Dokumenty prawne regulujące Platformę

What we collect and why

For citizens: When you register via your country's eID system, the Platform receives identity attributes from your eID provider. These are immediately processed through a one-way cryptographic hash (SHA-256 with a seasonal salt). The Platform stores only the resulting fingerprint. Your name, ID number, date of birth, and other personal identifiers are never stored.

Your civic judgments (trust or distrust toward specific officials) are stored in anonymized form, linked only to your cryptographic fingerprint. We store your current judgment per official — not the history of changes.

Your email address (if provided for waitlist or notifications) is stored separately from your judgment data and can be deleted independently.

For officials (monitored subjects): We collect and publish publicly available information about officials exercising governmental authority: name, position, institution, jurisdiction, and authority level. This information is sourced from official government records and public databases.

For subscribers: We collect billing information (processed by Paddle) and account credentials. Billing data is not linked to judgment data.

Legal basis for processing

• Citizen judgment data: Legitimate interest (Article 6(1)(f) GDPR) — providing continuous accountability infrastructure in the public interest.
• Official profile data: Legitimate interest and public interest — officials exercising governmental authority are subjects of legitimate public scrutiny.
• Subscriber billing data: Contract performance (Article 6(1)(b) GDPR).
• Waitlist email addresses: Consent (Article 6(1)(a) GDPR), withdrawable at any time.

Data storage and residency

Citizen data for each country is stored on servers within that country's territory wherever possible. Where national infrastructure does not yet meet the Platform's security, uptime, and compliance requirements, data is stored within the EU in jurisdiction-appropriate infrastructure. In no case does citizen data leave the EU. National deployments are fully isolated.

AGPT Ltd is the data Controller for all national Platforms. Cloud infrastructure providers operate as Sub-processors under data processing agreements.

Data retention

• Citizen fingerprints: Retained while the account is active. Deleted permanently upon account deletion.
• Cryptographic salt: Rotated annually. Old salts permanently deleted after two years.
• Aggregated indices: Retained indefinitely as public statistical data. Cannot be traced to individuals.
• Subscriber billing data: Retained as required by UK tax and accounting law (typically 6 years).
• Waitlist emails: Retained until you unsubscribe or the waitlist period ends.

Twoje prawa wynikające z RODO

• Dostęp (art. 15) — prawo do kopii danych powiązanych z Twoim kontem.
• Sprostowanie (art. 16) — korekta nieprawidłowych danych.
• Usunięcie (art. 17) — trwałe usunięcie konta i wszystkich powiązanych danych.
• Ograniczenie (art. 18) — żądanie ograniczenia przetwarzania.
• Przeniesienie (art. 20) — otrzymanie danych w ustrukturyzowanym formacie.
• Sprzeciw (art. 21) — sprzeciw wobec przetwarzania opartego na uzasadnionym interesie.
• Skarga do Prezesa Urzędu Ochrony Danych Osobowych (UODO).

Ponieważ Platforma stosuje nieodwracalne haszowanie, większość danych osobowych nie jest przechowywana w identyfikowalnej postaci. Usunięcie konta trwale usuwa wszystkie powiązane dane.

Aby skorzystać ze swoich praw: Skontaktuj się z privacy@teisond.com. Odpowiadamy w ciągu 30 dni zgodnie z wymogami RODO.

International transfers

Citizen judgment data is not transferred outside the EU. AGPT Ltd (UK) accesses only aggregated, non-personal statistical outputs. The UK has an EU adequacy decision for data protection purposes.

Sub-processors

We use: cloud infrastructure providers (EU-based data centers), payment processor (Paddle), identity verification provider (Veriff), email service provider (for waitlist and notifications only). A current list is available upon request at privacy@teisond.com.