Legal

Privacy Policy

Last updated: 3 October 2026

1. Controller

The controller of personal data processed through 1OF1M is:

TIGASET sp. z o.o.
ul. Zawodzie 20
80-726 Gdańsk
Poland

KRS: 0001245983
NIP: 5833570770
REGON: 544954570

Email: info@tigaset.com
Telephone: +48 570 550 284

2. Data we process

Depending on how the service is used, we may process:

• name;
• email address;
• selected certificate number;
• selected country and certificate language;
• payment status and payment-reference information;
• payer/card country supplied by the payment provider where available;
• certificate issue information;
• public verification code;
• cryptographically protected private owner-access information;
• timestamps and versions of legal acknowledgements;
• technical and security information;
• a cryptographic hash derived from technical information such as IP address where used for security or reservation-abuse prevention.

TIGASET does not receive or store the customer's full payment-card number through the 1OF1M application.

3. Why we process personal data

We process personal data where necessary:

To perform the contract

This includes:

• creating the order;
• checking payment status;
• allocating the number;
• generating the certificate;
• sending transactional confirmation;
• providing private owner access;
• providing public certificate verification.

Legal basis: Article 6(1)(b) GDPR.

To comply with legal obligations

This may include:

• accounting;
• taxation;
• consumer-law obligations;
• regulatory obligations;
• legally required records.

Legal basis: Article 6(1)(c) GDPR.

To protect the service

This may include:

• preventing reservation abuse;
• preventing duplicate payment processing;
• protecting private certificate access;
• investigating security incidents;
• preventing fraud or unauthorized access.

Legal basis: Article 6(1)(f) GDPR, based on TIGASET's legitimate interest in protecting the service, its customers and transactions.

4. Payment processing

Payments are processed through Revolut Hosted Checkout.

Payment service providers process certain personal and payment information under their own legal obligations and privacy terms.

1OF1M receives only the information necessary to reconcile and confirm the transaction and operate the service.

TIGASET does not intentionally store full payment-card data.

5. Service providers and recipients

Personal data may be processed by service providers necessary to operate 1OF1M, including:

• hosting and database infrastructure providers;
• payment service providers;
• transactional email providers;
• technical, security and monitoring providers;
• accounting and professional advisers where necessary;
• public authorities where disclosure is legally required.

Service providers receive only the data reasonably necessary for their function and are subject to the applicable contractual and legal safeguards.

6. International transfers

Where a service provider processes personal data outside the European Economic Area, TIGASET uses a lawful transfer mechanism and appropriate safeguards where required by applicable data-protection law.

7. Retention

Unpaid or expired order records that are no longer required are intended to be automatically removed after approximately 30 days.

Paid transaction, contractual, accounting and tax records are retained for the periods required by applicable law and for as long as reasonably necessary to establish, exercise or defend legal claims.

Security-related information is retained only for as long as reasonably necessary for security and fraud-prevention purposes.

8. Public certificate information

Public certificate verification exposes only:

• certificate number;
• confirmation of authenticity;
• issue date;
• display name only if the customer expressly elected to make that name public.

It does not expose:

• customer email;
• payer/card country;
• payment identifiers;
• internal database identifiers;
• private owner credential;
• private owner link;
• IP information.

9. Your rights

Subject to the conditions set out in applicable law, you may have the right to:

• access your personal data;
• correct inaccurate personal data;
• request erasure;
• request restriction of processing;
• receive data in a portable form where applicable;
• object to processing based on legitimate interests;
• withdraw consent where processing is based on consent;
• lodge a complaint with the competent data-protection supervisory authority.

In Poland, the supervisory authority is the:

**President of the Personal Data Protection Office
(Prezes Urzędu Ochrony Danych Osobowych).**

Requests may be sent to:

info@tigaset.com

10. Cookies, local storage and analytics

1OF1M uses technical storage that is strictly necessary to operate functions such as:

• checkout;
• reservations;
• security;
• language preferences;
• remembering your cookie choice;
• session continuity.

Optional marketing tracking (Meta)

With your consent only, 1OF1M uses the Meta Pixel and the Meta Conversions API provided by Meta Platforms Ireland Ltd. for advertising measurement and attribution. Marketing tracking is off by default. The Meta Pixel is not loaded and no Meta marketing cookies (such as _fbp and _fbc) are set until you select "Accept marketing". If you choose Necessary only, Meta Pixel is not loaded and we do not send marketing measurement events, including Purchase events, to Meta. Refusing does not affect use of the site, checkout or payment.

If you consent, the Meta Pixel records page views and the start of a checkout (including price and currency). When a live order is confirmed as paid, our server reports the purchase (amount, currency, time and an order-derived event identifier) to Meta through the Conversions API, together with: your email address and country in hashed (SHA-256) form, your IP address, browser user agent and the Meta cookie identifiers (_fbp, _fbc). We never share your certificate links, verification codes or payment-card data with Meta.

Legal basis: your consent, Article 6(1)(a) GDPR. Meta may process data outside the EEA under its own safeguards and privacy terms.

You can change or withdraw your choice at any time via Cookie settings in the website footer. Withdrawal does not affect the lawfulness of processing before withdrawal.

11. Automated decision-making

1OF1M does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significant effects on the customer.

Automated technical processes such as number availability checks, reservation expiry and payment confirmation are used to operate the service and do not constitute profiling for advertising purposes.

12. Contact

Privacy questions and requests may be sent to:

info@tigaset.com

or:

+48 570 550 284