“PRIMAVERA HOME Sp. z o.o Sp. K-A” is the publisher and operator (referred to as the “Company”, “we”, “our” or “us”) of the “www.blogger-bank.com”, www.blogger-bank.pl” website (referred to as the “Website”) and of the Blogger Bank mobile application for iOS and Android (referred to as the “App”). Unless stated otherwise, everything in this privacy policy about the Website also applies to the App.
The Company is committed to protecting your privacy and handling your personal data in an open and transparent manner. The personal data that we collect and process will vary depending on how you use the Website.
- provides an overview of how the Company collects and processes your personal data and tells you about your rights under the EU General Data Protection Regulation (“GDPR”);
- is directed to individuals who are: (a) visitors of the Website (referred to in this privacy policy as “Browsers”); (b) natural and/or legal persons who have registered as members of the Website by creating their own account (referred to in this privacy policy as “Members”).
For the purposes of this privacy policy:
- when we refer to “personal data” or “personal information” we mean data which identifies or may identify you and which may include, for instance, your email or IP address;
- when we refer to “processing” we mean the handling of your personal data by us, including collecting, protecting and storing your personal data;
- and when we refer to “sensitive data” we mean personal data which may reveal information about racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, genetic or biometric data."
Who we are
“PRIMAVERA HOME Sp. z o.o Sp. K-A” is registered in Primavera Home Sp. z o.o. Sp. K-A, Warszawa ul. Kłobucka 23B/U1, 02‐699
If you have any questions, comments and/or requests regarding this privacy policy or wish to obtain more details in relation to the personal data we process about you, please contact us by sending an email to support@blogger-bank.com
How we collect your personal data
- when you visit and/or use our Website;
- when you complete our registration form;
- when you request a demo session;
- when you take part in surveys or report a problem with our Website;
- when you contact us via email, post or other ways of communication;
- when you interact with our advertising and applications on third-party websites and services, if those applications or advertising include links to this privacy policy.
- us offline or through any other means, including on any other website operated by us or any third party (including our affiliates and subsidiaries);
- any third party (including our affiliates and subsidiaries), including through any application or content (including advertising) that may link to or be accessible from or on the Website. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.
If you fail to provide personal data
Where we need to collect and process your personal data in order to provide you with our services and you fail to provide that data when requested, we may not be able to provide you with access to our Website and/or the services we offer. In this case, we may have to suspend your access to the Website or, if you are a Member, prohibit any access to non-public areas of the Website or restrict the operation of your account and the services we provide to you.
Personal data that we collect and process
We will collect different categories of personal data from you depending on your level of interaction with our Website. We will limit the collection and processing of information to information necessary to achieve one or more of our legitimate purposes as identified in this privacy policy.
- Technical Data, including your Internet Protocol (IP) address and associated country, your browser type and version, time zone setting and location, smart device information, mobile phone network information, operating system and platform and other technology on the devices you use to access this Website;
- Cookies including web beacons. For more information on the cookies we collect, please see the “Cookies” section below;
- Usage Data, including your communication preferences and information about how you use our Website including the services you viewed or searched for, page response times, download errors, length and number of visits and page interaction information (such as scrolling, clicks and mouse-overs) as well as the links you clicked on or used. To learn more about our use of cookies or similar technology, please see the “Cookies” section below;
- Traffic Source Data, including the UTM tags, the referring address and the landing page through which you arrived at the Website, as described in the “Recording where you came from” section below;
- User Submitted Data, including data collected for a specific function, for instance a contest or a survey;
- Communications and correspondence, including any correspondence between you and us or between you and the party involved in the enforcement process , including customer service requests, emails and live chats;
- Consents, including any permissions, consents or preferences that you give to the Website.
- All personal data we collect from Browsers, set out in paragraph 4(a) above;
- Identity and Contact Data, including email address, username or similar identifier, password and full name. We may also collect your photo or video, if such is uploaded to your profile;
- Identity Data, including addresses, names, email addresses, phone numbers of employees of the legal entity which are disclosed to us from time to time;
- Usage Data, including data about which products you use and purchase, all tasks and orders you place on the Website and all metrics and measurements regarding your tasks and orders and any other of your activities on the Website;
- User Submitted Data, including data collected at your discretion for a specific function;
- Financial and Transactional Information, including bank account, direct debit data, billing address and fund transfers and other details of products and services you have purchased or received from us;
- Contact Data for marketing, including your mobile phone number, where you provide it and consent to receive SMS messages from us;
- Marketing Data, including your preferences for receiving marketing from us by email, SMS, push notification and in-app message, your consent and withdrawal history, and online identifiers (cookie identifiers, advertising identifiers, and your hashed email address and hashed phone number) used to show you relevant advertising on third-party platforms.
We may also collect, use and share aggregated data such as statistical or demographic data for the purpose of customizing our marketing efforts or the use of our Website. Aggregated data may be derived from your personal data but is not considered personal data as this data does not directly or indirectly reveal your identity. For instance, we may aggregate your Usage Data to calculate the percentage of users accessing a specific Website feature, to generate statistics about our users, to calculate the percentage of users accessing a specific Website feature, to calculate ad impressions served or clicked on, or to publish visitor demographics. If we combine or connect aggregated data with your personal data so that it can directly or indirectly identify you, we will treat the combined data as personal data which shall be used in accordance with this privacy policy.
