Privacy policy - QuestPass

Information on processing of data for Questpass solvers

Data controller

The controller of your personal data is Questpass sp. z o.o. with its registered office in Poznań, ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

You can contact us as follows:

by sending an e-mail to: rodo@questpass.pl,
by letter to the following address to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Source of personal data

We will process various categories of your personal data that you have provided to us when solving the questpass – advertising or informational material provided by us or our partners, which may contain a link to a landing page indicated by our partner.

For what purposes do we process your personal data?

We process your data when you visit the websites that display questpasses. We will process your data to: :

create your individual ID for displaying you questpasses.The legal basis for the processing is our legitimate interest in being able to properly fulfil our contractual obligations to those entities that cooperate with us.
pass on your contact details to our partners (if you provided them when solving the questpass). The basis for the processing is your consent, which you can be withdrawn at any time.
defend against or pursue any potential claims. The legal basis for the processing of your data is our legitimate interest in being able to pursue or defend against claims.

Furthermore, based on your preferences, we will use your personal data to: :

measure the effectiveness of the advertisements displayed on questpasses,
measure the effectiveness of the content displayed on questpasses,
understand the audience by producing statistics,
develop and improve our services,
ensure security, prevent and detect fraud and rectify errors,
provide and display advertisements and content on questpasses.

The legal basis for such processing is our legitimate interest that consists in:

correctly fulfil our contractual obligations to those entities that cooperate with us,
understand how questpass solvers perceive the content and advertisements we display to them,
ensure the proper functioning of our services.

If you would like to find out more about our legitimate interests on the basis of which we use your data for the above purposes, please contact us (contact details provided in the “Data controller” section).

If, by solving a questpass or using the functionality available on our partner’s website, you have consented to the targeting of advertisements then, based on your personal data collected by us, we will select basic advertisements, create profiles personalised to you and select advertisements personalised to you. Your consent is the legal basis for such processing.

If, by solving a questpass, you have joined the Questpass Club, we will process your personal data:

in order to comply with the obligations arising from your joining the Club (including the redemption of the benefits associated with joining the Questpass Club) and to manage your membership in the Club. The legal basis for such processing is that it is necessary for the performance of the agreement with us (the Regulations of the Questpass Club accepted by you) to which you are a party, as well as to take action at your request prior to the conclusion of the agreement. You can review the Terms and Conditions of the Questpass Club here: https://questpass.pl/pl/regulaminy/regulamin-klubu-questpass/
to enable you to take part in the “Help with Questpass” Action, as joining the Questpass Club is tantamount to taking part in the “Help with Questpass” Action. If you take part in the “Help with Questpass” Action, we will assign information to your ID which of the Beneficiaries cooperating with us in the Action you have decided to support. You can find the list of entities we work with as part of the “Help with Questpass” campaign here: The legal basis for such processing is that it is necessary for the performance of the agreement with us to which you are a party, as well as to take action at your request prior to the conclusion of the agreement. The Regulations of the “Help with Questpass” Action are available here: https://questpass.pl/pl/regulaminy/regulamin-akcji-pomagaj-z-questpass/. We do not pass on your personal data to the Beneficiaries of the Action.

With whom do we share your personal data?

We will share your personal data with our partners (cooperating advertisers) in connection with questpass advertising campaigns conducted on their behalf.

We will share your personal data with our suppliers to whom we outsource personal data processing services, such as IT service providers. Such entities process data on the basis of a contract with us and only in accordance with our instructions.

If you have provided us with your contact details we will also share your personal data with our partners who work with us.

Meta Pixel

We use Meta Pixel to carry on marketing activities in the Facebook ad ecosystem (advertisement re-targeting) and to measure their effectiveness. When processing personal data in this regard, we cooperate with Meta Platforms Ireland Limited as joint controllers.

You can find more information about the data processing rules in connection with our use of Meta Pixel here: https://www.facebook.com/legal/controller_addendum.

You can find more information about the processing of your personal data by Meta Platforms Ireland Limited in the Privacy Policy of Meta Ireland available here: https://www.facebook.com/legal/controller_addendum

Due to the integration of questpasses with Meta Pixel, some of your information may be shared with Meta Platforms Inc. which is based outside the European Economic Area (EEA), i.e. in the United States. The legal basis for this data transfer is the European Commission Decision of 10 July 2023 stating an adequate level of protection for personal data ensured by the “EU-US Data Privacy Framework”. You can find more information about the transfer of data by Meta outside the EEA here: https://www.facebook.com/legal/EU_data_transfer_addendum/update

For how long do we process your data?

