Waiting list: your data

Who is responsible for the waiting list's data, why we collect it, how long we keep it and what your rights are. Version of 16 October 2026. If this text differs from the Polish version, the Polish version decides.

1. Who is responsible for your data
2. What data and why
3. On what basis
4. How long
5. When we write to you
6. Who else holds the data
7. Your rights
8. Versions

Who is responsible for your data

1.1 The controller of the waiting list's data is:

The company's details will be given here before the list takes sign-ups.

1.2 For anything about your data, write to: the address will be given here before the list takes sign-ups.

1.3 We have not appointed a data protection officer. Messages are answered by the person who runs the service.

What data and why

2.1 You join the waiting list on the hustler.fyi site if you have no invitation and want one when a place opens up. Joining is voluntary and free. It does not create an account and commits you to nothing.

2.2 When you join, you give your e-mail address, work role, team size, industry and the report areas that interest you. You may add a short description of at most 280 characters. We also record the language of the page, the dates of joining and confirming, and the version of the consent text.

2.3 Why: to send you an invitation to create an account when there is a place for you, and to invite first the people Hustler will help most. The person who runs the service reads the answers in the admin panel and chooses whom to invite. We do not assess you automatically and do not use the answers for advertising.

On what basis

3.1 The basis is your consent (Article 6(1)(a) GDPR). You can withdraw it at any time with the leave link in the e-mail or by writing to the address in 1.2. Withdrawing consent does not affect the lawfulness of the processing before it.

3.2 So that nobody can use the list to flood other people's inboxes, at every sign-up we record a hash of the e-mail address and a hash of the IP address the sign-up came from. We delete the hashes after a day. Basis: our legitimate interest in preventing abuse (Article 6(1)(f) GDPR).

How long

4.1 Right after you join, we send one e-mail with a link. The address joins the list only when you open the link and confirm on the page. The link works for 7 days. Without confirmation, we delete the address and the answers after 7 days and do not write to you again.

4.2 We keep a confirmed entry for at most 12 months from confirmation. We delete it earlier when you leave, when we send you an invitation, when you create an account or when we remove the entry ourselves.

4.3 When we send you an invitation, the entry leaves the list and the account system keeps the e-mail address with the invitation's language and deadline. If you do not create an account, the address goes 30 days after that deadline.

4.4 We back up the database every day, only to restore the system after a failure; an encrypted copy is also kept off the server. A deleted entry may stay in the backups until older ones are replaced by newer ones, on the server for at most 14 days.

When we write to you

5.1 We write to an address on the list about two things only: the e-mail with the confirmation link, and an invitation when a place opens up. We send no newsletter and no advertising.

5.2 If the address already has an account or an invitation with us, we do not add it to the list and send no e-mail. The page answers the same as always, so that nobody can check whether a given address is with us.

Who else holds the data

6.1 The list's data is on our server in a netcup GmbH data centre in Germany. We also send the e-mails through netcup. netcup processes the data only on our behalf, under a data processing agreement.

6.2 We do not transfer the list's data outside the European Economic Area, do not sell it and do not share it with other companies.

Your rights

7.1 You have the right to:

• get information about your data and a copy of it;
• correct the data;
• delete the data;
• restrict its processing;
• move the data to another provider;
• object to processing that we base on a legitimate interest;
• withdraw your consent at any time.

7.2 You leave the list with the link in the e-mail; the entry goes at once. For anything else, write to the address in 1.2. We answer within a month.

7.3 You can lodge a complaint with the President of the Personal Data Protection Office (UODO), ul. Stanisława Moniuszki 1A, 00-014 Warszawa, Poland.

7.4 Giving the data is voluntary, but without an e-mail address and the answers we cannot add you to the list.

Versions

8.1 This notice applies from the day the list starts taking sign-ups.

8.2 With every entry we record the date of the consent text's version. A new version of this notice will appear on this page with a new date.