Documents · PaidFor.io
Privacy Policy
How PaidFor.io processes users' personal data in accordance with the GDPR — purposes, legal bases, rights and cookies.
ul. Świeradowska 47, 02-662 Warsaw, Poland · VAT ID 7981453169
Contact: kontakt@paidfor.io
1Data controller
The controller of your personal data is the entity identified above. For matters concerning personal data you may write to kontakt@paidfor.io. The controller has not appointed a Data Protection Officer (DPO).
2What data we collect
| Category | Scope of data |
|---|---|
| User (Participant) | first name, surname, email, telephone, company name, job title, areas of interest, level of influence on purchasing decisions, expected fee. |
| Company (Sponsor) | company name, website address, product description, target audience profile, proposed rate, contact person's details (first name, surname, email, job title). |
| Waitlist | email address and selected category preferences. |
| Attention session data | a record of interactions with the material (answers, session progress); the camera image — where a Session uses one — serves solely to confirm presence in real time and is not recorded or stored. |
| Technical data | IP address, device and browser information, events within the Service, cookie data. |
PaidFor MED — professional data. From Users practising a medical profession we may additionally collect: the profession practised, specialty, career stage and the licence to practise number (PWZ) — solely for the purpose of verifying professional credentials and matching Campaigns (Art. 6(1)(b) and (f) GDPR). The PWZ number is not passed to Sponsors; we retain it for as long as the Account is maintained.
Providing data is voluntary but necessary in order to use the relevant features (registration, participation in a Session, contact).
3Purposes and legal bases of processing
| Purpose | Legal basis (GDPR) |
|---|---|
| Registration and maintenance of an account, provision of the Service, organisation and settlement of Sessions | Art. 6(1)(b) — performance of a contract |
| Waitlist sign-up and related contact | Art. 6(1)(a) — consent |
| Marketing of our own services (e.g. newsletter) | Art. 6(1)(a) — consent / Art. 6(1)(f) — legitimate interest |
| Verification of engagement (interactions with the material; camera without recording) | Art. 6(1)(a) — consent |
| Settlements, accounting and tax obligations | Art. 6(1)(c) — legal obligation |
| Establishing, pursuing or defending claims, security and analytics | Art. 6(1)(f) — legitimate interest |
Where processing is based on consent, you may withdraw it at any time — without affecting the lawfulness of processing carried out before its withdrawal.
4How long we retain data
- Account data — for as long as the account is maintained and, after deletion, for the limitation period for any claims.
- Data processed on the basis of consent (Waitlist, marketing) — until the consent is withdrawn. The camera image is a real-time preview only, used to confirm presence; it is neither recorded nor stored.
- Settlement and accounting data — for the period required by law (as a rule, 5 years).
5Data recipients
Data may be entrusted to trusted processors supporting the operation of the Service, solely to the extent necessary and on the basis of data processing agreements — including hosting and infrastructure providers (e.g. Cloudflare), analytics and email communication tools, authentication providers (e.g. LinkedIn) and payment operators. Data is not sold. The Sponsor Company does not receive a User's contact or settlement data without that User's separate consent.
6Transfers outside the EEA
Some service providers may process data outside the European Economic Area. In such cases the transfer takes place on the basis of appropriate safeguards, in particular the standard contractual clauses approved by the European Commission. A copy of the safeguards can be obtained by contacting the controller.
7Your rights
You have the right to: access your data and obtain a copy of it, rectification, erasure, restriction of processing, data portability, objection to processing based on legitimate interest, and withdrawal of consent. You also have the right to lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warsaw, Poland).
To exercise your rights, write to kontakt@paidfor.io.
8Cookies
The Service uses cookies and similar technologies. Essential cookies ensure the correct operation of the Service and do not require consent. We use analytics and marketing cookies solely with your consent given in the cookie banner; you may change or withdraw that consent at any time in your browser settings or in the Service. Restricting cookies may affect the availability of certain features.
9Data security
We apply technical and organisational measures appropriate to the risk, including encryption of transmission (HTTPS) and restricted access to data. We make every effort to protect data against unauthorised access, loss or destruction.
10Changes to the Privacy Policy
This policy may be updated as the Service develops or as the law changes. The current version is always available in the Service, and the date of the last update appears at the top of the page. This version is effective from 29 July 2026.