When we collect emails as part of the voting process, does PollUnit also get access to those emails? Essentially, I need to know if we should include this in our own terms and conditions. The voter is providing their email to our company as well as to PollUnit.
When you collect voters’ email addresses as part of the voting process, our system also has access to them. The system must store the email address and make it available to you. From a data protection perspective, the situation is as follows:
Your company is the data controller, because the email is provided by the user primarily for your purposes (participation, tracking, notifications, etc.).
PollUnit acts as the data processor, as we store and manage the email address solely on your behalf and according to your instructions (e.g., to enable the functionality of the tool).
So PollUnit technically has access to the email addresses, but only for the purpose of providing the service and not for its own use. PollUnit is not permitted to use them for marketing or any other purposes (unless, for example, the user registers separately with PollUnit).