Voteum
Privacy policy

How we handle your data.

Last updated: 1 November 2026

This page covers how the Voteum pre-launch website (voteum.org) processes personal data — what we collect, why, who sees it, and your rights under the EU General Data Protection Regulation (GDPR, Regulation 2016/679). A separate policy will govern the product itself once it launches.

01Who we are

The Voteum website is operated by Avorado Korlátolt Felelősségű Társaság (1038 Budapest, Tündérliget utca 3. 3. ép. D. lház. 3., company reg. no. 01-09-282698), the data controller for this website. For any privacy question, write to office@voteum.org.

02What we collect

  • If you book a user interview: the name, email, and any intake answers you provide through our calendar tool (Google Calendar Appointment Schedules), and the slot you chose.
  • During the 45-minute interview: we take written notes. Calls are not recorded by default. If we ever want to record, we ask for your explicit consent in writing before the call.
  • If you visit the website: our hosting provider may log standard request metadata (IP address, user agent, timestamp) for security and operations.

We do not run advertising, third-party trackers, or behavioural profiling.

03Why we process it, and the legal basis

Activity
Purpose
Lawful basis (GDPR Art. 6)
User interview
Inform early product design
Your consent — Art. 6(1)(a)
Site request logs
Security and abuse prevention
Legitimate interests — Art. 6(1)(f)

We do not use your data for advertising, sell it, or share it with third parties for their own purposes.

04Who sees your data

We use a small number of vetted processors, each bound by a Data Processing Agreement compliant with GDPR Art. 28:

  • Google Ireland Ltd. — Google Calendar Appointment Schedules, for the interview booking flow.
  • Hosting provider — serves this website and processes standard request metadata.

05How long we keep it

  • Interview notes: up to 24 months from the interview, then deleted or anonymised.
  • Site request logs: up to 90 days, then deleted.

06International transfers

Some processors (notably Google) may transfer personal data outside the European Economic Area. Where they do, transfers are protected by the European Commission's Standard Contractual Clauses (SCCs) or an equivalent legal mechanism under GDPR Chapter V.

07Your rights under GDPR

You have the right to:

  • Access the personal data we hold about you (Art. 15).
  • Have inaccurate data corrected (Art. 16).
  • Request deletion of your data (Art. 17).
  • Restrict or object to processing (Art. 18 and 21).
  • Receive your data in a portable format (Art. 20).
  • Withdraw consent at any time (Art. 7(3)) — without affecting the lawfulness of processing already carried out.
  • Lodge a complaint with a supervisory authority in your Member State of residence (Art. 77).

To exercise any of these rights, email office@voteum.org. We respond within 30 days.

08Cookies

The Voteum pre-launch site uses no marketing or analytics cookies. The booking flow may set strictly necessary cookies from Google Calendar that are essential for its operation; under the ePrivacy Directive these do not require consent.

09Children

This site is not directed at children under 16. We do not knowingly collect personal data from children.

10Changes

We will update this page when our processing changes — for example, when controller responsibility transfers to a new legal entity, or when we add or change a processor. The "Last updated" date at the top of this page always reflects the current version.