EuroStatsLab Privacy Policy

1. General information

1.1. This Privacy Policy describes how the EuroStatsLab service (eurostatslab.com), operated by IT Expert - Bartosz Kozik, collects, uses, stores, and protects users’ personal data.

1.2. The controller of your personal data is:

1.3. Processing is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and applicable Polish data protection legislation.

2. Data we collect

2.1. Data you provide voluntarily:

• First name
• Email address
• Password (stored in hashed form)
• Marketing consent (required when registering a free account) and the date it was given
• Billing details (name, address, VAT ID, email) — only if a paid service is introduced in the future

2.2. Data collected automatically:

• IP address
• Browser type and operating system
• Session identifiers and cookies
• Information about how you use the Service (e.g. pages visited, session duration)
• Payment-related information (if any) — processed by an external payment provider (EuroStatsLab does not store full card numbers)
• Saved number sets and analysis history associated with your account

3. Legal basis for processing

3.1. We process personal data on the following legal bases:

• Article 6(1)(b) GDPR — performance of a contract (account, free access to analytics services)
• Article 6(1)(a) GDPR — consent (analytics cookies; marketing communications required for free access)
• Article 6(1)(c) GDPR — legal obligation (invoices, tax and accounting rules — where applicable)
• Article 6(1)(f) GDPR — legitimate interests (security, fraud prevention, basic analytics, funding the free service with advertising)

4. Purposes of processing

Personal data are processed for the following purposes:

• Provision of services — account management, free access to the Eurojackpot analytics module, and DEMO mode
• Marketing and newsletter — newsletter subscription and marketing communications (including offers/ads from the Service provider, related entities and partners) based on consent at registration (a condition of free access)
• Communication — responding to enquiries and notifying you of Service changes
• Account activation — verifying your email address after registration
• Advertising and keeping the Service free — displaying ads and building a user base so the Service can remain free of charge
• Security — protection against unauthorised access and misuse

4.1. You may withdraw marketing consent by contacting contact@eurostatslab.com. Withdrawal may result in loss of free full access (DEMO / public features remain).

5. Cookies

5.1. The Service uses cookies to ensure proper operation of the website, maintain your session, and — with your consent — analyse traffic.

5.2. For a detailed description of cookie types, retention periods, and how to manage consent, see the Cookiebeleid.

5.3. You may change cookie settings in your browser at any time or withdraw consent by removing the entry in localStorage (key cookies_accepted).

6. Sharing of data

6.1. Personal data are not sold. They may be disclosed only:

• to the payment provider — to the extent necessary to complete the transaction
• to hosting and technical service providers — under data processing agreements
• to public authorities — where required by law

6.2. Partners are required to maintain confidentiality and appropriate security of data.

7. Data retention

• Active account — for the duration of use of the Service and up to 6 months after account deletion
• Invoices — 5 years (in line with Polish accounting law)
• Technical logs — up to 12 months, unless a longer period is justified for the establishment, exercise, or defence of legal claims

8. Your rights

You have, among others, the rights of access, rectification, erasure, restriction of processing, data portability, objection, and withdrawal of consent.

To exercise your rights, write to: contact@eurostatslab.com. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO).

9. Security

We use measures including HTTPS encryption, password hashing, restricted administrative access, and regular backups. No transmission of data over the Internet is entirely risk-free — you use the Service with that understanding.

10. Changes to this policy

The controller may update this Privacy Policy. We will inform you of material changes by email or a notice in the Service with at least 7 days’ advance notice. The currently applicable Gebruiksvoorwaarden is available at the linked address.