Privacy statement

1. Who is responsible

The website nostapapia.com is published by Basmartens.com, gevestigd in Nederland. We are the controller for the data processed through this website. You can reach us at info@nostapapia.com.

2. Our starting point: voting without an account

You do not need an account and you do not have to leave a name or e-mail address to take part in a poll. We do not ask about your political preference, your background or any other special category of data. A vote cannot be traced back to you as a person.

3. What data we process

Depending on how you use the website, we process the following data.

• Vote data. The answer you choose, the question it relates to and the time of the vote.
• Two pseudonymous participant markers. To prevent someone from voting more than once on the same question, we store two pseudonymous markers: an encrypted cookie value and an encrypted derivative of your IP address. Your raw IP address is never stored. Both are pseudonymous.
• Preferences. The language you selected.
• Account data. Only if you create an account yourself: your user name, e-mail address, neighbourhood on Curaçao and e-mail verification status.
• Comment content and identification. If you post a comment: the text of your comment, your account ID, a pseudonymous derivative of your IP address, the time it was posted and the question it relates to.
• Daily e-mail notifications. If you have opted in to receive the daily question by e-mail: we use your e-mail address, display name and language preference to send the e-mail. We keep a log containing your e-mail address, the date sent and the outcome (success or failure). You can unsubscribe at any time via the unsubscribe link in the e-mail or from your account page.
• Voting streak. If you have an account, we store the number of consecutive days on which you have voted. This figure is visible on your public profile page.
• Visit statistics. Only if you give your consent: the address of the page visited, the duration of your session, the device type and the browser type. This is done via Google Analytics. Google anonymises your IP address before further processing.
• Technical data. Our hosting provider keeps standard server logs containing among other things IP address, browser type and requested page. These are needed for security and for the website to function.

4. Cookies

We place necessary cookies and, if you give your consent, statistics cookies. We do not place advertising cookies and we do not share personal data with advertising networks.

Necessary cookies — always active

• ntp_voter makes sure you do not vote twice on the same question and that you see your own choice again. Valid for one year.
• ntp_lang remembers the language in which you want to read the website. Valid for thirty days.
• ntp_cookie_consent remembers your cookie preference. Valid for one year.
• WordPress sets a session cookie when you are logged in.

Statistics cookies — only with your consent

• _ga and _ga_RLBVGKNEWZ (Google Analytics) measure the number of visitors and the most popular pages. Valid for two years. Your IP address is anonymised before processing.

You manage your cookie preference via the "Cookie settings" button in the cookie bar at the bottom of the page or via the "Cookie settings" link in the footer. You can always delete necessary cookies through your browser settings; if you do, you may be able to vote on a question again.

5. Why and on what legal basis

• Showing and counting polls and preventing duplicate or automated votes. Basis: our legitimate interest in a reliable result.
• Security and abuse prevention. Basis: legitimate interest.
• Managing an account and verifying your e-mail address, if you create one. Basis: performance of the agreement.
• Showing and moderating comments. Basis: performance of the agreement and our legitimate interest in a safe platform.
• Sending the daily question by e-mail to users who have opted in. Basis: consent. You can withdraw consent at any time via the unsubscribe link in the e-mail or from your account page.
• Visit statistics via Google Analytics, to understand how many visitors the website has and which pages are popular. Basis: consent.
• Complying with legal obligations, for example a court order. Basis: legal obligation.

6. How long we keep data

We keep vote data for as long as the related question is on the website, because the result depends on it. We delete the pseudonymous participant markers no later than twelve months after the poll. Comments are kept until you delete them yourself, we remove them through moderation, or you close your account. Server logs are usually cleared by the hosting provider within thirty days. Account data is kept until you close your account. You can delete your account at any time from the account page; this also deletes your comments and anonymises your votes.

Daily e-mail notification logs are kept for a maximum of twelve months. Streak data is deleted when you close your account. Visit statistics in Google Analytics are kept for a maximum of fourteen months. Your cookie preference (cookie ntp_cookie_consent) is kept for one year; after that you will be asked again.

7. Who has access to the data

We do not sell personal data. Access to personal data is limited to the site administrator and the hosting provider that manages the servers. We have made agreements with that provider on confidentiality and security. In addition, we may disclose data where the law requires us to.

If you have given consent for statistics cookies, Google LLC processes visit statistics on our behalf via Google Analytics. A data processing agreement has been concluded with Google.

Aggregated and anonymised results and insights (meaning data from which no individual person or individual vote can be identified) may be shared with or provided to research institutions, government bodies or business partners as part of our services.

8. Results and publication

We only publish aggregated results, such as percentages and participant counts. Individual votes or comments are never published or shared with third parties. We may use anonymised data and trends for analyses, reports or partnerships.

9. Transfers outside Europe

The website is aimed at Curaçao. Our servers and service providers are located within the European Economic Area, unless stated otherwise for a specific service. If a transfer to a country outside that area does take place, it is based on an adequacy decision or on the standard contractual clauses of the European Commission.

If you consent to statistics cookies, Google Analytics sends anonymised visit data to Google servers in the United States. This is done on the basis of the European Commission's standard contractual clauses and the data processing agreement with Google LLC.

10. Security

We take appropriate technical and organisational measures, including encrypted connections, encrypted storage of the participant marker and restricted access to the administration area. No website is entirely without risk, however. If you notice a vulnerability, please report it to info@nostapapia.com.

11. Your rights

You have the right to access, correct, delete and restrict your data, the right to object to processing and the right to data portability. Because votes are pseudonymous, we usually cannot link a vote to you; this means we cannot always carry out a request that concerns an individual vote. You can delete your account and comments directly from the account page, or send your request to info@nostapapia.com.

If you have given consent for statistics cookies, you can withdraw that consent at any time via the cookie settings at the bottom of the page.

12. Filing a complaint

If you disagree with the way we handle your data, please tell us first. If we cannot resolve it together, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or with the data protection authority of Curaçao (College bescherming persoonsgegevens).

13. Children

This website is not aimed at children under the age of sixteen. We do not knowingly collect data from children. If you believe this has happened anyway, please contact us so we can delete the data.

14. Changes

We may amend this privacy statement, for example when the website changes or when the law requires it. The current version is always on this page, with the date of the last change at the top.