Legal
GDPR
The GDPR notice explains the identity of the data controller, the purposes and legal bases of processing, recipients of data, storage periods, and the rights of the data subject.
1. Data controller
Your personal data controller is NGITECH sp. z o.o., al. Wiśniowa 36A/107B, 53-137 Wrocław, Poland, VAT ID (NIP) 8992894943, email: office.pl@ngitech.org.
  • At the time of publication, the controller does not indicate a separate data protection officer.
  • Questions about personal data can be sent to office.pl@ngitech.org.
2. Purposes and legal bases of processing
Data may be processed to provide the services, maintain accounts, handle polls, comments and invitations, ensure security, manage billing, conduct the controller’s own marketing, and comply with legal obligations.
  • The legal basis may include Article 6(1)(b) GDPR, Article 6(1)(c) GDPR, Article 6(1)(f) GDPR, or consent where required.
  • The controller’s legitimate interests include protecting poll creators, preventing abuse, moderating content, and defending against claims.
3. Recipients and transfers
Recipients of data may include IT, hosting, email, payment, accounting, analytics, and security providers, as well as competent public authorities where required by law.
  • If data is transferred outside the European Economic Area, appropriate safeguards required by data protection law are applied.
  • The scope of transferred data is limited to the minimum necessary.
4. Storage period
Data is stored for as long as necessary to achieve the processing purpose and then for any period required by law or necessary to establish, exercise, or defend legal claims.
  • Retention periods depend on the type of data and the purpose of processing.
  • After the relevant periods expire, data is deleted or anonymised unless further storage is necessary.
5. Your rights
You have the right to access your data, rectify it, erase it, restrict processing, request portability, object to processing, withdraw consent, and lodge a complaint with a supervisory authority.
  • In Poland, the supervisory authority is the President of the Personal Data Protection Office.
  • You can submit a request regarding your rights to office.pl@ngitech.org.