Automated personal data collection
As you navigate through and interact with our Website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect these data by using cookies and other similar technologies. We may also use these technologies to collect information about your online activities across third-party websites. Please see the “Cookies” section below for further details.
Some of these technologies are provided by third parties and are used for analytics or advertising purposes, including the Meta Pixel and the Meta Conversions API, the OpenAI Ads pixel and the OpenAI Conversions API, and the TikTok Pixel described in the “Cookies” section below. Technologies that are not strictly necessary for the operation of the Website are activated only after you have given your consent, and are deactivated if you withdraw it.
Recording where you came from
When you arrive at the Website, we record the source of your visit: the UTM tags in the address of the link you followed (utm_source, utm_medium, utm_campaign and similar tags that name the advertising channel and campaign), the address of the page that referred you and the page of the Website on which you landed. If you then submit a request form, we link this information to your request; if you register as a brand or a blogger, we may also link it to your account.
We do this to understand which marketing channels and campaigns bring visitors and members to the Website, so that we can decide where to invest in marketing. We use the results in aggregated form and do not use them to make any decision about you.
We keep the source of your first visit and of your latest one in the bb_utm cookie. It is stored on your device only if you have consented to analytics cookies; without that consent the data is held only for the duration of your visit and is not stored on your device. Legal basis: storing and reading the cookie – your consent (Article 399 of the Polish Electronic Communications Act); linking the traffic source to your request or account – our legitimate interest in measuring the effectiveness of our marketing (Article 6(1)(f) GDPR).
The bb_utm cookie is kept for 12 months. The traffic source linked to a request is kept for as long as we keep that request, and the traffic source linked to an account is kept for as long as the account exists. You may object to this processing at any time by emailing support@blogger-bank.com; we will then remove the traffic source from your request or account, unless we demonstrate compelling legitimate grounds that override your interests. You can withdraw your consent to the cookie at any time through the cookie settings available on the Website.
Data from the social media accounts you connect
If you are a Blogger, you can connect your Instagram, Facebook, YouTube and TikTok accounts to your profile. You do this in the platform’s own window, where you see exactly what you allow. You can also add a link to an account on another platform, for example Telegram, by hand. We use the access you give only to read data. We never post, edit or delete anything on your accounts.
- Instagram (Meta Platforms Ireland Limited, professional accounts): your account ID, username, profile picture, bio and follower count; for your posts, their type, link, image or video link, publication time, views and reach; account statistics for the last 7 to 90 days (followers, reach, views, accounts engaged, follows and unfollows); and a summary of your followers by gender, age, country and city. We do not receive post captions, messages or comments.
- Facebook (Meta Platforms Ireland Limited): your Facebook ID and name; for each Facebook Page you manage and allow us to access, its ID, name, category, picture, description and number of followers; for posts of the last 180 days, their text, link, image link, publication time, views, reactions and video watch time by country, age and gender; and Page statistics (views, engagement, follows and unfollows). From the watch time we calculate a summary of your audience by country, age and gender.
- YouTube (Google Ireland Limited): your channel ID, name, link, picture, description and number of subscribers. We do not read your videos or any data about your viewers.
- TikTok (TikTok Technology Limited): your TikTok ID, username, display name, profile picture, profile link, bio and follower count; and for your videos of the last 90 days, their publication date, cover image and numbers of views, likes, comments and shares. TikTok gives us no reach or audience data.
- A link you add by hand (for example Telegram): only the link and the details you type yourself. We read nothing from that platform.
Audience data is always a summary, such as the share of followers from one country. We never receive data about individual followers or viewers.
If your profile has no photo or description yet, we copy your profile picture and bio from the account you connect. You can change them at any time.
Why we use it. We show these numbers on your Blogger profile, so that Advertisers can see real results before they hire you. We also use them to check that the account is yours and active, for the verification badge and for your profile completeness score. Legal basis: the performance of our contract with you (Article 6(1)(b) GDPR).
Who sees it. The link to your account and your number of followers are part of your Blogger profile. Statistics, posts and audience data are visible only to you, to Advertisers with an active subscription and to Advertisers who have hired you. We do not sell this data and we do not pass it to the platforms or to anyone else.
How often we read it. When you connect an account, and then automatically, usually once a day. We store the access keys the platform gives us, so that we can keep the data up to date. We store TikTok video covers on our servers, because TikTok links stop working after a few hours.
How long we keep it. We keep the data while the account is connected to your profile. TikTok videos older than 90 days, and TikTok videos you delete or make private, are removed at the next daily update. When you disconnect an account in your profile, we delete all data we received from that account, together with the access keys. The photo and description we copied into your profile stay until you change them. When you delete your Blogger Bank account, we delete all data we received from your connected accounts.
