Privacy and cookie policy
Effective from 6 November 2026
This is a translation for information purposes. The binding version is the Polish Polityka prywatności i plików cookies. In case of any discrepancy, the Polish version prevails.
1. Who is the data controller?
The controller of personal data is TGV Sp. z o.o., with its registered office in Warsaw, Al. Niepodległości 54/34, 02-626 Warsaw, Poland, entered in the register of entrepreneurs of the National Court Register (KRS) kept by the District Court for the Capital City of Warsaw under number 0000534661, tax ID (NIP) 5213684806, share capital PLN 5,000 ("we"). For personal data matters, write to pomoc@uwazni.org.pl or to our registered office.
2. What data do we process, for what purpose and for how long?
| Purpose | Data | Legal basis | Period |
|---|---|---|---|
| Displaying the website and security | IP address, browser data, server logs | Art. 6(1)(f) GDPR (legitimate interest) | 30 days |
| Handling contact, sign-up and sample report forms | data entered in the form, IP address | Art. 6(1)(b) or (f) GDPR | as in the tables below |
| Purpose | Data | Legal basis | Period |
|---|---|---|---|
| Answering enquiries and preparing offers | email, company name, study configuration | Art. 6(1)(b) GDPR (steps prior to entering into a contract) | 12 months after the last contact |
| Providing the sample report | Art. 6(1)(b) GDPR | 12 months | |
| Performing the contract and billing | contact and billing data | Art. 6(1)(b) and (c) GDPR | term of the contract; accounting data 5 years from the end of the tax year |
| Information about new reports | consent, Art. 6(1)(a) GDPR | until consent is withdrawn | |
| Establishing and defending claims | data from correspondence and the contract | Art. 6(1)(f) GDPR | until claims become time-barred |
| Purpose | Data | Legal basis | Period |
|---|---|---|---|
| Creating and running the account | email, phone number, profile data (e.g. age, gender, town, employment, purchase plans) | Art. 6(1)(b) GDPR | until the account is deleted |
| Carrying out tasks | behaviour on the tested page during the task (element visibility, tab activity, scrolling, clicks on page elements, time), device type, survey answers | Art. 6(1)(b) GDPR | raw data 24 months, then anonymised |
| Quality control and fraud prevention | quality indicators, IP address, device identifier, automated traffic signals | Art. 6(1)(f) GDPR (reliable research, fraud protection) | until the account is deleted; in case of violations, until claims become time-barred |
| Payouts and tax settlement | first name, surname, bank account or phone number (BLIK), data required by tax law | Art. 6(1)(b) and (c) GDPR | 5 years from the end of the tax year |
| Verifying the licence to practise (specialist group only) | licence number, first name and surname | Art. 6(1)(b) GDPR | until the account is deleted |
| Information about bonuses and news | consent, Art. 6(1)(a) GDPR | until consent is withdrawn |
3. Profiling
We automatically match invitations to your profile. This profiling does not produce legal effects concerning you or similarly significantly affect you: it only decides which invitations you see. Automated quality control may reject a task. You then have the right to appeal, and the appeal is reviewed by a person.
Companies commissioning studies do not receive your personal data, only aggregated results. We do not record camera images, sound or your screen, we do not measure your behaviour outside tasks and we do not ask about health, political opinions, religion or other special categories of data.
4. Who do we share data with?
With providers acting on our behalf: website hosting (GitHub, Inc.), form handling (Web3Forms), email (Google) and, once the panel launches, cloud infrastructure, SMS, payout providers and our accounting office. Public authorities may also receive data where the law requires it.
Some providers are based outside the European Economic Area (USA). In that case data is transferred on the basis of a European Commission adequacy decision (EU-US Data Privacy Framework) or standard contractual clauses.
5. Your rights
You have the right to access your data, to rectify and erase it, to restrict processing, to data portability and to object to processing based on legitimate interest. You can withdraw consent at any time, without affecting the lawfulness of processing before withdrawal. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).
Providing data is voluntary, but without it we cannot answer your enquiry, you cannot create a panel account and you cannot receive payouts.
6. Cookies
Cookies and similar technologies (e.g. the browser's local storage, localStorage) are small files or entries saved in your browser. We currently use only technologies that are necessary for the website to work. We do not use analytics or marketing cookies. We serve fonts from our own server, without connecting to Google Fonts.
| Category | Purpose | Consent required? |
|---|---|---|
| Necessary | running the website and forms; the uwazni_consent_v1 entry in local storage remembers your cookie choice, if one is made | no |
If we introduce analytics tools (e.g. Google Analytics) or marketing tools in the future, we will only activate them with your consent given in the cookie banner and will update this policy.
7. Changes to the policy
We will announce material changes on the website and also by email to panelists and clients.