Privacy Policy
Privacy Policy
Last updated: September 2025
This Privacy Policy explains how we process personal data when you use hodlerpolls.com (the “Website”). We operate in accordance with the EU General Data Protection Regulation (GDPR).
Controller (Art. 4(7) GDPR)
Alexis Schmidt
Dockenhudener Str. 21
22587 Hamburg
Germany
Email: support@hodlerpolls.com
Overview of data we process & legal bases
- Server access logs (IP address, date/time, URL, referrer, user agent) to ensure security and troubleshoot.
Legal basis: Art. 6(1)(f) GDPR (legitimate interests). Retention: typically 7–30 days on the host, then deletion. - Poll participation data (selected options; anti-abuse data such as IP address and/or cookie/local-storage identifiers to prevent multiple votes).
Legal basis: Art. 6(1)(f) GDPR (operate the polls and prevent fraud). Retention: vote totals indefinitely; raw technical identifiers (e.g., IPs) for at most 30 days or as configured in the poll plugin, then deletion or anonymization. - Contact data if you email us (email address, message content).
Legal basis: Art. 6(1)(b) GDPR (respond to enquiries) and/or Art. 6(1)(f). - Analytics (optional) via Google Analytics in Site Kit – only if you consent via our cookie banner.
Legal basis: Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time via the cookie settings.
Cookies & similar technologies
We use necessary cookies/local storage for core functions (e.g., preventing duplicate votes). Analytics cookies are set only with your consent.
Type | Purpose | Examples | Storage | Legal basis |
---|---|---|---|---|
Strictly necessary | Prevent multiple votes; remember a vote to show results | poll_vote_* (cookie or local storage); plugin anti-abuse token | Up to 30 days (configurable) | Art. 6(1)(f) GDPR |
Analytics (optional) | Measure visits and performance | _ga*, _gid* (Google Analytics) | Up to 24 months | Art. 6(1)(a) GDPR (consent) |
Plugins & recipients
- WordPress & Poll Plugin (e.g., YOP Poll) – stores poll choices and anti-abuse identifiers (IP and/or cookie/local-storage). We configure minimal retention and, where available, hashing/anonymization for IPs.
- Google Site Kit – integrates Google services. If Analytics is enabled, we use IP anonymization and limit data to measurement purposes. Provider: Google Ireland Ltd. Data may be transferred to the USA under Standard Contractual Clauses.
- Hosting – our provider processes server logs and serves the Website on our behalf under a data processing agreement.
International transfers
When using Google services, data may be transferred to third countries (e.g., the USA). We rely on Art. 46 GDPR safeguards (Standard Contractual Clauses).
Retention
- Server logs: 7–30 days (host default).
- Poll anti-abuse identifiers (e.g., IP): kept for up to 30 days; aggregated poll results kept without personal identifiers.
- Contact emails: for the duration of correspondence and statutory retention where applicable.
Your rights (Arts. 15–21 GDPR)
- Right of access, rectification, erasure, restriction.
- Right to data portability (where applicable).
- Right to object to processing based on legitimate interests.
- Right to withdraw consent at any time (for analytics cookies).
- Right to lodge a complaint with a supervisory authority in your EU/EEA country.
Security
We use TLS/HTTPS and follow best practices for server and WordPress security (updates, limited retention, least-privilege access).
Children
This Website is not directed to children under 16. We do not knowingly collect data from children.
How to contact us
For privacy enquiries or to exercise your rights, email: support@hodlerpolls.com
Changes to this policy
We may update this Privacy Policy to reflect technical or legal changes. The current version is always available on this page.
Note: This template is provided without legal warranty. Please complete the placeholders (name, address, email, host) and review with your legal advisor if needed.