Privacy Policy

Data Controller & Contact Details

Key Definitions

• “Personal Data” — any information relating to an identified or identifiable natural person.
• “Processing” — any operation performed on personal data, including collection, storage, use, disclosure, or deletion.
• “Data Controller” — Amodo Digital S.L.U., which determines the purposes and means of processing your personal data.
• “Data Processor” — a third party that processes personal data on our behalf and under our instructions.
• “GDPR” — Regulation (EU) 2016/679; “UK GDPR” — UK version retained in UK law.
• “CCPA/CPRA” — California Consumer Privacy Act and California Privacy Rights Act.

Personal Data We Collect

3.1 — Data You Provide Directly

• Account Information: Name, email address, and account credentials when you register.
• Quiz Responses: Answers you provide during quizzes, processed solely to generate your personal results report. Some quizzes may involve questions related to personal experiences, emotional patterns, and personality tendencies. These responses are not shared with third parties for their own purposes. By completing a quiz, you expressly consent to this processing as confirmed at registration.
• Payment Information: We use Stripe as our payment processor. We do not store full card numbers. We receive only: tokenized payment identifiers, last four digits of your card, card type, expiration date, and billing country/postcode.
• Communications: Messages you send us via email or support channels.

3.2 — Data We Collect Automatically

• Technical Data: IP address, browser type and version, device type and model, operating system, screen resolution, time zone, and language preferences.
• Usage Data: Pages visited, features accessed, quiz completion data, session duration, and navigation patterns.
• Geolocation Data: Approximate location derived from your IP address (city or country level only). We do not collect precise GPS location.
• Cookie and Tracking Data: As described in our Cookie Policy.

3.3 — Data from Third Parties

• Payment processors (Stripe): Confirmation of payment status, partial billing details, and fraud signals.
• Analytics providers: Aggregated and anonymised usage statistics.
• Advertising partners: Ad interaction data where you have consented to such tracking.

Legal Basis for Processing (EU/EEA & UK)

A — Contractual Necessity (Art. 6(1)(b) GDPR)

To create and manage your account, deliver quiz results and premium content, process subscription payments, and provide customer support.

B — Legitimate Interests (Art. 6(1)(f) GDPR)

To improve and develop the Service, detect and prevent fraud and chargebacks, maintain system security, and send service-related notifications. You have the right to object — see Section 10.

C — Consent (Art. 6(1)(a) GDPR)

For marketing communications, non-essential cookies, and the processing of quiz responses that may relate to personal experiences or personality tendencies (Art. 9 GDPR where applicable). You may withdraw consent at any time without affecting prior processing.

D — Legal Obligation (Art. 6(1)(c) GDPR)

To comply with tax and accounting obligations under Spanish and EU law, and to respond to lawful requests from courts, regulators, or law enforcement.

How We Use Your Personal Data

• Service Delivery: To provide quiz results, manage your subscription, and operate your account.
• Payment Processing: To process transactions, prevent fraud, manage billing disputes, and respond to chargebacks. We retain evidence of your purchase authorization and transaction history to defend against unjustified payment disputes.
• Customer Support: To respond to enquiries, resolve complaints, and process cancellation or refund requests.
• Legal Compliance: To comply with tax, accounting, consumer protection, and data protection laws.
• Security and Fraud Prevention: To detect and prevent unauthorized access, fraudulent transactions, and abuse.
• Service Improvement: To analyse usage patterns and improve functionality.
• Marketing: To send you promotional emails where you have opted in. You can opt out at any time.
• Advertising: To display relevant advertisements through our advertising partners, subject to your consent preferences.

How We Share Your Personal Data

6.1 — Third-Party Service Providers

• Stripe, Inc. (US) — subscription billing, fraud prevention, chargeback management. PCI-DSS Level 1 certified. See stripe.com/privacy.
• Cloud infrastructure providers — hosting and data storage in secure data centres.
• Email service providers — transactional and marketing communications.
• Google Analytics — anonymised usage analysis. See policies.google.com/privacy.
• Advertising partners (Facebook, Google, others) — where you have consented to targeted advertising.

6.2 — Legal and Regulatory Disclosure

We may disclose personal data to law enforcement agencies, courts, regulators, or other public authorities where required by law or to protect our legal rights.

6.3 — Business Transfers

If Amodo Digital S.L.U. is involved in a merger, acquisition, or sale of assets, your personal data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

6.4 — What We Do NOT Do

• We do not sell your personal data to third parties for their independent marketing purposes.
• We do not share your quiz responses or personality results with employers, insurers, or other parties for screening or assessment purposes.
• We do not share your full payment card data — this is handled exclusively by Stripe.