Your data will be processed:

for the purposes of displaying questpasses to you and using the data collected in the course of solving questpasses, until you object, unless the purpose of the processing is terminated sooner (i.e. we stop displaying questpasses),
to the extent that we use your data to display personalised advertising to you, we will store it until you withdraw your consent, unless the purpose of the processing is terminated sooner (i.e. we stop displaying personalised advertising),
in terms of our marketing activities, until you object, unless the purpose of the processing is terminated sooner (i.e. we stop to carry out marketing activities),
to the extent that we process it in connection with your membership of the Questpass Club, until you cancel your membership of the Club, unless the purpose of the processing is terminated sooner (i.e. we terminate the operation of the Questpass Club),
in terms of sharing your personal data with our partners, until you withdraw your consent to the processing of your personal data for this purpose.

What rights you have?

With regard to your personal data, you have the following rights:

The right to withdraw your consent to the processing of your personal data.
The right of access to your personal data.
The right of rectify your personal data.
The right to have your personal data erased.
The right to request the restriction of your data processing.
The right to data portability to other data controllers i.e. the right for such data controllers to receive your personal data from us, in a structured format that is commonly used and machine-readable. You can transfer this data to another controller or request that we transfer your data to another controller. However, we will do this only if such a transfer is technically possible. You have the right to data portability only in respect of the data that we process on the basis of your consent or in connection with the performance of the agreement.
The right to object to the processing of your personal data.

To exercise the above rights, please contact us as follows:

by sending an e-mail to: rodo@questpass.pl
or in writing by post to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

The right to withdraw your consent

To the extent that your data is processed on the basis of your consent – you have the right to withdraw your consent to the processing of your data at any time. Consent withdrawal shall not affect the lawfulness of the processing based on the consent before it has been withdrawn. You can withdraw your consent in any of the following ways:

by sending an appropriate statement to the e-mail address: rodo@questpass.pl or in writing, by post to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland
using the functionality of the questpass displayed to you or the functionality on the website of our partner, on whose website questpasses are displayed.

The right to object

As your data is processed on the basis of our legitimate interest for direct marketing purposes, you have the right to object to our processing of your personal data at any time. You also have the right to object to the processing of your personal data on the grounds of your particular situation.

You can make such an objection by sending a statement by e-mail to: rodo@questpass.pl or in writing, by post to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

The right to lodge a complaint with the authority

You also have the right to lodge a complaint with the supervisory authority in charge of personal data protection, i.e. the President of the Personal Data Protection Office.

Statement of compliance with the TCF

Questpass Sp. z o.o. participates in the IAB Europe Transparency & Consent Framework and complies with its specifications and rules. Questpass’ identification number within this framework is 1048.

Information on data processing for Users of Questpass.pl Website

Data controller

The controller of your personal data shall be Questpass sp. z o.o. with its registered office in Poznań, ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

You may contact us as follows:

by sending an email to: rodo@questpass.pl,
by letter to the following address: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Data source

We will process the categories of your personal data that you have provided to us by completing the registration form for the Questpass.pl Website (hereinafter: “Website”) or by contacting us via email, phone, or social media.

Registration, as well as subsequent logging in to the Website is also possible through third party platforms and services. You make the decision about this registration or login process. If you register or log in to our services using the credentials of a third party (e.g., Facebook, Google, Twitter), we import information from that party to help create an account for you on the Website.

For what purpose do we process your personal data?

We will process your data to:

take actions related to processing your registration for the Website and providing electronic services regarding the creation and maintenance of your account as a user of the Website. The legal basis for processing your data is that these activities are necessary for the performance of a contract with us to which you are a party, as well as taking action at your request prior to entering into that contract.

provide the service of making content available to you on third-party websites without the Questpass ads displayed by us – advertising or informational material provided by us or our partners, which may include in its content a link to a landing page designated by our partner. The legal basis for processing your data is that these activities are necessary for the performance of the contract with us to which you are a party.

defend against or pursue any potential claims relating to your use of the Website. The legal basis for processing your data is our legitimate interest that consists in being able to bring possible claims or defend ourselves against claims.

conduct direct marketing of our products and services. We will send you marketing materials and offers or call you about it – depending on the method of contact you have chosen.

comply with our statutory obligations arising in particular from tax and accounting regulations. The legal basis for processing this data is its necessity for fulfilling our legal obligations under tax and accounting law.

Who do we share your personal data with?

If you use our service of making content available on third-party websites without Questpasses (including advertisements) displayed by us, your personal information, is transferred to the entities that operate the websites for which you have subscribed to the service. We only provide your email address and your unique identifier created for you on the Website. The recipient of the data may not use your data for any purpose other than to identify you on their website, in order to prevent them from displaying the expected content to you.

So that we can provide services to you, and so that you can provide them to us, we also transfer your data to entities providing services for maintaining the Website and storing data, i.e.: technical support of devices and products used for performance of the contract, invoice processing, entities providing postal and courier services.

How long will we process your data?

