Privacy Policy
Privacy Policy for “GetAnswerOnline” — last updated: 8 March 2026.
§1. Data controller
The controller of your personal data is:
3D0L0
Registered office: Wrocław, Poland
Tax ID (NIP): 8993053067
Registry (REGON): 541518146
Email: contact@getansweronline.com
(the “Controller” or “we”).
The Controller operates the website at https://getansweronline.com/ (the “Website”).
This Privacy Policy sets out the rules for processing and protecting personal data provided by Users, in accordance with Regulation (EU) 2016/679 (GDPR) and the Polish Personal Data Protection Act of 10 May 2018.
§2. Scope of collected data
We collect:
- email address (required to deliver the service),
- first name or pseudonym (optional),
- date of birth (optional),
- content of questions or dream descriptions,
- technical data (IP, browser, operating system, date and time),
- payment transaction identifier, amount and date.
The Controller does not store payment card or bank account data. Payments are handled by Przelewy24.
§3. Purposes and legal bases
- Providing the ordered service — Art. 6(1)(b) GDPR (performance of a contract).
- Sending the answer by email — Art. 6(1)(b) GDPR.
- Handling payments and settlement — Art. 6(1)(b) GDPR.
- Processing complaints — Art. 6(1)(b) and (f) GDPR.
- Tax and accounting obligations — Art. 6(1)(c) GDPR.
- Security of the Website — Art. 6(1)(f) GDPR.
- Statistical analysis — Art. 6(1)(f) GDPR.
- Establishment and defence of claims — Art. 6(1)(f) GDPR.
§4. Retention periods
- Content of questions and dreams – 30 days after delivery.
- Email and order identifiers – 3 years, or until claims are time-barred.
- Transaction data – 5 years (tax law).
- Server logs – up to 12 months.
- Correspondence – 3 years after case closure.
After these periods, the data is permanently deleted or anonymised.
§5. Data recipients
The data may be transferred to the following recipients:
Przelewy24 (PayPro S.A.)
Poznań, Poland. Payment processing. Independent controller.
Resend Inc.
San Francisco, USA. Email delivery. Standard Contractual Clauses.
Render Services Inc.
San Francisco, USA. Application hosting. SCC.
Supabase Inc.
San Francisco, USA (database in the EU, eu-west-1). Storage of application data.
Microsoft Azure (Microsoft Corporation)
Redmond, USA. AI-assisted content generation. SCC. Data is not used to train models.
The Controller does not sell personal data and does not share it with third parties for marketing purposes.
§6. Transfers outside the EEA
Because of the use of US-based providers (Resend, Render, Microsoft), data may be transferred outside the EEA under Standard Contractual Clauses (SCC). The database (Supabase) is hosted in the EU region.
§7. Your rights (GDPR)
- Right of access (Art. 15).
- Right to rectification (Art. 16).
- Right to erasure (Art. 17) — “right to be forgotten”.
- Right to restriction (Art. 18).
- Right to data portability (Art. 20).
- Right to object (Art. 21).
- Right to withdraw consent (Art. 7(3)).
- Right to lodge a complaint (Art. 77) — Polish DPA (UODO), ul. Stawki 2, 00-193 Warsaw.
To exercise your rights, write to: contact@getansweronline.com. We respond within 30 days.
§8. Automated content generation
The content of answers (Tarot reading, dream interpretation) is generated automatically based on data provided by the User.
This processing is necessary to perform the contract (Art. 22(2)(a) GDPR), has an entertainment character and does not produce legal effects for the User. It does not constitute profiling.
§9. Cookies
The Website uses cookies:
- Necessary (technical) – Art. 6(1)(f) GDPR.
- Functional – remember preferences (e.g. language). Art. 6(1)(a) GDPR (consent).
- Analytics – statistics. Art. 6(1)(a) GDPR (consent).
You can disable cookies in your browser settings; some features may stop working.
§10. Data security
- SSL/TLS encryption (HTTPS),
- encryption of data in the database,
- regular security updates,
- access control,
- strong authentication for the admin panel,
- regular backups,
- monitoring.
Payments are processed by a PCI-DSS-certified operator.
§11. Voluntariness and minors
Providing personal data is voluntary but necessary for the service. The services are intended only for adults (18+). We do not knowingly collect personal data from minors.
§12. Changes to the Policy
The Controller reserves the right to amend the Policy. We will inform Users of significant changes through the Website.
§13. Contact
For data-protection matters, contact the Controller:
