1. General information
The controller of personal data processed within the Poll4All.org service (hereinafter the “Service”) is the owner of the poll4all.org website, a natural person, Poland (hereinafter the “Controller”).
Contact regarding personal data protection is available via the contact form available here.
The Controller has not appointed a Data Protection Officer (DPO).
2. Scope of personal data processed
The Controller processes in particular the following data:
- user email address,
- username (login),
- user account data (ID, registration date, account status),
- password stored in the form of a secure hash,
- IP address,
- date and time of login and other events within the Service,
- content published by the user (comments, polls, answers),
- technical data, including browser and operating system information (User-Agent),
- information stored in cookies.
3. Purposes of data processing
Personal data are processed for the purpose of:
- operating and maintaining user accounts,
- enabling the publication of comments and polls,
- content moderation,
- preventing abuse and fraudulent activities,
- ensuring the security of the Service,
- statistical analysis and analytics,
- displaying advertisements, including personalized advertisements (Google AdSense).
4. Legal basis for processing
The legal basis for processing personal data is:
- Article 6(1)(b) GDPR – performance of a contract (user account),
- Article 6(1)(f) GDPR – legitimate interest of the Controller (security, abuse prevention),
- Article 6(1)(a) GDPR – user consent (cookies, analytics, advertising).
5. Data retention period
- user account data – until account deletion and for up to 30 days thereafter,
- technical data and logs – up to 24 months,
- data stored in cookies – according to cookie settings and standard retention periods.
6. Data recipients
Data recipients may include:
- Google LLC – with regard to Google AdSense, Google Analytics and Google Consent Mode services,
- hosting service providers (servers located in Poland),
- entities authorized under applicable law.
7. Transfer of data outside the EU
Personal data may be transferred outside the European Union, in particular to the United States, in connection with the use of Google services. Such transfers are based on Standard Contractual Clauses (SCC) approved by the European Commission.
8. User rights
Users have the right to:
- access their personal data,
- rectify personal data,
- erase personal data,
- restrict processing,
- object to processing,
- data portability,
- lodge a complaint with the Polish Personal Data Protection Office (PUODO).
9. Cookies
The Service uses cookies.
Cookies are used in particular to:
- ensure proper functioning of the Service,
- remember user preferences,
- conduct statistical analysis and analytics,
- display advertisements, including personalized advertisements.
10. Consent management (CMP)
The Service uses a Consent Management Platform (CMP) compliant with the IAB Transparency and Consent Framework (TCF) version 2.2.
Analytical and marketing cookies are stored only after obtaining the user’s prior consent. The User may change or withdraw their consent at any time via the cookie settings available in the website footer.
11. Types of cookies
- essential cookies – necessary for the proper operation of the Service,
- analytical cookies – used to analyze traffic and statistics,
- marketing cookies – used to display advertisements tailored to user interests.
12. Final provisions
This Privacy Policy and Cookies document may be updated. The current version is always available in the Service.
The Polish language version of this document shall prevail and be legally binding.