Art. 6 para. 1 lit. f GDPR – legitimate interest of the Controller
Art. 6 para. 1 lit. a GDPR – User consent (if required)
4. What Data We Collect
4.1. User Account Data
first and last name or company name
email address
login data (passwords in encrypted form)
phone number (if required for account security)
4.2. Billing Data
invoice data
information about payments and subscriptions
billing history
Double Digital does not store payment card data – it is processed solely by certified payment operators.
4.3. Product and Technical Data
IP address
system logs
data on system activity
configurations
settings
events
marketing and advertising data processed as part of integrations (e.g. campaigns
keywords
results)
5. Data from External Integrations
If Double Digital services are connected to external systems (e.g. Google Ads, Meta, analytics tools): data may be temporarily retrieved, processed and synchronized, data is used solely for the purpose of providing Services, after completion of the technical process, source data may be deleted or anonymized
6. Purposes of Data Processing
provision and billing of Services
management and security of User accounts
processing of payments and subscriptions
handling of inquiries and communication
improvement of product quality and functionality
ensuring system security
pursuing or defending claims
7. Aggregated Data, Anonymization and Technology Development
Double Digital may process data in permanently anonymized and aggregated form for the purpose of: developing algorithms and AI models, training optimization systems, creating benchmarks, market analysis and statistics, development of new functionalities and products
developing algorithms and AI models
training optimization systems
creating benchmarks
market analysis and statistics
development of new functionalities and products
Such data:
Such data: do not allow identification of the User or their company
do not constitute personal data under GDPR
may be stored indefinitely
are the property of Double Digital
8. Marketing and Communication
provision of Services
transmission of technical and organizational information
sending commercial information – only with consent
The User may withdraw consent for marketing communication at any time.
9. Data Recipients
IT and hosting service providers
payment operators
accounting firms
analytics and mailing tool providers
public authorities – if required by law
Data is not sold to third parties.
10. Data Transfer Outside the EU
If data is transferred outside the European Economic Area, the Controller ensures appropriate legal safeguards required by GDPR (e.g. standard contractual clauses).
11. Data Retention Period
account and product data – for the duration of the agreement
after the end of subscription – up to 12 months
accounting data – in accordance with the law
anonymized and aggregated data – indefinitely
12. User Rights
access to data
rectification
deletion
restriction of processing
data portability
objection
withdrawal of consent at any time
filing a complaint with the President of the Personal Data Protection Office
13. Data Security
Double Digital applies technical and organizational measures ensuring the protection of personal data
encryption of transmission (SSL)
server security
limited access to data
14. Cookies and Consent
The website uses cookies and similar technologies. Necessary cookies make the website work. All other cookies are used only if you consent to them in the cookie banner.
Necessary: constantly_consent – stores your cookie choice for 6 months. Legal basis: the Controller's legitimate interest in running the website (Art. 6(1)(f) GDPR).
Functional (only with consent): remember settings and preferences.
Analytics (only with consent): Google Analytics 4, provided by Google Ireland Ltd. (cookies such as _ga and _ga_*) – statistics on how the website is used.
Advertising (only with consent): Google Ads, provided by Google Ireland Ltd. (e.g. the _gcl_au cookie), and Meta Pixel, provided by Meta Platforms Ireland Ltd. (e.g. the _fbp cookie) – measuring the results of ads and personalising them.
The legal basis for functional, analytics and advertising cookies is your consent (Art. 6(1)(a) GDPR). Until you consent, Google tags do not use analytics or advertising cookies; under Google Consent Mode they may send limited signals without cookies.
You can change or withdraw your consent at any time with the “Cookie settings” link in the page footer or the button below. Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To be able to demonstrate consent, the Controller keeps a record of each choice: a random identifier stored in the constantly_consent cookie, the categories chosen, the date and the page. The record does not contain your name or e-mail address.
15. Changes to Privacy Policy
The Privacy Policy may be updated. The current version is always available on Double Digital services.
16. Contact
For matters related to personal data protection, please contact: kontakt@double-digital.pl, Double Digital sp. z o.o., ul. Grzybowska 87, 00-844 Warsaw