Last updated: 07/07/2026 · Version 1.2.0
1. Data controller
The controller of your personal data, in accordance with the General Data Protection Regulation (GDPR) and the Spanish Data Protection Act (LOPDGDD), is:
- Owner: Manuel Folgar Ferreiro
- Tax ID (NIF/CIF): 35446682W
- Address: Rua Doctor Fermín García Díaz nº 11
- Website: encuentaspagadas.com
- Contact email: info@encuentaspagadas.com
2. Data we collect
- Account data: name, email and password (encrypted).
- Demographic profile: year of birth, gender, country and postal code.
- Activity data: completed surveys, accumulated balance, transaction history and activity streaks.
- Technical data: IP address, browser, operating system and session cookies.
3. Purpose and legal basis
| Purpose | Legal basis |
|---|---|
| Managing your account and access to the platform | Performance of a contract |
| Crediting rewards for completed surveys | Performance of a contract |
| Sharing your demographic profile with survey platforms to improve matching and increase your earnings | Explicit consent |
| Processing withdrawals and payments | Performance of a contract |
| Fraud detection and security | Legitimate interest |
| Profiling based on your demographic data to select compatible surveys (no automated decisions with legal effects) | Explicit consent |
| Sending commercial communications and platform news by email | Consent |
4. Sharing data with third parties — Survey platforms
In order to send you surveys compatible with your profile, we share the following data with our partner platforms:
- Email address — to uniquely identify you and avoid duplicates in their system
- Username
- Year of birth / approximate age
- Gender
- Country and postal code
- Internal user identifier
This exchange takes place exclusively to determine which surveys are compatible with your profile and to maximise your chances of completing them and getting paid. Without this consent you will receive significantly fewer surveys.
Platforms we may share data with:
- CPX Research — Privacy policy
- TheoremReach — Privacy policy
- Timewall — Privacy policy
- inBrain Surveys — Privacy policy
- AdGate Media — Privacy policy
- AyeT-Studios — Privacy policy
This data is not sold to third parties nor used for behavioural advertising.
In addition to the survey platforms, the following service providers process data on our behalf (data processors) or as necessary recipients:
- PayPal — to process the payments and withdrawals you request.
- Web hosting provider — secure storage of the platform and its database.
- Email provider (IONOS) — sending transactional emails and, if you have consented, platform communications.
We maintain the corresponding contracts with our data processors that guarantee the protection of your data in accordance with the GDPR.
5. International transfers
Some survey platforms may be located outside the European Economic Area. In that case, we make sure they rely on adequate transfer mechanisms (standard contractual clauses, adequacy decisions, etc.).
6. Data retention
- Account data: while your account is active + 5 years after deletion.
- Transaction history: 7 years (tax obligation).
- Consent records: 5 years.
- Technical logs: 12 months.
7. Your rights
You may at any time exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to info@encuentaspagadas.com. You may also withdraw your consent to the use of demographic data — without affecting the lawfulness of prior processing — although this will reduce the number of surveys available to you.
If you believe your rights have not been respected, you may lodge a complaint with the Spanish Data Protection Agency (AEPD), our lead supervisory authority, or with your local data protection authority.
8. Security
We apply appropriate technical and organisational measures: password encryption, HTTPS, restricted access to data, audit logs and fraud detection.
9. Minors
Use of the platform is strictly reserved for people over 18 years of age. We do not allow minors to register nor do we knowingly collect personal data from minors. If we detect that an account was created using a false age, we will delete it. If you are a parent or guardian and believe a minor in your care has provided us with their data, write to info@encuentaspagadas.com and we will delete it.
10. Changes to this policy
We will notify you of relevant changes by email and will request your consent again if they affect processing based on it.