How to stop it. You can disconnect any account in your profile at any time. You can also remove Blogger Bank from the apps connected to your account in the platform’s settings. After that we can no longer read new data. The last data we read stays on your profile until you disconnect the account in Blogger Bank or delete your Blogger Bank account.
Why we need your personal data and how we use it
We will only use and share your information where it is necessary for us to provide you with our lawful services in accordance with this privacy policy. We would like to ensure that you fully understand why your information may be used. We will only use your personal data when the applicable local law allows us to.
- where we need to perform our services to you, as necessary in accordance with our Website’s Terms of Use;
- where it is necessary for our legitimate interests (or those of a third party) and your interests and fundamental rights do not override those interests;
- where we need to comply with a legal or regulatory obligation;
- where you have given us your consent.
Below, we describe these circumstances in further detail.
— Performance of our services to you
- Provision of services. We may collect and process your personal data where it is necessary in order to present our Website and its contents to you, including any interactive features on our Website and to provide you with information, products or services that you request from us. Please note that if you do not agree to provide us with the requested information, it may not be possible for us to continue to operate your account and/or provide you with the services we provide to our Members.
- Customer management (Members Only). We may collect and process your personal data where it is necessary in order to manage a Member’s account, to provide customer support and notices to Members about their account and/or subscription, including expiration and renewal notices, and inform you about any notices about changes to our Website or any products or services we offer or provide through it.
— Legitimate interests
- Customization of content (Members Only). We may collect and process your personal data where it is necessary in order to perform research and analysis about your use or, or interest in, our Website content and/or services, so as to develop and display content and advertising tailored to your interests on our Website.
- Analytics. We may collect and process your personal data where it is necessary in order to determine whether users of the Website are unique, or whether the same user is using the Website on multiple occasions, and to monitor aggregate metrics such as total number of visitors, pages viewed and demographic patterns. Where such analytics rely on cookies or similar technologies on your device, we use them only with your consent (see the “Cookies” section below).
- Traffic source. We record where you came from and link it to your request and, where applicable, to your account, as described in the “Recording where you came from” section above.
- Functionality and security. We may collect and process your personal data where it is necessary to diagnose or fix technology problems, and to detect, prevent, and respond to actual or potential fraud, illegal activities, or intellectual property infringement.
- Other legitimate interests. In addition to the above, we may process your data, to the extent required for our business needs in order to:
- develop new services on our Website as well as analyze and target new markets;
- protect our legal rights and interests (including legal claims and preparing our defense in litigation);
- monitor, maintain and improve internal business processes, information and data, technology and communication solutions and services;
- ensure network information security, including monitoring Browsers’ and Members’ access to our information technology for the purpose of preventing cyber-attacks, unauthorized use of Website and prevention or detection of crime;
- send you relevant marketing information (including details of other services provided by us which we believe may be of interest to you), but only where you are Members of the Website (For more information, see “Choices About How We Collect, Use and Disclose Your Personal Information”);
- monitor the performance and effectiveness of our services and the Website;
- assess the quality of our customer services.
— For compliance with legal obligations
- perform checks and comply with laws relating to fraud;
- identify other infringements of our Terms of Use;
- manage contentious regulatory matters, investigations and litigation.
— You have provided your consent
We rely on your consent for the purposes listed below. You may give or withhold each of these consents freely and independently of the others, and you may withdraw any of them at any time. Withholding or withdrawing these consents has no effect on your ability to register for, access or use the Website and our services.
- Marketing communications by email. We process your email address, name and communication preferences in order to send you newsletters, offers and information about our services. Legal basis: your consent under Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Act (Prawo komunikacji elektronicznej).
- Marketing communications by SMS. We process your mobile phone number and name in order to send you marketing messages by SMS. Legal basis: your consent under Article 6(1)(a) GDPR and Article 398 of the Polish Electronic Communications Act.
- Analytics cookies. We use analytics cookies and similar technologies to understand how visitors use the Website and where they come from. Legal basis: your consent under Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Act.
- Personalised advertising and retargeting on third-party platforms. We process online identifiers, your hashed email address and hashed phone number, and information about your activity on the Website, in order to show you our advertising on third-party platforms, in particular Facebook and Instagram operated by Meta, and to measure the effectiveness of our advertising on Meta, in ChatGPT operated by OpenAI and on TikTok. Legal basis: your consent under Article 6(1)(a) GDPR and Article 399 of the Polish Electronic Communications Act.
- Audience matching. We provide irreversibly hashed identifiers (email address, phone number) to Meta so that Meta can match them against its own users and deliver our advertising to you. Legal basis: your consent under Article 6(1)(a) GDPR.
You can give, change or withdraw each of these consents at any time in your notification settings at blogger-bank.com/settings/notifications, by using the unsubscribe link included in every marketing email, by replying STOP to any marketing SMS, or by emailing support@blogger-bank.com. Withdrawing your consent does not affect the lawfulness of processing carried out on the basis of that consent before it was withdrawn.
