otrspackages

Privacy Policy

Last updated: August 9, 2026

  1. Who is responsible for your data

    The controller of personal data collected through otrspackages.com is Sidnet Solutions sp. z o.o., ul. Gorczewska 156 lok. 32, 01-460 Warszawa, Poland (KRS 0000569248, NIP 5223034777, share capital PLN 100,000), trading under the brand name Centuran Consulting.

    For any question about this policy or about your personal data, write to privacy@otrspackages.com.

  2. What we collect, why, and on what basis

    Newsletter subscribers.
    If you sign up for our mailing list, we collect your email address and the date and time of your confirmation. We use it to send occasional updates about the marketplace and new packages. Legal basis: your consent (Article 6(1)(a) GDPR). We use double opt-in, so you receive a confirmation email before any marketing is sent. You can withdraw consent at any time using the unsubscribe link in every message, or by writing to privacy@otrspackages.com.
    Customers.
    When you buy a package, we receive from our payment provider the information needed to issue and manage your license: your name, business name, email address, country, and the details of your order. We use it to deliver your license, provide updates and support, send renewal reminders, and keep the accounting records we are required to keep. Legal basis: performance of a contract (Article 6(1)(b) GDPR) and our legal obligations (Article 6(1)(c) GDPR).
    Downloads and license checks.
    When a package is downloaded or a license key is validated, we log the license identifier, the time, and the IP address of the request. We use this to make the licensing system work, to support you, and to detect misuse. Legal basis: performance of a contract and our legitimate interest in protecting our products (Article 6(1)(f) GDPR).
    Support and other correspondence.
    If you write to us, we keep the message and our reply so that we can help you and refer back to the history. Legal basis: performance of a contract, or our legitimate interest in responding to inquiries.
    Server logs.
    Our servers record standard technical information about requests, including IP address, time, requested address, and user agent. We use it to operate the service securely and diagnose faults. Legal basis: our legitimate interest in the security and reliability of the service.

  3. Cookies and analytics

    This site does not set cookies. We do not use cookies for tracking, advertising, or profiling, and we do not display a cookie banner because there is nothing to consent to.

    We currently run no analytics on this site at all: no visitor statistics, no tracking, and no profiling. If we introduce analytics later, it will be a cookieless service, and we will update this policy before it starts collecting anything.

  4. Who we share data with

    We do not sell personal data, and we do not share it for anyone else's marketing. We use the following service providers, who process data on our behalf or, where indicated, as independent controllers:

    Paddle
    our payment provider and merchant of record. Paddle handles checkout, payment, tax, invoicing, and refunds, and acts as an independent controller for that processing. Its own privacy policy applies to it.
    MailerLite
    mailing list delivery (established in the European Union).
    DigitalOcean
    hosting of the website and services.

    We may also disclose data where we are legally required to do so, or where necessary to establish, exercise, or defend legal claims.

  5. Transfers outside the European Economic Area

    Some of our providers may process data outside the EEA. Where that happens, the transfer is covered by an adequacy decision of the European Commission or by Standard Contractual Clauses, together with any additional safeguards required.

  6. How long we keep data

    Newsletter:
    until you unsubscribe. We then keep your email address on a suppression list so that we do not contact you again.
    Customer and license records:
    for the duration of your subscription and for three years afterwards, matching the limitation period for claims between businesses.
    Accounting records:
    five years from the beginning of the year following the financial year they relate to, as required by Polish accounting and tax law.
    Download and license validation logs:
    twelve months, then deleted.
    Support correspondence:
    twenty-four months after the matter is closed.
    Server logs:
    thirty days.

  7. Your rights

    You have the right to access your personal data, to have it corrected or erased, to restrict or object to its processing, and to receive it in a portable format. Where processing is based on consent, you may withdraw that consent at any time, without affecting processing carried out before withdrawal.

    To exercise any of these rights, write to privacy@otrspackages.com. We respond within one month.

    If you believe we are handling your data unlawfully, you may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych), ul. Stawki 2, 00-193 Warszawa, Poland, or with the supervisory authority in your own country.

  8. Security

    We use appropriate technical and organizational measures to protect personal data, including encryption in transit, access controls, and limiting access to those who need it. No system is completely secure, but we take this seriously and review our measures as the service grows.

  9. Changes to this policy

    We may update this policy. The current version is always published here with its date. If we make a significant change, we will say so on the Site and, where appropriate, notify you directly.

Back to the home page