Who is responsible
The controller of personal data processed on ReviewPanel (https://reviewpanel.cloud) is ReviewPanel
Email: info@reviewpanel.cloud
What we process and why
The table below lists each processing activity on this site with the data involved, the purpose and the legal basis. Data is not processed for any purpose not listed here.
| Activity | Data processed | Purpose | Legal basis |
|---|---|---|---|
| Visiting the site and security | IP address, browser details, requested page, date and time; blocking records where there are repeated failed requests or signs of attack | Delivering pages, keeping the site and its visitors secure, preventing abuse | GDPR Art. 6(1)(f) (legitimate interests) |
| Post view counts, reactions, votes and ratings | A value derived from your IP address by one-way hashing (your IP address itself is not stored), device type (mobile, desktop, tablet), the reaction or rating you give | Counting views and reactions without double counting | GDPR Art. 6(1)(f) (legitimate interests) |
| Contact form and email | Name, email address, phone if given, subject, message, IP address and browser details at the time of sending | Replying to your message, following up your request, filtering spam | GDPR Art. 6(1)(f); where your request relates to a contract, Art. 6(1)(b) |
| Comments | Name, email address (not published), comment text, IP address and browser details | Publishing and moderating comments, preventing spam and unlawful content | GDPR Art. 6(1)(f) (legitimate interests) |
| Newsletter | Email address, name if given, subscription and unsubscribe dates, IP address and browser details at the time of consent | Sending newsletters and announcements, proving consent, honouring unsubscribe requests | Your consent, GDPR Art. 6(1)(a); proving consent, Art. 6(1)(c) |
| Site statistics (cookie-free, on the site's own server) | Page visited, referring address, campaign tags, a temporary session ID deleted when the tab closes; IP address is not stored | Seeing in aggregate which pages are read and where visitors come from | GDPR Art. 6(1)(f) (legitimate interests) |
| Advertising (Google AdSense) | Cookie and advertising identifiers, page visited, device and browser details, IP address (sent to the provider) | Serving and measuring ads, preventing fraud; personalised ads where you consent | Your consent for advertising cookies and personalised ads, GDPR Art. 6(1)(a). Without consent no advertising cookies are written and ads are not personalised; page and device details are still sent to Google to show the ad (Art. 6(1)(f)) |
How data is collected
Data is collected electronically from what you type into forms, from the technical information your browser sends, and from cookies and browser storage.
Cookies
Non-essential cookies (analytics and advertising) are used only if you choose "Accept" in the site's cookie panel. "Reject" is offered just as easily, and rejecting does not stop you using the site. You can change your choice at any time via change your cookie preferences.
The full list of cookies and their durations is on the Cookie Policy page.
Who receives data
Personal data is not sold. It is shared only with the recipients below, for the stated purpose and only as far as needed.
| Recipient | Purpose | Related activity |
|---|---|---|
| Hosting provider | Server holding the site and database, server access logs | All activities |
| Google (AdSense) and Google's ad partners | Ad delivery and measurement | Advertising |
| Email delivery provider | Delivering newsletter emails | Newsletter |
| This site (newsletter measurement) | Whether a newsletter email was opened and which link was clicked is recorded per subscriber | Newsletter |
| Competent authorities and courts | Only where there is a legal request or obligation | The relevant activity |
International transfers
Some of the recipients above process data on servers outside your country, including outside the European Economic Area. Such transfers rely on an adequacy decision, the provider's certification under a recognised framework (such as the EU-U.S. Data Privacy Framework), standard contractual clauses or another safeguard required by applicable law. For cookies and services based on consent, the transfer is covered by your consent.
How long data is kept
Data is retained for as long as necessary for the processing purpose and applicable legal requirements.
- Post view records are deleted automatically after about 180 days and failed sign-in attempts after about 90 days.
- IP addresses and browser details in comments and contact messages are deleted when the log retention period in the site's maintenance settings ends (180 days by default); the comment or message itself stays until you ask for deletion or the site owner deletes it.
- Newsletter consent records are kept after you unsubscribe for as long as needed to prove consent.
Data whose retention period has ended is deleted, destroyed or anonymised.
Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing, to data portability, and to withdraw consent at any time where processing is based on consent (withdrawal does not affect earlier processing). You also have the right to lodge a complaint with a supervisory authority, in particular in the country where you live or work.
How to make a request
Send your request to info@reviewpanel.cloud or by post to the address above. We may ask for information needed to confirm your identity. Requests are free of charge unless they are manifestly unfounded or excessive.
Security
Data is protected by technical and organisational measures such as a password-protected admin panel, encrypted connections (HTTPS), limited access rights and up-to-date software. If a personal data breach occurs, we notify the competent authority and affected people where the law requires.
Children
This site is not directed at children and does not knowingly collect personal data from children. If you believe a child has sent us data, tell us at the address above and it will be deleted.
Changes
This text is updated when the tools or processing on the site change. The current version is always on this page.