Who we share your personal data with
- to our authorized service providers that perform certain services on our behalf. These services may include fulfilling orders, processing credit card payments, risk and fraud detection and mitigation, providing customer service, performing business and sales analysis, customization of content, analytics, security, supporting our Website functionality, and supporting contests, surveys and other features offered through our Website. These service providers may have access to personal data needed to perform their functions but are not permitted to share or use such information for any other purposes;
- governmental and regulatory bodies, including law enforcement authorities, in connection with enquiries, proceedings or investigations by such parties or in order to enable the Company to comply with its legal and regulatory requirements. We specifically reserve the right to disclose any and all information to law enforcement in the event that a crime is committed or suspected or if we are compelled to do so by lawful criminal, civil or administrative process, discovery requests, subpoenas, court orders or writs, to enforce applicable terms of use, including investigation of potential violations thereof, to detect, prevent or otherwise address security or technical issues, protect against harm to the rights, property or safety of our company, our users, our employees, or others; or to maintain and protect the security and integrity of our Website or infrastructure. In such cases, we may raise or waive any legal objection or right available to us, in our sole discretion;
- buyers or other legal successors in the event of a merger, divestiture, restructuring, reorganization, dissolution or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation or similar proceeding, in which personal information held by us about our Website Members and Browsers, is among the assets transferred. Should such a sale or transfer occur, we will use reasonable efforts to ensure that the entity to which we transfer your personal data uses it in a manner that is consistent with this privacy policy;
- legal or other professional consultants.
- Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). Where you have given us the relevant consent, we (a) use the Meta Pixel and the Meta Conversions API to measure and optimise our advertising, and (b) provide Meta with irreversibly hashed identifiers (email address, phone number) so that Meta can match them against its own users and show you our advertising on Facebook and Instagram. We never provide Meta with your data in readable form. For the collection of this data and its transmission to Meta, the Company and Meta act as joint controllers within the meaning of Article 26 GDPR; Meta processes the data thereafter as an independent controller under its own privacy policy. The allocation of responsibilities between us is set out in Meta’s Controller Addendum, available at facebook.com/legal/controller_addendum. You may withdraw this consent at any time, and we will remove you from our advertising audiences at Meta without undue delay.
- OpenAI (OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland). Where you have given us the relevant consent, we use the OpenAI Ads pixel and the OpenAI Conversions API to measure the effectiveness of our advertising in ChatGPT, as described in the “Cookies” section below. We provide OpenAI only with irreversibly hashed identifiers, never with your data in readable form.
- TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland). Where you have given us the relevant consent, we use the TikTok Pixel to measure visits to the Website from our advertising on TikTok.
- providers of analytics and error monitoring services: Google Ireland Limited (Google Analytics, Google reCAPTCHA), Hotjar Ltd, Microsoft Ireland Operations Limited (Microsoft Clarity), Amplitude, Inc., Ahrefs Pte. Ltd. and Functional Software, Inc. (Sentry), as described in the “Cookies” section below;
- in the App: Adapty Tech Inc. (subscriptions purchased in the App), 650 Industries, Inc. (Expo, delivery of push notifications), Apple Inc. and Google Ireland Limited (push notifications and payments in the App Store and Google Play), as described in the “Mobile application” section below.
We may also disclose aggregated information about our users, and information that does not identify any individual, without restriction. We also may share aggregated information with third-parties for conducting general business analysis. This information does not contain any personal data and may be used to develop content and services that we hope you and other users will find of interest and to target content and advertising.
Please note that we have never sold and will never sell your personal data to third parties.
Financial Information
Financial information (including personal information) that you have provided to us will only be shared with our third-party processors in order to initiate and complete any tasks and orders placed on your account. All credit card transactions and such are processed with industry standard encryption through third party processors who only use your financial information and personal information for that purpose. All financial data and related personal information will not be shared by us with third parties except with your authorization or when necessary to carry out all and any transactions requested by you with the understanding that such transactions may be subject to rules, terms, conditions and policies of a third party. All such information provided to a third party is subject to their terms and conditions.
Security of your personal data
We take appropriate security measures (including physical, electronic and procedural measures) to safeguard your personal data from unauthorized access and disclosure. For instance, only authorized employees are permitted to access personal data, and they may do so only for permitted business functions. In addition, we use encryption in the transmission of your personal data between your system and ours, and we use firewalls to help prevent unauthorized persons from gaining access to your personal data.
You are responsible for maintaining the secrecy of your unique password and account information at all times. We are not responsible for circumventions of any privacy settings or security measures contained on the Website.
Information we transfer
Some of our external third parties are based outside the European Economic Area (“EEA”) so the processing of your personal data may involve a transfer of data outside the EEA.
- We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data by the European Commission.
- Where we use service providers outside the EEA, we may use specific contracts approved by the European Commission which give personal data the same protection it has in the European Union.
- Where we use providers based in the United States, we may transfer your personal data to them where they are certified under the EU-US Data Privacy Framework, in respect of which the European Commission has adopted an adequacy decision, and/or where the transfer is covered by the Standard Contractual Clauses approved by the European Commission, together with supplementary measures where these are necessary. This applies in particular to transfers connected with our use of the advertising tools of Meta, OpenAI and TikTok and of the analytics and error monitoring services listed in the “Cookies” section, to Adapty in connection with subscriptions in the App and to Expo in connection with push notifications in the App. You may request a copy of the safeguards we rely on by emailing support@blogger-bank.com.
We may additionally, in rare occasions, transfer your personal data to a party outside the EEA where we have your prior explicit consent to do so or where such transfer is necessary for the provision of our services to you.
Marketing information
We send you marketing communications about our services only where you have given us prior consent for the relevant channel. We ask for that consent separately for email and for SMS, and separately again for personalised advertising on third-party platforms. We do not rely on our legitimate interests as a basis for sending you marketing by email or by SMS.
You have the right under Article 21(2) GDPR to object at any time, free of charge and without giving reasons, to the processing of your personal data for direct marketing purposes, including profiling carried out for those purposes. If you object, we will stop that processing.
- changing your preferences at blogger-bank.com/settings/notifications;
- clicking the unsubscribe link in any marketing email;
- replying STOP to any marketing SMS;
- emailing us at support@blogger-bank.com.
We action such requests without undue delay and in any event within 72 hours. Where you withdraw your advertising consent, we will also stop including you in advertising audiences we create on third-party platforms and will request removal of your data from those audiences.
Regardless of your marketing preferences, we will continue to send you service messages relating to your account, your contracts, your payments and the security of the Website. These messages are not marketing and cannot be switched off.
How long we keep your personal data for
We will only keep your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect of our relationship with you.
To determine the appropriate retention period for personal data, we consider the amount, nature and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
Where we no longer need to process your personal data for purposes set out in this privacy policy, we will delete your personal data from our systems. However, we may keep your data for longer if we cannot delete it for legal, regulatory or technical reasons. If we do, we will make sure that your privacy is protected and that your data are only used for those purposes. The period for which we keep your personal information that is necessary for compliance and legal enforcement purposes varies and depends on the nature of our legal obligations and claims in the individual case.
Marketing and advertising data. Where we process your data on the basis of your consent for marketing or advertising purposes, we keep that data until you withdraw your consent or object, and in any event we review it every 24 months and ask you to confirm your preferences if you have been inactive. Records evidencing your consent and its withdrawal are kept for 3 years after the consent ends, so that we can demonstrate compliance and defend against possible claims. Advertising audiences created on third-party platforms are refreshed at least every 30 days, and users who have withdrawn their consent are removed at each refresh.
Where permissible, we will also delete your personal data upon your request. Information on how to make a deletion request can be found under the paragraph “Your data protection rights” below.
If you have questions about our data retention practices, please contact us electronically by sending an email at support@blogger-bank.com
Your data protection rights
Subject to local law, you have certain rights regarding the personal data we collect, use or disclose and that is related to you. We want to make sure you are aware of your rights in relation to the personal data we process about you. We have described those rights and the circumstances in which they apply further below.
Right to Access: This enables you to get access or receive a copy of the personal data that we hold about you and to check that we are lawfully processing it.
Right to Data Rectification and Correction: If you believe that any of the information that we hold about you is inaccurate or incomplete, you have a right to request that we correct the inaccurate personal information.
- we no longer need to process your information for the purposes for which it was provided;
- we have requested your permission to process your personal information and you wish to withdraw your consent;
- we are not using your information in a lawful manner.
Right to object: You have the right to object to processing of your personal data where we are relying on a legitimate interest and there is something about your particular situation which makes you want to object to processing on this ground. If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedom or for the establishment, exercise and defense of legal claims.
You also have the right to object where we are processing your personal data for direct marketing purposes. This also includes profiling in as much as it is related to direct marketing.
If you object to processing for direct marketing purposes, then we shall stop the processing of your personal data for such purposes.
You can exercise this right at any time and free of charge by changing your preferences at blogger-bank.com/settings/notifications, by clicking the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by emailing support@blogger-bank.com. Where you object to direct marketing or withdraw your advertising consent, we will also stop including you in advertising audiences we create on third-party platforms and will request removal of your data from those audiences without undue delay.
Depending on the circumstances, we may need to restrict or cease processing your personal data altogether or, where requested, delete your personal data. Please note that if you object to us processing your personal data, we may have to suspend the services we provide to you.
- it is not accurate;
- it has been used unlawfully but you do not want us to delete it;
- it is not relevant any more, but you want us to keep it for use in possible legal claims;
- you have already asked us to stop using your personal data but you are waiting for us to confirm if we have legitimate grounds to use your personal data.
Please note that if you request us to restrict processing of your personal data, we may have to suspend the services we provide to you.
Right to data portability: Where we have requested your permission to process your personal data or you have provided us with information for the purposes of entering into a contract with us, you have the right to receive the personal data you provided to us in a portable format. You may also request us to provide it directly to a third party, if technically feasible. We are not responsible for any such third party’s use of your account information, which will be governed by their agreement with you and any privacy statement they provided to you.
If we ask for your consent to use your personal data, you can withdraw your consent at any time. Please note that in case of a withdrawal of your consent you may no longer be able to use several functionalities of our Website and our services.