Your data will be processed:

until you delete your account or we terminate the provision of services on the Website (whichever is earlier) and thereafter for the purposes of pursuing our interests, including the statute of limitations for any claims we may have;
with regard to data covered by tax and accounting records, your data will be processed by us for a period of five years from the end of the tax year to which the document relates;
in respect of marketing activities until you object, unless the purpose of the processing ceases before then (i.e. we cease to carry out marketing activities).

What are your rights?

With respect to your personal information, you have the following rights:

Right to access personal data
Right to rectify personal data
Right to delete personal data
Right to request restriction of data processing
Right to data portability to another data controller
Right to object to the processing of personal data

To exercise these rights, please contact us as follows:

by sending an email to: rodo@questpass.pl,
by letter to the following address: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Right to object

As your data is processed on the basis of our legitimate interest for direct marketing purposes, you have the right to object to the processing of your personal data at any time. You also have the right to object to the processing of your personal data by us due to your particular situation.

You may object by sending a statement by email to: rodo@questpass.pl or in writing by mail to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint to the supervisory authority dealing with personal data protection, i.e. the President of the Personal Data Protection Office in Poland.

Requirement to provide personal data

It is necessary for you to provide your data in order to register on and use the Website. Without the processing of your data, we would not be able to create a your user profile the Website or allow you to access the services we provide.

Statement of compliance with TCF

Questpass Sp. z o.o. participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Questpass identification number within the framework is 1048.

Information on data processing for Advertisers and Publishers and persons authorised by them

Data controller

The controller of your personal data shall be Questpass sp. z o.o. with its registered office in Poznań, ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

You may contact us as follows:

by sending an email to: rodo@questpass.pl,
by letter to the following address: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Data source

We will process the categories of your personal data that you have provided to us by completing the registration form for the Questpass.pl Website (hereinafter the Website), as well as those provided to us by an entity – another user or our client who uses the Website and who has reported that you are eligible to use the Website.

Specifically, this will include information such as your name, surname, email address, telephone number, the number assigned to you by the entity submitting your eligibility to register on the Website, or other identifier unique to each user.

For what purpose do we process your personal data?

We will process your data to:

verify that you are eligible to be registered as a user of the Website. The legal basis for processing your data is our legitimate interest that consists in needing to verify individuals who apply to the Website on behalf of an entity – our client who uses the Website and who has reported that you are eligible to use the Website. In this regard, we verify that you are in fact a person reported by that entity to which you may be specifically an employee.

take actions related to processing your registration for the Website and providing electronic services regarding the creation and maintenance of your account as a user of the Website. Without the processing of your data, we would not be able to create a profile for you on the Website or allow you to access the services we provide. The legal basis for processing your data is that these activities are necessary for the performance of a contract with us to which you are a party, as well as taking action at your request prior to entering into that agreement.

perform the service ordered by you which is the subject of the Agreement concluded between us. The legal basis for processing your data is that these activities are necessary for the performance of the contract with us to which you are a party.

contact you for purposes related to your use of the Website with respect to its general functionality, such as handling complaints, including resolving technical issues. The legal basis for processing your data is our legitimate interest that consists in being able to contact persons applying to register with the Website and its users.

conduct direct marketing of our products and services. We will send you marketing materials and offers or call you about it – depending on the method of contact you have chosen.

Who do we share your personal data with?

We also transfer your data to entities providing us with services of maintaining the Website and storing data, i.e.: technical support of devices and products used for performance of the Agreement, invoice service, entities providing postal and courier services.

How long will we process your data for?

Your data will be processed:

until you delete your account or we terminate the provision of services on the Website (whichever is earlier) and thereafter for the purposes of pursuing our interests, including the statute of limitations for any claims we may have;
with regard to data covered by tax and accounting records, your data will be processed by us for a period of five years from the end of the tax year to which the document relates;
with regard to marketing activities until you object, unless the purpose of the processing ceases before then (i.e. we cease to carry out marketing activities).

What are your rights?

With respect to your personal information, you have the following rights:

Right to access personal data
Right to rectify personal data
Right to delete personal data
Right to request restriction of data processing
Right to data portability to another data controller
Right to object to the processing of personal data

To exercise these rights, please contact us as follows:

by sending an email to: rodo@questpass.pl,
or in writing by mail to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Right to object

You may object to the processing by sending a statement by email to: rodo@questpass.pl or in writing by mail to: ul. Romana Szymańskiego 8/2, 61-826 Poznań, Poland.

Right to lodge a complaint with a supervisory authority

You also have the right to lodge a complaint with the supervisory authority for the protection of personal data, i.e. the President of the Personal Data Protection Office in Poland.

Requirement to provide personal data

It is necessary for you to provide personal information in order to register for and use the Website. Without the processing of your data, we would not be able to create a profile for you on the Website or allow you to access the services we provide.

Statement of compliance with TCF

Questpass Sp. z o.o. participates in the IAB Europe Transparency & Consent Framework and complies with its Specifications and Policies. Questpass identification number within the framework is 1048.