Cookies & Tracking Technologies

We use strictly necessary cookies, analytical/performance cookies, functional cookies, and advertising/targeting cookies (consent required). Full details, including a complete cookie table, are available in our Cookie Policy.

You can manage your cookie preferences at any time through the Cookie Consent Banner or the Cookie Settings link in our website footer.

Data Retention

When retention periods expire, we securely delete or anonymise your personal data. Some data may be retained where required by law, to resolve disputes, or prevent fraud.

International Data Transfers

Your personal data may be transferred to and processed in countries outside the EEA, including the United States. We ensure compliance through:

• Standard Contractual Clauses (SCCs) approved by the European Commission.
• EU-U.S. Data Privacy Framework for transfers to certified US entities.
• European Commission adequacy decisions where applicable.
• UK IDTA or UK addendum to EU SCCs for transfers from the UK.

You may request a copy of the relevant transfer safeguards by contacting [email protected].

Your Privacy Rights

10.1 — EU/EEA and UK Residents (GDPR / UK GDPR)

• Right of Access (Art. 15): Request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16): Request correction of inaccurate or incomplete data.
• Right to Erasure (Art. 17): Request deletion of your personal data.
• Right to Restrict Processing (Art. 18): Request that we limit how we use your data.
• Right to Data Portability (Art. 20): Receive your data in a machine-readable format (CSV/JSON).
• Right to Object (Art. 21): Object to processing based on legitimate interests or for direct marketing.
• Right to Withdraw Consent: Where processing is based on consent (including quiz response processing), you may withdraw at any time by contacting [email protected]. Withdrawal does not affect lawfulness of prior processing.
• Right to Lodge a Complaint: With the AEPD (aepd.es) or your local supervisory authority / ICO (ico.org.uk).

Response time: Acknowledgment within 72 hours; substantive response within 30 days (extendable by 45 days for complex requests, with notice).

10.2 — California Residents (CCPA / CPRA)

• Right to Know: Disclosure of categories and specific pieces of personal information collected in the past 12 months.
• Right to Delete: Request deletion of personal information, subject to legal exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt Out: We do not sell personal information. You may opt out of data sharing for advertising by contacting [email protected] with subject “CCPA Opt-Out”. We also honour GPC signals automatically.
• Right to Non-Discrimination: We will not discriminate for exercising your CCPA/CPRA rights.

10.3 — Canadian Residents (PIPEDA / Law 25)

• Right to access personal information we hold about you.
• Right to challenge accuracy and request correction.
• Right to withdraw consent, subject to legal and contractual restrictions.

10.4 — Australian Residents (Privacy Act 1988 / APPs)

• Right to access personal information we hold about you.
• Right to request correction of inaccurate, out-of-date, or incomplete information.
• Right to complain to the OAIC (oaic.gov.au) if your complaint is unresolved.

10.5 — How to Exercise Your Rights

Email [email protected] with subject line “Privacy Rights Request”. We may ask you to verify your identity. We will not charge a fee for routine requests.

Data Security

• AES-256 encryption for data at rest.
• TLS/SSL encryption for all data in transit.
• PCI-DSS compliant payment processing through Stripe.
• Access controls and role-based permissions limiting staff access.
• Regular security assessments and vulnerability monitoring.
• Incident response procedures for data breaches.

No method of transmission over the internet is 100% secure. In the event of a breach likely to result in high risk to your rights, we will notify you and the relevant supervisory authority within 72 hours as required by GDPR Art. 33–34.

Children’s Privacy

Our Service is not directed to individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe your child has provided us with personal data, please contact [email protected] immediately and we will delete the relevant data without delay.

Third-Party Links & Services

Our Website may contain links to third-party websites. We are not responsible for their privacy practices. This Privacy Policy applies solely to data collected by quizinq.com.

Marketing Communications

Where you have opted in, we may send you promotional emails. You can opt out at any time by clicking “Unsubscribe” in any marketing email, emailing [email protected] with subject “Unsubscribe”, or managing preferences at quizinq.com/account.

Transactional emails (billing confirmations, pre-charge notifications, cancellation confirmations, and account security alerts) cannot be turned off while your account is active.

Automated Decision-Making & Profiling

We do not make decisions that produce legal effects or similarly significant effects about you through solely automated processing. Quiz results are generated by algorithms for self-reflection, entertainment, and informational purposes only and do not constitute automated decisions affecting your legal rights, employment, credit, or insurance.

Changes to This Privacy Policy

When we make material changes, we will post the updated policy with a new “Last Updated” date, send email notification at least 15 days before changes take effect, and display a prominent notice on the Website. Your continued use after the effective date constitutes acceptance.

Supervisory Authorities

Contact Us