Please note that some requests to delete certain personal data will require the deletion of your account as a Member as the provision of Member accounts is inextricably linked to the use of certain personal data (e.g. your email address). Also note that it is possible that we require additional information from you in order to verify your authorization to make the request and to honor your request.
To exercise any of your rights, or if you have any other questions about our use of your personal data, please contact us electronically by sending us an email at support@blogger-bank.com or by post at Primavera Home Sp. z o.o. Sp. K-A, Warszawa ul. Kłobucka 23B/U1, 02‐699 . We endeavor to address all your requests promptly.
How to access or modify your personal data
- access/modify the information in your profile provided during registration;
- block cookies, including cookies associated with our services, by activating or deactivating the related cookies on your browser. Please note, however, that if you choose to disable all cookies (including essential cookies) you may not be able to access all or part of our Website. Please see the “Cookies” section below for more information.
Choices About How We Collect, Use and Disclose Your Personal Information
- You can choose not to provide us with certain personal information, but that may result in you being unable to use certain features of our Website because such information may be required in order for you to register as a Member; purchase products or services; ask a question; or initiate other transactions on our Website.
- You can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. Please see the “Cookies” section below for more information.
- When you register on our Website, you may be given a choice as to whether you want to receive email messages, newsletters or both about product updates, improvements, special offers, or containing special distributions of content by us. If you no longer want to receive commercial or promotional emails or newsletters from us, you will need to avail yourself of the unsubscribe mechanism set out in the applicable communication. It may take up to seven days for us to process an opt-out request. We may send you other types of transactional and relationship email communications, such as service announcements, administrative notices, and surveys, without offering you the opportunity to opt out of receiving them. Please note that opting out of receipt of promotional email communications will only affect future activities or communications from us. If we have already provided your information to a third party before you have changed your preferences or updated your information, you may have to change your preferences directly with that third party.
- If you submit personal information, you may delete your account with us at any time. If you delete your account, your Personal Information and any and all other account related information including, but not limited to, user profile data, sharing data and any other data, or content specifically associated with your account will no longer be accessible by you. After deleting your account, if you choose to have an account with us in the future, you will have to sign up for a new account as none of the information you previously provided or saved within your account will have been saved.
Our communication with you
If you have any questions about this privacy policy or our information-handling practices, please contact us electronically at support@blogger-bank.com or by post at Primavera Home Sp. z o.o. Sp. K-A, Warszawa ul. Kłobucka 23B/U1, 02‐699 .
Right to complain
If you wish to lodge a complaint about how your personal data is used by the Company, you may contact us electronically at the email address support@blogger-bank.com or by post at Primavera Home Sp. z o.o. Sp. K-A, Warszawa ul. Kłobucka 23B/U1, 02‐699 .
Upon receipt of your complaint, we will investigate it and respond to you within a reasonable time.
We will cooperate with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the collection, use and disclosure of personal data that cannot be resolved by an individual and us.
You also have the right to complain to the data protection supervisory authority of the country in which you reside, provided that such country is a Member.
Third-party links
Our Website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. We specifically disclaim responsibility for their content, privacy practices and terms of use, and we make no endorsements or representations about their accuracy, content or thoroughness. When you leave our Website, we encourage you to read the privacy policy of every website you visit.
Changes to this privacy policy
We reserve the right to update, revise, amend and/or modify this privacy policy at any time in order to reflect any changes to the way in which we process your personal data or changing legal requirements.
Although we will notify you when major changes are made to this privacy policy, you are expected to periodically review the most up-to-date version found athttps://blogger-bank.com/privacy-policyso you are aware of any changes. The date of the latest version of the privacy policy will appear at the top of the webpage hosting the policy.
Cookies
Cookies are small text files that a website stores on your device. Similar technologies, such as your browser’s local storage and session storage and tracking pixels, work in a similar way; in this privacy policy we refer to all of them as “cookies”.
Without your consent we use only strictly necessary cookies: they sign you in and keep your session secure, protect our forms against bots, remember your language and remember your cookie choices. Legal basis: Article 399(3) of the Polish Electronic Communications Act and our legitimate interest in providing a working and secure Website (Article 6(1)(f) GDPR).
All other cookies (analytics and advertising) are placed and read only after you have given your consent through our cookie banner, separately for each category. Until you answer the banner, none of them is set. Legal basis: your consent under Article 399(1) of the Polish Electronic Communications Act and Article 6(1)(a) GDPR. You can change or withdraw your choice at any time through the cookie settings available on the Website; withdrawing your consent does not affect the lawfulness of processing carried out before it was withdrawn. You can also delete cookies or block them in your browser settings.
Meta Pixel and Meta Conversions API. Where you have given your consent, we use the Meta Pixel (which sets cookies such as _fbp and _fbc) and the server-side Meta Conversions API in order to measure the effectiveness of our advertising and to build advertising audiences. These tools are not loaded and transmit no data about you until you have given your consent through our cookie banner. If you refuse that consent, or later withdraw it, neither the Meta Pixel nor the Meta Conversions API will transmit data about you. You can change your choice at any time through the cookie settings available on the Website.
