Last updated: 10. heinäkuuta 2026
This Privacy Policy sets out the principles governing the processing and protection of personal data of users of the flame-date.com website (hereinafter referred to as the “Website”).
The controller of personal data is ALTERNATIVE SOLAR SOLUTION SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, with its registered office at Jana Matejki 30/1, 87-100 Toruń, Poland, hereinafter referred to as the “Company” or the “Controller.”
This Privacy Policy applies to:
a) individuals using the Website, including those who have created a user account;
b) individuals using services provided electronically through the Website, as described in the Terms and Conditions (hereinafter referred to as the “Services”);
c) individuals contacting the Company via contact forms or other communication channels made available through the Website.
Before using the Website, users should familiarize themselves with the contents of this Privacy Policy.
The controller of the personal data of Website users is ALTERNATIVE SOLAR SOLUTION SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, the owner and operator of the Website (hereinafter referred to as the “Controller”).
For matters relating to the processing of personal data, the exercise of data subject rights, or to obtain additional information regarding this Privacy Policy, you may contact the Controller via email at: contact@flame-date.com.
The Controller exercises due care to ensure that personal data is processed in compliance with applicable laws and regulations and with full respect for the rights of data subjects.
The Controller collects users’ personal data from various sources, depending on how the Website is used.
The Controller processes personal data voluntarily provided by users when using the Website or contacting the Controller. Such data may be collected in particular in connection with:
a) registering an Account and completing a user profile;
b) using communication features available through the Website, including exchanging messages with other users;
c) publishing, uploading, or sharing content through the Website;
d) subscribing to the newsletter or consenting to receive marketing communications;
e) participating in contests, promotional programs, or other campaigns organized by the Controller;
f) reporting technical issues, submitting complaints, reporting violations of the Terms and Conditions, or sending other inquiries to the Controller.
When users access and use the Website, the Controller automatically collects certain technical information relating to the user, their device, and their use of the Website.
Such data may include, in particular, IP address, device identifiers, information about the web browser and operating system, approximate location data, activity within the Website, and information regarding the use of specific Website features and functionalities.
This data is collected through cookies and similar technologies. Detailed information can be found in the Cookie Policy.
The Controller may receive users’ personal data from third parties, including in particular:
a) other Website users, where they report violations, complaints, or other matters relating to a particular user’s activities;
b) providers of analytics and statistical services;
c) providers of advertising and marketing services;
d) payment service providers processing transactions carried out through the Website;
e) entities affiliated with the Controller, to the extent permitted by applicable law;
f) providers of services related to security, abuse detection, fraud prevention, and user verification.
Depending on the scope of the user’s use of the Website, the Controller may collect and process the following categories of personal data:
a) Identification Data – username, date of birth, age, gender, country, and city of residence. In the event of an identity verification process, data contained in an identity document may also be processed to the extent necessary to complete the verification.
b) Contact Data – email address and telephone number, if provided by the user.
c) Account and Profile Data – information related to the user’s account, including username, encrypted password, profile photos, and any information voluntarily included by the user in their profile.
d) Communication Data – the content of messages, chats, reports, and other communications conducted through the Website.
e) Transaction and Payment Data – information relating to purchases made through the Website, including the type of service purchased, transaction value, transaction date, payment status, and information provided by the payment service provider. The Controller does not store full payment card details.
f) Purchase and Purchasing Activity Data – information regarding purchased services, packages, subscriptions, refunds, and transaction history.
g) Account Status Data – information relating to a user's status within the Website, including account verification status, restrictions, warnings, or other designations associated with the use of the Website.
h) Technical Data – IP address, device identifiers, browser type and version, operating system, language settings, time zone, and other technical information relating to the device used to access the Website.
i) Website Usage Data – information about a user’s activity on the Website, including visited pages, duration of use, clicks, interactions with Website features and functionalities, diagnostic data, and statistical information.
j) Marketing Data and Communication Preferences – information relating to marketing consents, preferred communication channels, and interactions with marketing communications.
k) Customer Support Data – records of communications with the Controller, reports, complaints, inquiries, and actions undertaken by customer support personnel.
l) Special Categories of Personal Data – data voluntarily disclosed by users in their profiles, messages, or other content published through the Website, which may include information concerning racial or ethnic origin, political opinions, religious or philosophical beliefs, health data, or a person’s sex life or sexual orientation.
m) Biometric Data – data used solely in connection with a voluntary identity verification procedure where the process requires comparison of the user’s image with a submitted identity document.
The Controller may also create and use statistical, analytical, and aggregated data that does not permit the identification of a specific natural person. Such information is not treated as personal data under applicable law.
