This document is published in several languages. In the event of any discrepancy between the language versions, the Polish version is binding.
Last updated: 29 October 2026
This page records what has changed in the contract documents of formexposed, when and why. The newest entry is at the top. The documents themselves are listed on the Legal Documents at a Glance page.
Change of 29 October 2026
- Terms of Service, version 2.2: new clause 5.7 on the formconfirmed form protection.
- Data Processing Agreement, version 2.2: new number 10 in Annex 1 (form protection).
- Privacy Policy, version 2.3: section 5 extended to cover our own form protection on our forms, section 20 to cover visitors to websites that use it, section 23 to cover its retention periods.
- Records of Processing Activities (Art. 30 GDPR), version 1.2: new entry A.11, entry B.23 extended.
- Privacy Policy Text for Your Website, version 1.1: new text block 7.
The reason: with formconfirmed, formexposed offers form protection without image puzzles and also uses it to protect its own forms. The new provisions in the Terms of Service and the Data Processing Agreement apply only to Customers who switch on the form protection; no provision changes for anyone else. Because the change exclusively adds a new, optional feature, it applies without the 30-day notice period.
Change of 22 October 2026
- Terms of Service, version 2.1: in the event of discrepancies, the Polish version now prevails (summary and clause 39.3); the contract can be concluded in any official language of the European Union.
- Data Processing Agreement, version 2.1: the Polish version prevails (language clause).
- Privacy Policy, version 2.2: available in all official languages of the European Union; the Polish version prevails.
- Technical and Organisational Measures and Sub-processors, version 1.1 each: the Polish version prevails.
The reason: all legal documents are now also published in the other official languages of the European Union. So that exactly one version decides, the Polish version – the language of the provider’s seat and of the applicable law – is binding instead of the German one; every document says so in its first paragraph. No other provision changes.
Change of 20 October 2026
- Privacy Policy, version 2.1: new section 6.3 on feedback below a report; retention (section 23) extended by feedback and the PDF version of a report.
- Records of Processing Activities, version 1.1: new entry B.35, retention periods in section 6 extended.
The reason is two new features: a wrong result can be reported below every report, and reports are available as PDF. Feedback is voluntary; nothing material changes in the processing of customer data.
New versions of 11 October 2026
As of this date, all legal documents of formexposed are published in a new, considerably more detailed version. The German version is the leading version; the English and the Polish versions follow it.
Revised
- Terms of Service, version 2.0
- Privacy Policy, version 2.0
- Data Processing Agreement, version 2.0
- Imprint, version 2.0: added the NIP, the information under § 5 DDG (German Digital Services Act) for users in Germany, notes on liability, copyright, licences and third-party trademarks, and a list of all legal documents
New
- Technical and Organisational Measures, version 1.0 (previously an annex to the Data Processing Agreement)
- Sub-processors, version 1.0 (previously an annex to the Data Processing Agreement)
- Records of Processing Activities (Art. 30 GDPR), version 1.0
- Data Protection Impact Assessment (Art. 35 GDPR), version 1.0
- Access, Erasure and Your Other Rights, version 1.0
- EU AI Act: How formexposed Uses AI, version 1.0
- EU Data Act: Switching and Data Export, version 1.0
- Acceptable Use and Abuse, version 1.0
- Complaints, version 1.0
- Right of Withdrawal for Sole Traders, version 1.0
- Privacy Policy Text for Your Website, version 1.0
- Legal Documents at a Glance and this page
The pages about our crawler (/bot) and about excluding a domain (/opt-out) were updated at the same time. They are not contract documents, but they describe processing on which the Privacy Policy relies.
Why
The previous texts described the service correctly, but briefly. Our customers’ legal departments and data protection officers need more: a record of the processing activities, an impact assessment, a separate list of sub-processors that can change without touching the contract, and clear routes for complaints and withdrawal. Every statement about how the service behaves, such as a period, a data field or a recipient, has been checked against the program code. Whatever has not yet been implemented is described in the text as planned or as an open point.
There are also two legal reasons. The service is aimed at businesses, but Polish law protects sole traders for whom a contract is not of a professional nature like consumers on certain points; there is now a separate page on the right of withdrawal for them. And the Polish Act on Providing Services by Electronic Means requires a regulated complaints procedure, which until now took up only one paragraph of the Terms of Service.
Why there was no change procedure
The earlier versions of 27 September and 9 October 2026 were drafts. They existed only in our development environment and were never released for entering into contracts; at that time, formexposed was not yet open to customers. No customer agreed to an earlier version. There was therefore no one to whom we would have had to announce a change, and the new version replaces them without a notice period.
Anyone who registers agrees to the version displayed to them at that moment. For every consent, we record the complete displayed text with a hash, together with the time, IP address and browser identifier. Which version you agreed to is shown in your data export.
How we announce future changes
This section summarises the rules. The provisions on changes in the Terms of Service and in the Data Processing Agreement are authoritative; where this summary deviates from them, they prevail.
Terms of Service and Data Processing Agreement
- We change them only for an objective reason: because of a change in the law or in its interpretation by courts and authorities, because of a change to the service, its functions or its technical basis, because of a change of a third party necessary for providing the service, to prevent misuse or security risks, or to correct errors and ambiguities.
- We announce every change at least 30 days before it takes effect by e-mail to the account holder’s address stored in the account, stating the amended wording, the reason for it, the day on which it is to take effect and your options. At the same time, we enter it on this page. Without this notice period, we only make changes that are exclusively to your advantage, are purely linguistic in nature or correct obvious errors, changes that a law, a court or an authority requires at shorter notice, and changes necessary to avert an imminent security risk; even then, we notify you of the change as soon as possible and state the reason.
- Silence and mere continued use do not count as consent. If a change affects your rights or obligations, we obtain your consent separately and expressly and record it in a verifiable manner. If you do not consent, the previous terms continue to apply to you; our right to ordinary termination under the Terms of Service remains unaffected.
- You may object to the change. In that case, a contract for a paid plan ends at the end of the current billing period, and the free plan ends when the change takes effect; until then, the previous terms apply. We refund prepaid fees for the period after the end of the contract on a pro rata basis. Your other rights of termination remain unaffected.
Prices
We change prices for future billing periods under a separate rule in the Terms of Service: we announce an increase for a running subscription at least 30 days in advance by e-mail; until the change takes effect, you can terminate as of the end of the current period.
Sub-processors
With the Data Processing Agreement, you give us a general authorisation for sub-processors. We announce every intended addition or replacement at least 30 days in advance by e-mail and enter it here and in the list of sub-processors. You may object in text form on an objective data protection ground; until a solution is found, we do not use the new sub-processor for your processing data or we suspend the function concerned for you. If we cannot find a solution, you may terminate the service concerned and receive a pro rata refund of prepaid fees for the period thereafter.
Technical and organisational measures
The Technical and Organisational Measures page forms part of the Data Processing Agreement. We publish every change with a new version number and enter it here. If a described measure is dropped without replacement or weakened, we notify you at least 30 days in advance by e-mail, and you may object as with a new sub-processor. If a measure has to be replaced at short notice to counter a threat, this may be done without advance notice, provided the level of protection does not fall as a result; the notification then follows without undue delay.
Other documents
The Privacy Policy, the records of processing activities, the impact assessment and the page on the EU AI Act are not contract terms; they describe what we do. They change when the service changes, and at the latest at the time the change takes effect. We enter material changes here.
The pages Complaints, Right of Withdrawal for Sole Traders, EU Data Act and Acceptable Use and Abuse describe rights and obligations to which the Terms of Service refer. We treat a change to these pages that restricts your rights or extends your obligations like a change to the Terms of Service. The partner terms have their own rule on changes.
Corrections that do not affect rights and obligations, such as typing and translation errors or a changed address, are noted here without a notice period.
Questions
Questions about a change, or an objection, go to contact@lukaswojcik.com or through the support window (the question mark in the navigation). An objection is read and answered by a human.