OpenAI Ads pixel and OpenAI Conversions API. Where you have given your consent to advertising cookies, we use the OpenAI Ads pixel (ChatGPT Ads) and the server-side OpenAI Conversions API in order to measure the effectiveness of our advertising in ChatGPT. When you click our advertisement in ChatGPT, OpenAI adds a click identifier (oppref) to the address of our Website; the pixel stores it in the __oppref cookie and sets the __obref cookie, a random identifier of your browser. The pixel records the pages you view, such as our pricing, blogger and task pages. When you register, submit our demo request form, publish a task, apply to a task for the first time, send the first message in a chat, start a subscription checkout or pay for an order, we send OpenAI a record of that event together with these identifiers and with irreversibly hashed identifiers (email address, phone number, first and last name, user ID), so that OpenAI can link the event to the advertisement you clicked. We never provide OpenAI with your data in readable form. Without your consent the pixel is not loaded and no cookies are set; where an event happens on our servers (for example, a subscription payment), we send OpenAI at most an anonymous record that the event occurred, marked as not consented, without any of the identifiers above and without your IP address. You can change your choice at any time through the cookie settings available on the Website. More information: openai.com/policies/privacy-policy.
TikTok Pixel. Where you have given your consent to advertising cookies, we use the TikTok Pixel in order to measure visits to the Website from our advertising on TikTok. The pixel records the pages you view and your IP address and browser information and sets the cookies listed below. We do not send TikTok your email address, phone number or other contact details. Without your consent the pixel is not loaded. More information: tiktok.com/legal/privacy-policy-eea.
Analytics. Where you have given your consent to analytics cookies, we use Google Analytics, Hotjar, Microsoft Clarity, Amplitude and Ahrefs Web Analytics in order to understand how visitors use the Website and which pages and features work well. Hotjar and Microsoft Clarity record how you move around our pages (clicks, scrolling, mouse movement); what you type into form fields is masked and is not recorded. We also record the source of your visit as described in the “Recording where you came from” section.
Error monitoring. We use Sentry in order to detect and fix errors on the Website: when an error occurs, we receive a technical report about it, including your IP address and browser information. Legal basis: our legitimate interest in a working and secure Website (Article 6(1)(f) GDPR). Only if you have consented to analytics cookies, Sentry may also keep a short record of the page leading up to the error, with all text and form inputs masked.
The cookies we use:
- next-auth.session-token, next-auth.csrf-token, next-auth.callback-url – Blogger Bank – keep you signed in and protect the sign-in form – up to 7 days (the session) or until you close the browser;
- NEXT_LOCALE – Blogger Bank – remembers your language – 12 months;
- cookieyes-consent – CookieYes – remembers your cookie choices – 12 months;
- _GRECAPTCHA – Google reCAPTCHA – protects the registration, sign-in and password reset forms against bots – 6 months;
- local storage and session storage of Blogger Bank (for example, notices you have closed and the page to return to after signing in) – until you clear them.
- bb_utm – Blogger Bank – the UTM tags, referring page and landing page of your first and latest visit (traffic source) – 12 months;
- _ga, _ga_* – Google Analytics – distinguish visitors – 24 months;
- _hjSessionUser_*, _hjSession_* – Hotjar – distinguish visitors and visits – 12 months and 30 minutes;
- _clck, _clsk – Microsoft Clarity – distinguish visitors and visits – 12 months and 1 day;
- AMP_*, AMP_MKTG_* – Amplitude – distinguish visitors and remember the source of the visit – 12 months;
- sentryReplaySession (session storage) – Sentry – a short masked record of the page before an error – until you close the tab;
- Ahrefs Web Analytics does not set cookies.
- _fbp, _fbc – Meta – distinguish browsers and store the Meta advertisement click identifier – 90 days;
- __oppref, __obref – OpenAI – store the ChatGPT advertisement click identifier and a random identifier of your browser – 30 days and 12 months;
- _ttp, _tt_enable_cookie, ttcsid – TikTok – distinguish browsers and visits from TikTok advertising – up to 13 months;
- bb_attr (local storage) – Blogger Bank – keeps the advertisement click identifiers above until you register, so that a later conversion can be attributed to the advertisement – until you withdraw your consent or clear your browser data.
Mobile application
The App uses the same account as the Website and processes the same personal data. In addition, the App processes the data described below.
- Device data. The device model, the operating system and its version, the App version, language, time zone and screen size, in order to run the App and fix errors. Legal basis: performance of the contract (Article 6(1)(b) GDPR) and our legitimate interest in a working and secure App (Article 6(1)(f) GDPR).
- Push notifications. If you allow notifications in your device settings, we store the push token of your device and send notifications through the Expo push service (650 Industries, Inc., United States), which receives the push token and the content of the notification and delivers it through Apple Push Notification service (Apple Inc.) or Firebase Cloud Messaging (Google Ireland Limited). You can turn notifications off at any time in your device settings.
