connections. You have full control over your data and can access, correct, or delete it at any time. We comply with privacy laws, including GDPR and PIPL, and we never sell your personal information.

You may refer to the Terms of use for specific details of the services.

Before you start using our services, please be sure to carefully read and understand the policy as follows, especially the terms marked in bold/bold underlined, and ensure that you fully understand and agree before starting to use them.

Your agreement to the Dock2Gdansk platform Privacy Policy(Policy) indicates that you have understood the services we provide, as well as the necessary user information required for the operation of the corresponding service functions, and you have given the corresponding collection and use authorization.

Given that our services are intended to help you or your company find business cooperation opportunities, we will share the information you provide with potential partners. Prior to sharing such information, we will obtain your separate consent to confirm your approval. However, it does not mean that you have separately agreed to enable extended business functions and process non-essential personal information.

We will also separately seek your consent for the activation of relevant extended business functions, processing of non-essential personal information, and processing of sensitive personal information based on your actual usage.

Key Points:

We collect personal data of business contacts and company information to provide matching services
We share relevant business information between potential partners to facilitate connections
You can access, modify, or delete your data by contacting privacy@Dock2gdansk.com
We respond to privacy requests within 30 days
We comply with applicable privacy laws in your jurisdiction

Who We Are and How to Reach Us

Zarząd Morskiego Portu Gdańsk Spółka Akcyjna operates a B2B supplier matching platform ("Dock2Gdansk") connecting businesses with potential suppliers globally. We act as the data controller for personal information processed through our services.

Contact Us About Privacy:

Email: privacy@dock2gdansk.com
Address: Gdansk, Poland
Data Protection Officer: dpo@Dock2gdansk.com

For users in China, our local representative can be reached at china-privacy@Dock2gdansk.com. EU users can also contact their local data protection authority with concerns.

Scope of Application

This Policy applies to all services provided by this platform to users in the European Union and the People's Republic of China via the website and new forms arising from technological developments. We and our affiliates have separate privacy policies or similar legal documents for the services they provide to you, and those services are governed by those privacy policies or similar legal documents.

This Policy does not apply to services provided to you by other third parties. Other services are governed by their separately disclosed personal information collection and use rules. For example, if a third party offers you services based on Dock2Gdansk, please note that this Policy doesn't cover the information you share directly with them.

What Personal Information We Collect

When you use our services, we need to collect and use your personal information to fulfill the basic business functions required to provide our services to you. You must authorize us to collect and use the necessary information. Additionally, with your separate consent, we may share your personal information with potential business partners to facilitate communication and potential collaboration between you and them. If you refuse to provide the required information, you will be unable to use our services normally.

When you submit a shipping inquiry to the platform, you will provide the following information: Company Name, Email Address, Phone Prefix, Phone Number, Cargo Type, "Inquiry Details" and "Where did you hear about us?"

The phone number and email address you provide will serve as the primary communication channels for subsequent follow-ups, clarification of inquiries, and direct contact between local suppliers and international customers.

Business Information and Requirements

We collect detailed information about your business, including company name, e-mail address, phone number, and registration details, business address and industry type, detailed descriptions of products or services needed or offered, technical specifications and quality requirements, budget ranges and delivery timelines, and information about previous business relationships where relevant.

Automatic Information Collection

Our platform automatically collects certain information including your IP address and general location, device and browser information, how you navigate through our platform, when you log in and how long you stay, and system performance data to ensure our platform works properly.

Why and How We Use Your Information

Primary Purpose: Matching Services

Our main purpose is to connect businesses with suitable partners. We analyze your requirements regarding our database of suppliers or buyers, present you with relevant matches based on your criteria, facilitate initial introductions between potential partners, and track whether matches lead to successful business relationships to improve our service.

When sharing your information with potential partners, we will seek your separate consent through our website (link).

Platform Operations

We use your information to create and maintain your account, provide customer support when you need help, ensure our platform remains secure and prevent fraud, send important updates about our services, and comply with legal requirements like tax reporting.

Service Improvement

We analyze how our platform is used to make our matching algorithms more accurate, develop new features that users find valuable, understand market trends to provide better insights, and ensure our platform remains user-friendly and efficient.

Legal Basis for Processing Your Information

For EU Users (GDPR): We process your personal information because it's necessary to provide our matching services (contract performance), we have legitimate business interests in improving our platform and preventing fraud, you've given us consent for marketing communications, or we need to comply with legal obligations.

For China Users (PIPL): We collect and use your personal information based on the following:

If the information you provide contains personal information of other users, before providing such personal information to Dock2Gdansk, you must ensure that you have obtained legal authorization.

B. If we use the information for purposes not specified in this Policy or use the information collected for a specific purpose for other purposes, we will obtain your consent in advance.

