Privacy policy — BIDWAY.nl
Version: 13 October 2026.
1. Controller
BIDWAY spółka z ograniczoną odpowiedzialnością, ul. Świeradowska 47, 02-662 Warszawa, Poland, KRS 0001264414, NIP 5214178927. Contact: kontakt@bidway.eu.
2. Data and purposes
We process account and contact data, company profiles, search criteria, uploaded documents, analyses, drafts and subscription records. Technical logs may contain IP addresses and access times. Processing supports service delivery, enquiries, security and legal obligations. Upload only necessary personal data and documents you are entitled to process.
3. Legal bases
Depending on the purpose, processing relies on performance of a contract or pre-contractual steps (GDPR Article 6(1)(b)), legal obligations (c), or legitimate interests in security, support and claims (f). Where consent is required, it is requested separately and may be withdrawn. The GDPR and applicable implementing legislation apply, including the Dutch GDPR Implementation Act where applicable.
4. Documents and AI
Relevant document content and necessary data are sent to the OpenAI API for analysis and drafting. Response storage is disabled in the request; this does not guarantee absence of provider technical or security retention. Documents are treated as sources, not instructions. The platform does not independently make decisions producing legal effects about individuals. Users review results. Literal quote verification does not guarantee every interpretation is correct.
5. Recipients and transfers
This installation uses Hetzner Online GmbH for hosting, database and files in Nuremberg, Germany; nazwa.pl for the domain and DNS; Resend for transactional email; OpenAI for analysis and drafting; and Stripe for card payments. The contact address remains kontakt@bidway.eu. Resend receives recipient addresses, message contents and necessary metadata. BIDWAY does not store full card numbers or CVC codes.
Only necessary profile data and source content are sent to OpenAI for a requested operation. Requests use store=false; this does not mean zero provider retention. OpenAI, Stripe and Resend may process data outside the EEA. Such transfers require an applicable GDPR Chapter V basis, such as an applicable adequacy decision or standard contractual clauses and additional safeguards where required. Contact kontakt@bidway.eu for recipient and safeguard information. See the privacy information of Hetzner, Resend and Stripe. TenderNed, TED and other external sources have their own policies.
6. Retention and security
Account data and results remain while the account exists. Subscription expiry does not itself delete an account. Request deletion at kontakt@bidway.eu; necessary legal and claims records are excepted. Download needed results first. Files are not automatically deleted immediately after analysis. Daily server backups normally remain for up to eight days. Security logs are retained according to their purpose and incident investigation needs. Access is restricted by account and role.
7. Your rights
Subject to GDPR conditions, you may request access, rectification, erasure, restriction or portability and object to processing. Contact kontakt@bidway.eu. Identity verification may be necessary. Complaints can be submitted to the competent supervisory authority, including the Dutch Autoriteit Persoonsgegevens or Poland’s UODO, depending on the circumstances.
8. Cookies
Necessary WordPress login and security cookies are used. Login normally lasts 2 days, or 14 days with Remember me, unless configuration changes this. The bw_cookie_notice cookie stores notice dismissal for 180 days without an account identifier. No advertising pixels or analytics trackers are included. Adding them requires updated information and prior consent where legally required. Cookies can be removed in your browser.
WordPress admin preferences may remain for up to one year. Dismissing the cookie notice is not marketing consent.