- Advertising measurement. Only if you have given your consent in the App (on Android in the App’s consent window, on iOS through the system prompt that asks to allow tracking), we record that the App was installed, opened and that you registered, and pass this to Meta (Meta SDK and Meta Conversions API) and to OpenAI (ChatGPT Ads) together with your user ID, the device data above and, on Android, the device’s advertising identifier. We do not collect the advertising identifier of iOS devices. Without your consent these tools are not started and nothing is sent. You can change your choice at any time in the App under Settings → Privacy. Legal basis: your consent under Article 399(1) of the Polish Electronic Communications Act and Article 6(1)(a) GDPR.
- Subscriptions purchased in the App. Payments are processed by Apple (App Store) or Google (Google Play) under their own terms; we do not receive your payment card details. To manage the subscription we use Adapty (Adapty Tech Inc., United States), which receives your user ID, email address, company name, information about your purchases and the subscription screens you view. For brand accounts this happens each time the App starts, so that the App can check the status of your subscription and restore purchases. Legal basis: performance of the contract (Article 6(1)(b) GDPR).
- Data stored on your device. The App keeps on your device the data it needs to work (sign-in, settings and your consent choices). Data for advertising measurement is stored on the device only after you have given your consent.
- Traffic source. On Android, the App may record the UTM tags of the Google Play link through which it was installed, as described in the “Recording where you came from” section.
No Error Free Performance
We do not guarantee error-free performance under this privacy policy. We will use reasonable efforts to comply with this privacy policy and will take prompt corrective action when we learn of any failure to comply with our privacy policy. We shall not be liable for any incidental, consequential or punitive damages relating to this privacy policy.
1. Introduction
“PRIMAVERA HOME Sp. z o.o Sp. K-A” is the publisher and operator (referred to as the “Company”, “we”, “our” or “us”) of the “www.blogger-bank.com”, www.blogger-bank.pl” website (referred to as the “Website”) and of the Blogger Bank mobile application for iOS and Android (referred to as the “App”). Unless stated otherwise, everything in this privacy policy about the Website also applies to the App.
The Company is committed to protecting your privacy and handling your personal data in an open and transparent manner. The personal data that we collect and process will vary depending on how you use the Website.
This Privacy Policy outlines how we collect, use, and safeguard your data when you visit our website.
- provides an overview of how the Company collects and processes your personal data and tells you about your rights under the EU General Data Protection Regulation (“GDPR”);
- is directed to individuals who are: (a) visitors of the Website (referred to in this privacy policy as “Browsers”); (b) natural and/or legal persons who have registered as members of the Website by creating their own account (referred to in this privacy policy as “Members”).
- when we refer to “personal data” or “personal information” we mean data which identifies or may identify you and which may include, for instance, your email or IP address;
- when we refer to “processing” we mean the handling of your personal data by us, including collecting, protecting and storing your personal data;
- and when we refer to “sensitive data” we mean personal data which may reveal information about racial or ethnic origin, political opinions, religious beliefs, trade union activities, physical or mental health, sexual life, genetic or biometric data.
2. Information We Collect
- Personal Information: We may collect personal information such as your name, email address, or other identifiers when you voluntarily provide this information, for example, when you subscribe to our newsletter or leave comments on our blog posts.
- Non-Personal Information: We may automatically collect non-personal information, such as your IP address, browser type, and other technical data when you visit our website.
3. How We Use Your Information
- To improve our website and its content.
- To send you updates, newsletters, or marketing materials if you have subscribed to them.
- To respond to your comments or inquiries.
- To track and analyze website usage and trends.
4. Cookies and Tracking Technologies
We may use cookies and similar tracking technologies to enhance your experience on our website. Cookies and similar technologies that are not strictly necessary for the operation of the website, including advertising and analytics technologies, are used only where you have given your consent through our cookie banner, and you can withdraw that consent at any time through the cookie settings available on the website.
5. Disclosure of Information
We will not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers or business partners who assist us in operating our website or servicing you. We will only share your information for these purposes and require them to keep your information confidential.
6. Data Security
We employ security measures to protect your personal information from unauthorized access, disclosure, alteration, or destruction. However, please be aware that no data transmission over the internet can be guaranteed to be 100% secure.
7. Your Choices
We send you marketing communications only where you have given us prior consent for the relevant channel, separately for email and for SMS. You may withdraw that consent, and update or delete your personal information, at any time by changing your preferences at blogger-bank.com/settings/notifications, by using the unsubscribe link in any marketing email, by replying STOP to any marketing SMS, or by contacting us directly.
8. Children's Privacy
Our website is not intended for individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe that we may have collected information about your child, please contact us, and we will take appropriate steps to remove the data.
9. Changes to this Privacy Policy
We may update our Privacy Policy to reflect changes to our practices or for other operational, legal, or regulatory reasons. Any changes will be posted on this page, and the date of the last update will be revised accordingly.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, please contact us at support@blogger-bank.com or by post at Primavera Home Sp. z o.o. Sp. K-A, Warszawa ul. Kłobucka 23B/U1, 02‐699.
This Privacy Policy was last updated on 28.10.2026.