C. In accordance with laws and regulations, we may collect and use your personal information without obtaining your consent in the following circumstances:

I. It is necessary for the conclusion and performance of a contract in which an individual is a party;
II. It is necessary to perform legal duties or obligations;
III. In response to public health emergencies or in emergency situations where it is necessary to protect the life, health and property safety of natural persons;
IV. Process personal information that individuals have voluntarily disclosed or that has been lawfully disclosed by others within a reasonable scope in accordance with the provisions of the PIPL;
V. Other circumstances as prescribed by laws and administrative regulations.

For Users in Other Jurisdictions: We comply with applicable local privacy laws and will process your information fairly and lawfully according to the requirements in your location.

When and Why We Share Your Information

We do not share your personal information with any company, organization, or individual other than the service provider of the Dock2Gdansk platform, except in the following circumstances

Legal Requirements

We may share your personal information with third parties as required by laws and regulations, for the resolution of litigation disputes, or in response to requests made by administrative or judicial authorities in accordance with the law.

We may share information when required by law, court orders, or government requests, to protect our rights and property or the safety of our users, to prevent fraud or other illegal activities, or to enforce our terms of service. We will notify you of such sharing where legally permitted.

With Explicit Consent

Sharing with affiliated companies to facilitate our joint provision of services to you based on associated accounts, we will provide services to you based on the Dock2Gdansk account, identify abnormal accounts, and protect the personal and property safety of Dock2Gdansk affiliated companies, other users, or the public from being infringed upon. Your personal information may be shared with our affiliated companies and/or the service providers designated by them. We will only share necessary personal information and be bound by the purposes stated in this policy. If we share your sensitive personal information or if an affiliated company changes the purpose for which we use and process your personal information, we will seek your authorization and consent again.

Sharing your personal information with other parties only after obtaining your separate consent: The core of our service involves sharing relevant information between potential business partners. When we identify a good match, we share business contact information, relevant product or service specifications, general company information, and location details necessary for initial business discussions. We only share what's necessary for the potential business relationship.

We may provide aggregated or anonymous data to third parties; however, in such cases, we share non-personal information that cannot be used to identify you personally.

We share your professional contact details and profile information with other businesses and suppliers on our platform. This is necessary to allow them to contact you, review your business profile, and initiate potential business relationships. This is the primary purpose of our service.

By creating your profile and marking it as public, you provide us with your explicit consent to share your professional details (name, company, email, phone number) with other users of the platform for business matchmaking purposes.

Please note that the information you voluntarily share or even publicly disclose when using our services may involve your or others' personal information, or even sensitive personal information. Please consider and make a decision more carefully.

We may share your data with third-party vendors and service providers who help us operate our platform. This includes providers of hosting, analytics, IT support, and payment processing. These third parties are contractually obligated to process your data only on our behalf and to ensure its confidentiality and security.

We will ask for your explicit consent to share your data with these third parties when you first register on our platform.

You have the right to withdraw your consent at any time. You can do this sending a request to us at privacy@Dock2gdansk.com to have your account and data deleted.

Service Providers Who Help Us Operate

We work with trusted companies that help us provide our services, including cloud hosting providers like AWS for data storage, customer support platforms for help desk services, analytics tools for understanding platform usage, and security services for fraud prevention and platform protection. These providers can only use your information for the specific services they provide to us.

We entrust your information to be processed for the legitimate, proper, necessary, specific, and clear purposes stated in this Policy. We authorize our partners to have access to the information necessary for them to perform their duties, and we require them, through agreements, not to use this information for any other purposes beyond the scope of the entrustment. If you authorize a partner to use your information for purposes not entrusted by us, they will obtain your separate consent.

Transfer

If we need to transfer your personal information due to reasons such as a merger, division, dissolution, or being declared bankrupt, we will inform you of the name or surname and contact details of the recipient. The recipient will continue to fulfill this policy and other legal obligations. If the recipient changes the original processing purpose or method, they will obtain your consent again.

Public Disclosure

Dock2Gdansk platform attaches great importance to protecting your personal information. We do not disclose it to irrelevant third parties, nor will we publicly disclose your personal information, except in the following circumstances

Based on your active choice and other separate consents, we may publicly disclose your personal information.

In cases where it is necessary to provide your personal information in accordance with the requirements of laws and regulations, mandatory administrative law enforcement, or judicial requirements, we may publicly disclose your personal information in the required type and manner of disclosure.

If we determine that you have violated laws and regulations or seriously breached the relevant agreements and rules of Dock2Gdansk platform, or to protect the personal and property safety of Dock2Gdansk platform users or the public from being infringed upon, we may disclose your personal information, including the relevant violations and the measures that Dock2Gdansk platform has taken against you.

