1. Why You Are Seeing This Notice
Stepli is a B2B service that helps businesses find relevant professional contacts at organisations that are hiring. To do this, we maintain professional business contact information. This notice explains what information we may have about you, where it comes from, why we use it and what your rights are, as required by Article 14 of the GDPR.
2. Who Is Responsible for Your Data
The controller is Bewort sp. z o.o., ul. Ostrobramska 101, 04-041 Warsaw, Poland. Email: legal@stepli.io.
3. What Information We May Have
We may process professional information such as your name; your employer or organisation; your position or role; your business email address; your professional location or country; publicly available professional information; the source of the record; and whether your business email address is valid.
We do not collect information about your private life for this purpose, and we do not use special categories of data.
4. Where We Obtain It
Information may come from publicly available professional and business sources; public employer websites and job postings; business data and contact discovery providers; and email verification services. If you ask, we will tell you which source your record came from, as far as that information is available to us.
5. Why We Process It and on What Basis
We process this information so that Stepli Customers can identify relevant professional contacts at organisations that are hiring. Our legal basis is our legitimate interest under Article 6(1)(f) of the GDPR in operating a B2B professional contact discovery service. We have weighed this interest against your rights and reasonable expectations: we use only professional information related to your role, we keep it for a limited time, and you can object at any time.
6. Who Receives It
Stepli Customers, who are businesses, can access professional contact information through the Service. When a Customer decides to contact you, that Customer is a separate and independent controller for its communication and is contractually required to comply with privacy, electronic communications, direct marketing and anti-spam laws. We also use service providers for hosting, data enrichment and email verification. Some of them may process data outside the EEA, under the safeguards described in our Privacy Policy.
7. How Long We Keep It
We keep a business contact record for up to 24 months from the last time it was verified or updated. We delete it earlier if it is no longer accurate or relevant, or if you object or ask us to delete it.
8. Your Rights
You may ask us to give you access to your data, correct it, delete it, restrict its processing, or tell you its source. You may object to the processing at any time, including to processing for direct marketing purposes. You also have the right to lodge a complaint with a supervisory authority; in Poland, this is the President of the Personal Data Protection Office (UODO).
9. How to Opt Out
Write to legal@stepli.io from the address concerned, or tell us which address it is. When we accept an objection or deletion request, we remove your record from the Stepli contact database, so that Stepli Customers can no longer find it through the Service. We keep only the minimum information needed to make sure it is not added again. If a Stepli Customer has exported your record from the Service, we also inform that Customer of your request, and it is contractually required to act on it.
If you received an email from a Stepli Customer, its unsubscribe link or a reply asking to stop will end further outreach from that Customer.