Privacy Policy

1. Who we are

The GiveawayPilot platform (https://giveawaypilot.com) is operated by WebforRent s.r.o., registered address Tatranská 2, 040 01 Košice, company ID: 50461052, registered in: Obchodný register Mestského súdu Košice, oddiel Sro, vložka č. 39733/V (“we”). Send privacy questions and requests to [email protected]. We have not appointed a data protection officer.

2. Giveaway entrants

1. If you enter a giveaway, the controller of your data is the host named in its official rules. We process the data only as the host's processor - the purposes, scope, retention and your rights are set out in the official rules of each giveaway. You can send a request to the host or to us; we will forward it to the host.
2. News from GiveawayPilot. If you give separate consent to receive tips on new giveaways when entering a giveaway, we are the controller for that purpose. We process your name, e-mail and a record of the consent (wording, version, time) based on consent (Art. 6(1)(a) GDPR) until you withdraw it, but no longer than until the data of the giveaway in which you gave it are anonymized. You can withdraw consent at any time by e-mail to [email protected] or via the link in every news e-mail; withdrawal does not affect your entry.

3. Hosts and application users

1. For host organizations and user accounts we process name, e-mail, password (as a hash only), language, organization memberships and roles, organization details (company name, address, company ID, VAT ID, contact e-mail, plan), records of accepted terms (version, time, person), invitations and an immutable log of logins and actions in the application including the IP address.
2. Purposes and legal bases: providing the service under the contract (Art. 6(1)(b) GDPR), invoicing and accounting (Art. 6(1)(c) GDPR) and the legitimate interest in platform security and in evidencing actions (Art. 6(1)(f) GDPR).
3. We keep the data for the lifetime of the account and the contract. Accounting records for 10 years under Slovak accounting law. Logs of logins and actions for at most 4 years after the contract ends (limitation period).

4. Website visitors and cookies

Cookies. We use these cookies:

We do not use analytics, advertising or tracking cookies. The link source (for example “fb-group”) through which you arrived at a giveaway page is stored only with your entry if you take part. Fonts and scripts are loaded from our own server; the only exception is the Cloudflare Turnstile script on the giveaway page (below).

Form protection. The giveaway entry form is protected by Cloudflare Turnstile (Cloudflare, Inc.), which processes the IP address and technical browser data when the giveaway page loads and the form is submitted, to tell humans from bots. With an entry, the browser also sends a few device properties (for example language, screen resolution, time zone); only a one-way fingerprint (HMAC), calculated separately for each giveaway, is stored. For entries this is processing on behalf of the giveaway host (section 2); the legal basis is the legitimate interest in protecting giveaways against fraud (Art. 6(1)(f) GDPR).

Giveaway page visits are counted without cookies: a one-way fingerprint is derived from the IP address, the giveaway and the day and kept only until the end of the day to recognize repeat visits; only the numbers of visits per day and link source are stored in the database.

Server logs. The web server records the IP address, time, page address and browser data; we keep the logs for at most 30 days for security (legitimate interest).

5. Recipients and processors

• Hetzner Online GmbH, Germany - server hosting and backups in the EU,
• Sendinblue SAS (Brevo), France - e-mail delivery,
• Cloudflare, Inc., USA - form protection (Turnstile), DNS and network security,
• an external accountant - billing data of hosts,
• public authorities where required by law.

We do not sell personal data or provide it for advertising.

6. Transfers outside the EU

We store data on servers in the EU. Cloudflare, Inc. (USA) is certified under the EU-US Data Privacy Framework; the transfer is also covered by standard contractual clauses.

7. Your rights

You have the right of access, rectification, erasure, restriction of processing, data portability, the right to object to processing based on legitimate interest and the right to withdraw consent at any time. Send requests to [email protected]; we will respond within one month. We do not carry out automated decision-making or profiling. You can lodge a complaint with the data protection authority in your EU/EEA country of residence or with the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

8. Changes

We may update this policy; the current version is always on this page.