Privacy policy
This policy explains what data we process when you use eneagramtest.pl, why, and what your rights are under Regulation (EU) 2016/679 (GDPR). The Polish version is the binding one.
1. Controller
The controller is [Imię i nazwisko lub nazwa firmy], [ulica, kod pocztowy, miejscowość], NIP [numer]. Contact: kontakt@eneagramtest.pl.
2. In short
- No sign-up or login is required.
- Your answers and result are stored only in your browser and are never sent to our server.
- We process your email address only if you ask us to email your result, and we don’t store it.
- Advertising cookies are set only after you consent. Without consent we show limited ads that don’t use cookies for personalisation.
3. What data, why, and on what basis
| Purpose | Data | Legal basis | Retention |
|---|---|---|---|
| Running the test and showing the report | Answers, result, progress – stored locally in your browser | Art. 6(1)(b) GDPR | Until you clear site data or restart the test |
| Emailing your result | Email address, type and wing number | Art. 6(1)(b) GDPR | Not stored; a copy may remain in the hosting mail system under its rules |
| Operation and security | IP address, date and time, page, browser type (server logs) | Art. 6(1)(f) GDPR – security | As set by the hosting provider, usually up to 30 days |
| Showing and measuring ads, including personalised ads | Cookie identifiers, IP address, device and ad interaction data | Art. 6(1)(a) GDPR and art. 399 of the Polish Electronic Communications Law – your consent | Until you withdraw consent; see the Cookie policy |
| Showing limited ads (no consent) | IP address and basic device data, no advertising cookies | Art. 6(1)(f) GDPR – funding a free service | Under Google’s rules |
| Remembering your privacy choices | Consent record in browser storage | Art. 6(1)(c) and (f) GDPR | 12 months |
| Handling messages and complaints | Data you include in your message | Art. 6(1)(f) GDPR | Until resolved, then until claims are time-barred |
4. Recipients
- Seohost (dostawca hostingu) – server and email provider, acting as our processor under a data processing agreement.
- Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) – Google AdSense and Google Ad Manager; an independent controller for advertising. See how Google uses information from partner sites.
- Public authorities, only where required by law.
5. Transfers outside the EEA
Google may process data in the United States. Google LLC participates in the EU–US Data Privacy Framework and otherwise relies on the European Commission’s standard contractual clauses.
6. Profiling
Your result is calculated automatically in your browser but has no legal or similarly significant effect on you (art. 22 GDPR does not apply). If you consent to personalised ads, Google may build an interest profile to tailor ads.
7. Your rights
- access to your data and a copy of it,
- rectification, erasure or restriction of processing,
- data portability,
- objection to processing based on legitimate interest,
- withdrawing consent at any time in the cookie settings, without affecting earlier processing,
- lodging a complaint with the President of the Personal Data Protection Office (UODO), ul. Stawki 2, 00-193 Warsaw, Poland.
You can delete data stored in your browser (answers, result, consent) yourself by clearing site data.
8. Minors
The service is intended for people aged 16 and over. Younger users may use it only with a parent’s or guardian’s consent.
9. Fonts and external resources
Fonts and site files are served from our own server, so loading them doesn’t send your IP address to third parties. Share buttons are plain links; data reaches those services only when you click them.
10. Changes
We may update this policy when the service or the law changes. The date at the top shows the latest version.