If the Website provides the option to register or log in using a Google account, users may use this functionality to create or link an Account on the Website.
In such cases, the Controller may receive from Google the data made available by the user during the authentication process, including in particular:
a) full name;
b) email address;
c) profile picture;
d) other information that the user has consented to share when signing in through Google.
The scope of data shared depends on the privacy settings of the user’s Google account and the permissions granted by the user.
The rules governing Google's processing of personal data are set out in Google's Privacy Policy, available on the provider’s website.
The Controller processes personal data only in cases permitted under applicable law and solely to the extent necessary to achieve specific purposes.
Personal data may be processed in particular on the basis of:
a) the necessity to perform a contract or to take steps prior to entering into a contract – for the purposes of registering and maintaining an Account, providing the Services, processing payments, enabling the functionality of the Website, communicating with users, and informing them about changes relating to the Services;
b) the Controller’s legitimate interests – for the purposes of ensuring the security of the Website, preventing fraud and abuse, establishing, exercising, or defending legal claims, conducting statistical and business analyses, handling complaints, responding to user reports, maintaining technical infrastructure, and developing the Website and the Services provided through it;
c) compliance with a legal obligation to which the Controller is subject – to the extent required by applicable laws, including tax, accounting, anti-fraud, and cooperation obligations with competent public authorities;
d) the user's consent – where obtaining consent is required under applicable law, particularly in relation to certain marketing activities or the processing of special categories of personal data.
Where the processing of personal data is based on the user’s consent, such consent may be withdrawn at any time. Withdrawal of consent shall not affect the lawfulness of any processing carried out before such withdrawal.
Due to the nature of the Website, the Controller may process special categories of personal data voluntarily disclosed by users.
Such data may be processed only to the extent necessary for the provision of the Services and on the basis of the user’s explicit consent or another legal basis provided for under applicable law.
In particular:
a) information relating to sexual orientation, relationship preferences, or other data voluntarily disclosed by the user may be used for the purpose of providing Website functionality and facilitating profile matching;
b) special category data disclosed during the identity verification process is not used for profiling or automated decision-making and is processed solely to the extent necessary to complete the verification procedure;
c) biometric data may be processed only in connection with a voluntary identity verification procedure and only for the period necessary to achieve that purpose.
The Controller does not disclose personal data to third parties for their own marketing purposes without the user’s prior consent where such consent is required under applicable law.
Users may withdraw their consent to receive marketing communications at any time by using their Account settings, clicking the unsubscribe link included in a marketing message, or contacting the Controller directly.
Withdrawal of consent shall not affect the lawfulness of any processing activities carried out prior to the withdrawal of consent.
Personal data may be disclosed to third parties only to the extent necessary to achieve the purposes described in Section 5 and in compliance with applicable laws. All recipients of personal data are required to implement appropriate technical and organizational measures to ensure the protection of personal data.
Personal data may be disclosed to the following categories of recipients:
Service providers delivering IT, administrative, hosting, banking, payment processing, identity verification, customer support, and marketing support services.
Contractors responsible for operating fictitious profiles, solely to the extent necessary for the provision of services available through the Website. Such persons may have access to information contained in a user's profile and to the contents of messages exchanged as part of ongoing conversations.
Professional advisors, including law firms, auditors, banks, accounting firms, and tax advisors, where such disclosure is necessary to comply with legal obligations or to support the operation of the Website.
Public authorities, including tax authorities, regulatory bodies, courts, law enforcement agencies, and other authorized institutions, where disclosure is required under applicable law.
Advertising and marketing service providers, solely to the extent necessary to carry out marketing activities in compliance with applicable law and the consents provided by users. Users' personal data is not sold to advertisers for their own marketing purposes.
Entities involved in the sale, merger, reorganization, restructuring, or transfer of the business or any part thereof, where the disclosure of personal data is necessary to complete such a transaction in accordance with applicable law.
Some service providers and business partners cooperating with the Website may be located outside the European Economic Area (EEA). As a result, personal data may be transferred to third countries.
Any such transfer is carried out using appropriate safeguards required under Regulation (EU) 2016/679 (GDPR), including, where applicable: transfers to countries that are subject to a European Commission adequacy decision recognizing an adequate level of personal data protection; the use of Standard Contractual Clauses (SCCs) approved by the European Commission; the implementation of other transfer mechanisms permitted under applicable law.
Upon request, users may obtain additional information regarding the safeguards applied in connection with transfers of personal data outside the EEA.
The Website implements appropriate technical and organizational measures designed to protect personal data against loss, unauthorized access, disclosure, alteration, or destruction.