International Data Transfers

How We Protect Your Data Across Borders

Our global platform may require transferring your information across international borders. We ensure these transfers are protected through European Commission-approved Standard Contractual Clauses for EU data, adequacy decisions where available, appropriate safeguards and contracts with all recipients, and compliance with local requirements, including PIPL for China-based data.

Special Protections for Sensitive Jurisdictions

For data from the EU, we ensure all recipients provide adequate protection equivalent to GDPR standards. For data from China, we conduct impact assessments for cross-border transfers and comply with PIPL requirements, including your separate consent and government approvals where necessary.

How Long We Keep Your Information

We keep your information only as long as necessary for our services and legal requirements. Active account information is maintained while your account is open, plus a reasonable time for service provision. Business requests and matching data are typically kept for 5 years to support ongoing business relationships and ensure legal compliance. Communication records are maintained for a period of 2 years for customer service purposes. Technical logs and analytics data are kept for 12 months for security and improvement purposes.

You can request deletion of your information at any time, though some information may need to be retained for legal compliance or legitimate business purposes like contract fulfillment.

Your Privacy Rights and How to Use Them

Rights Available to All Users

Regardless of your location, you can access the personal information we hold about you, request corrections to inaccurate information, ask us to delete your information in appropriate circumstances, object to how we use your information, and request we stop sending marketing communications.

Additional Rights for EU Users (GDPR)

EU users also have the right to restrict processing in certain situations, receive their data in a portable format, object to automated decision-making, and lodge complaints with their local data protection authority.

Additional Rights for China Users (PIPL)

China users have the right to know how their information is processed, delete personal information subject to legal exceptions, withdraw consent where applicable, and file complaints with Chinese regulatory authorities.

How to Exercise Your Rights

Email us at privacy@dock2gdansk.com with your request. We'll respond within 30 days (or sooner as required by local law). Please provide sufficient information to verify your identity and clearly specify what you're requesting. There's no charge for most requests, though we may charge a reasonable fee for excessive or repetitive requests.

Keeping Your Information Secure

We protect your information through encryption of data both when stored and transmitted, regular security testing and vulnerability assessments, strict access controls so only authorized personnel can access your data, employee training on data protection and security, and incident response plans to address any security issues quickly.

If we experience a data breach that could affect you, we'll notify you and relevant authorities as required by law, typically within 72 hours of discovery. We extensively use AWS infrastructure, and are notified of any data breaches by email.

Updates to This Policy

To provide you with a better product and service experience, we are constantly striving to improve our products, services, and technologies. When there are new services or changes to business processes, we may update our privacy policy to inform you of the specific changes. However, without your explicit consent, we will not restrict the rights you enjoy under this policy.

For major changes, we will also provide more prominent notifications (including through public announcements on Dock2Gdansk platform or by offering you pop-up prompts).

The major changes referred to in this policy include, but are not limited to:

The business model of the service has undergone significant changes. Such as the purpose of processing personal information, the types of personal information processed, and the way personal information is used;
Changes in the privacy policy subject due to business adjustments, transactions or mergers and acquisitions, and the new subject recipient changes the original processing purpose and processing method;
The main objects of personal information sharing or public disclosure have changed;
There are significant changes in users' rights to personal information and the ways to exercise them;
When the contact information of the person in charge of personal information protection and the complaint channels change;
When the personal information protection impact assessment report indicates that the product has a significant impact on an individual's rights and interests.

We will also archive previous versions of this policy on a dedicated page on Dock2Gdansk platform for your reference.

Children's Privacy

Our platform is exclusively for business use and is not intended for anyone under 18 years of age. We don't knowingly collect information from minors. If we discover we've collected such information, we'll delete it immediately. Meanwhile, if a minor provides us with personal information without the consent of his or her parents or guardians, the parents or guardians should contact dpo@Dock2gdansk.com to delete such personal information

Specific Jurisdictional Information

We comply with applicable privacy laws in all jurisdictions where we operate. If you're in a location not specifically mentioned, contact us at privacy@dock2gdansk.com for information about your local privacy rights.

Questions or Concerns

For any privacy questions or to exercise your rights, contact privacy@dock2gdansk.com. We're committed to addressing your concerns promptly and transparently.

Data Protection Officer: dpo@Dock2gdansk.com
China Representative: china-privacy@Dock2gdansk.com
General Inquiries: info@Dock2gdansk.com

If you're not satisfied with our response, you can contact your local data protection authority or privacy regulator.

I agree to the Terms of Use and Privacy Policy.
I explicitly consent to the sharing of my professional profile and contact information with other users of the platform for business matchmaking.
I explicitly consent to the sharing of my data with third-party service providers (such as hosting and analytics companies) as described in the Privacy Policy.