Documents · PaidFor.io
Privacy Policy
This is a courtesy English translation provided for convenience. The Polish version of this document is the legally binding one.
How PaidFor.io processes users' personal data in accordance with the GDPR — purposes, legal bases, rights and cookies.
ul. Świeradowska 47, 02-662 Warszawa · NIP 7981453169
Contact: kontakt@paidfor.io
1Data Controller
The controller of your personal data is the entity identified above. For matters concerning personal data you can contact us at kontakt@paidfor.io. The controller has not appointed a data protection officer (DPO).
2What Data We Collect
| Category | Scope of data |
|---|---|
| User (Participant) | first name, surname, e-mail address, phone number, company name, position, areas of interest, level of influence on purchasing decisions, expected reward. |
| Company (Sponsor) | company name, website address, product description, target audience profile, proposed rate, contact person's details (first name, surname, e-mail address, position). |
| Waitlist | e-mail address and selected category preferences. |
| Attention Session data | a record of interactions with the material (answers, session progress); the camera feed — where a Session uses one — serves solely to confirm presence in real time and is not recorded or stored. |
| Technical data | IP address, information about the device and browser, events within the Service, cookie data. |
PaidFor MED — professional data. From Users practising a medical profession we may additionally collect: the profession practised, specialisation, career stage and professional licence number (PWZ) — solely for the purpose of verifying professional credentials and matching Campaigns (Art. 6(1)(b) and (f) GDPR). The PWZ number is not shared with Sponsors; we store it for as long as the Account is maintained.
Providing this data is voluntary but necessary to use the relevant features (registration, participation in a Session, contact).
3Purposes and Legal Bases of Processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Registration and maintenance of the account, provision of the Service's services, organisation and settlement of Sessions | Art. 6(1)(b) — performance of a contract |
| Sign-up to the Waitlist and related contact | Art. 6(1)(a) — consent |
| Marketing of our own services (e.g. newsletter) | Art. 6(1)(a) — consent / Art. 6(1)(f) — legitimate interest |
| Verification of engagement (interactions with the material; camera without recording) | Art. 6(1)(a) — consent |
| Settlements, accounting and tax obligations | Art. 6(1)(c) — legal obligation |
| Establishing, pursuing or defending legal claims, security and analytics | Art. 6(1)(f) — legitimate interest |
Where processing is based on consent, you may withdraw it at any time — without affecting the lawfulness of processing carried out before its withdrawal.
4How Long We Keep Your Data
- Account data — for as long as the account is maintained and, after its deletion, for the limitation period of any potential claims.
- Data processed on the basis of consent (Waitlist, marketing, the camera feed — a real-time preview only, used to confirm presence; it is not recorded or stored
- Settlement and accounting data — for the period required by law (as a rule, 5 years).
5Data Recipients
Data may be entrusted to trusted processors that support the operation of the Service, only to the extent necessary and on the basis of data processing agreements — including providers of hosting and infrastructure (e.g. Cloudflare), analytics and e-mail communication tools, authentication providers (e.g. LinkedIn) and payment operators. Data is not sold. A Company-Sponsor does not receive the User's contact or settlement details without the User's separate consent.
6Transfers Outside the EEA
Some service providers may process data outside the European Economic Area. In such cases the transfer takes place on the basis of appropriate safeguards, in particular the standard contractual clauses approved by the European Commission. A copy of the safeguards can be obtained by contacting the Controller.
7Your Rights
You have the right to: access your data and obtain a copy of it, rectify it, erase it, restrict its processing, port your data, object to processing based on legitimate interest, and withdraw consent. You also have the right to lodge a complaint with the President of the Polish Personal Data Protection Office (UODO, ul. Stawki 2, 00-193 Warszawa).
To exercise your rights, write to kontakt@paidfor.io.
8Cookies
The Service uses cookies and similar technologies. Essential cookies ensure the proper functioning of the Service and do not require consent. Analytics and marketing cookies are used only with your consent given in the cookie banner; you may change or withdraw your consent at any time in your browser or Service settings. Restricting cookies may affect the availability of certain features.
9Data Security
We apply technical and organisational measures appropriate to the risk, including encryption of transmission (HTTPS) and restricted access to data. We make every effort to protect data against unauthorised access, loss or destruction.
10Changes to This Privacy Policy
This Policy may be updated as the Service develops or as the law changes. The current version is always available in the Service, and the date of the last update is shown at the top of the page. This version is effective as of 29 July 2026.