Privacy Policy and Data Protection
Last updated: January 2, 2026
1. Data Controller and Contact Information
SolidData Panel (hereinafter “we”, “our”, “Controller”) is the controller of personal data processing in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter “GDPR”).
Contact information for data protection matters:
- Company: Solid Data SIA
- Address: Stabu 25-35, Riga, Latvia
- Contact: Contact Form
2. Personal Data We Process
We process the following categories of personal data:
| Data category | Examples | Goal |
|---|---|---|
| Identification Details | First name, last name | Create an account, choose surveys |
| Contact Information | Email address | Messages, Notifications |
| Account data | Username, password (encrypted) | Authentication |
| Points and Transaction Details | Earned Points, Rewards History | Rewards System Management |
| Technical details | Browser type, device information | Security, service improvement |
3. Legal basis for processing
We process your personal data based on the following legal bases under GDPR Article 6:
-
* Consent (6.1.a): Completing surveys, receiving marketing messages, use of cookies.
* Contract performance (6.1.b): Creating and managing your account, tracking points and awarding rewards.
* Legal obligation (6.1.c): Meeting accounting and tax requirements.
* Legitimate interests (6.1.f): Service security and improvements, statistical analysis.
4. Data Retention Period
-
* Account data: For as long as the account is active or for 30 days after a deletion request.
* Survey responses: Anonymized within 24 months after the survey ends.
5. Your Rights Under the GDPR
You have the following rights regarding your personal data:
-
* Right of access (Article 15): The right to receive confirmation as to whether your data is being processed and to access it.
* Right to rectification (Article 16): The right to request correction of inaccurate data.
* Right to erasure (Article 17): The right to request deletion of your data ("right to be forgotten").
* Right to restriction of processing (Article 18): The right to request restriction of processing in certain circumstances.
* Right to data portability (Article 20): The right to receive your data in a structured, machine-readable format.
* Right to object (Article 21): The right to object to processing based on legitimate interests.
* Right to withdraw consent (Article 7): If processing is based on consent, you can withdraw it at any time.
To exercise your rights, please contact us. We will respond within 30 days.
6. Data Recipients and Data Transfers
Your personal data may be shared with the following categories of recipients:
-
* Research partners: Survey results are shared only in anonymized form.
* IT service providers: Server and cloud service providers (within the EU/EEA).
* Payment processors: For providing rewards and gift cards.
* Government authorities: Only in cases required by law.
We do not transfer your personal data outside the EU/EEA.
7. Data Security
We implement appropriate technical and organizational measures to protect your personal data:
-
* TLS/SSL encryption for data transmission
* Password encryption
* Access control and authentication mechanisms
* Regular security checks and audits
* Compliance with the data minimization principle
* Employee training in data protection
8. Cookies
Our website uses cookies. Cookie types:
-
* Essential – Site functionality, authentication (stored for up to 1 year)
* Analytics – Visit statistics, usability improvements (stored for up to 1 year)
* Marketing – Personalized notifications (stored for up to 1 year)
You can manage your cookie preferences in your browser.
9. Changes to the Privacy Policy
We reserve the right to update this Privacy Policy. You will be notified of any significant changes by email or through a notice on the platform. The current version of the Policy is always available on this page.