In particular, the Website: uses encrypted HTTPS/TLS connections for data transmission; regularly monitors its systems for security threats and vulnerabilities; restricts access to personal data exclusively to authorized persons; requires its service providers and business partners to implement appropriate personal data protection measures.
Users are responsible for maintaining the confidentiality of their Account credentials, particularly their password. Login credentials should not be shared with third parties.
Although appropriate technical and organizational safeguards are implemented, no method of data transmission over the Internet or electronic storage can be guaranteed to be completely secure, nor can the risk of security breaches be entirely eliminated. In the event of a personal data breach, the Website will take all actions required under applicable law.
Personal data is retained only for as long as necessary to fulfill the purposes for which it was collected and for any additional period required under applicable law.
When determining the appropriate retention period, the Controller takes into account, in particular: the nature, scope, and category of the personal data; the purposes for which the data is processed; the risks associated with unauthorized use of the data; legal obligations, including those arising under tax, accounting, and regulatory requirements.
As a general rule, personal data is retained for as long as the user maintains an Account on the Website.
Following the deletion of an Account, personal data will be deleted or anonymized unless further retention is necessary: to comply with legal obligations; to establish, exercise, or defend legal claims; to fulfill tax and accounting obligations.
Data relating to payments and transactions may be retained for the period required under applicable law, particularly tax and accounting regulations, which is generally five (5) years from the end of the calendar year in which the obligation to retain such data arose.
Once data has been irreversibly anonymized in a manner that no longer permits the identification of a user, such data may be retained and used without time limitation for statistical, analytical, research, and service development and improvement purposes.
In relation to personal data processed by the Website, users are entitled to the following rights:
Right of Access – the right to obtain confirmation as to whether personal data is being processed and, where that is the case, to receive a copy of such data together with information about how it is processed.
Right to Rectification – the right to request the correction of inaccurate personal data and the completion of incomplete personal data.
Right to Erasure (“Right to Be Forgotten”) – the right to request the deletion of personal data in circumstances provided for by law, in particular where the data is no longer necessary for the purposes for which it was collected.
Right to Object – the right to object to the processing of personal data based on the Controller’s legitimate interests, as well as to the processing of personal data for direct marketing purposes.
Right to Restriction of Processing – the right to request the restriction of the processing of personal data in circumstances specified by applicable law.
Right to Data Portability – the right to receive personal data provided by the user in a structured, commonly used, and machine-readable format and to transmit such data to another controller where technically feasible.
Right to Withdraw Consent – the right to withdraw consent to the processing of personal data at any time where processing is based on consent. Withdrawal of consent shall not affect the lawfulness of processing carried out before such withdrawal.
Right to Lodge a Complaint with a Supervisory Authority – the right to submit a complaint to the competent data protection authority, in particular the President of the Personal Data Protection Office (PUODO) in Poland, if the user believes that the processing of their personal data violates applicable law.
To exercise any of the above rights, users may contact the Controller using the contact details provided in this Privacy Policy. Requests will be handled without undue delay and no later than within the time limits prescribed by applicable law.
To exercise the rights described in Section 9, users may contact the Controller using the contact details provided in Section 2.
In order to protect personal data, the Controller may request additional information necessary to verify the identity of the person submitting a request.
Certain actions relating to personal data, including updating profile information, may be carried out independently through the user's Account settings.
The Controller will respond to requests concerning the exercise of user rights without undue delay and no later than within the time limits required under applicable law.
The Website may contain links to websites, applications, or services operated by third parties, including business partners and advertisers.
The Controller is not responsible for the privacy practices, content, or activities of entities operating such websites or services. Users should review the applicable privacy policy and terms of use of any website or service to which they are redirected.
The Website is intended exclusively for individuals who are at least 18 years of age or have reached the age of majority required under the laws applicable in their place of residence.
The Controller does not knowingly collect or process personal data relating to individuals who do not meet the above requirement.
If the Controller becomes aware that an Account has been created by an unauthorized person or that personal data relating to a minor has been submitted through the Website, the Controller will take prompt steps to delete such data and close the relevant Account, where required under applicable law.
Information regarding such cases may be reported using the contact details provided in Section 2.
The Controller reserves the right to update this Privacy Policy in response to changes in applicable laws, the development of the Website, technological changes, or changes in the manner in which personal data is processed.
The date of the most recent update of this Privacy Policy will be indicated each time within the Policy.
Where material changes are introduced, users will be notified by email, through a notice displayed on the Website, or upon logging into their Account.
Users should periodically review the current version of this Privacy Policy.
Users are required to provide accurate, complete, and up-to-date information and to promptly update such information whenever any changes occur.