Cross Scale

Privacy & Policy

Last updated: 11/11/2025

Cross Scale ("we", "our", "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and platform at https://crosscale.eu (the "Platform"). This policy complies with the General Data Protection Regulation (GDPR) and relevant Polish data protection laws.

By using the Cross Scale Platform, you consent to the practices described in this Privacy Policy. We know that you care about how your information is used and shared, and we take your privacy seriously.

1. Who We Are

Cross Scale is a Poland-based research platform facilitating cross-cultural cognitive science studies, study recruitment, and collaboration among researchers and participants.

Data Controller: Cross Scale, LLC Registered Address: Warsaw, postal code 02-339, Poland Email: info@crosscale.eu Website: https://crosscale.eu

2. What Personal Data We Collect

We collect your personal data in order to provide and continually improve our research platform and services. Here are the types of personal data we collect:

Information You Provide

  • Name, email address, username, and password (encrypted)
  • Profile information (institution, research interests, language preferences)
  • Demographic information for study participation (age, gender, location, education level)
  • Responses to study tasks, questionnaires, and research activities
  • Communication with our team (emails, support requests, feedback)
  • Payment information for platform subscriptions or services
  • Identity verification documents (for researchers: institutional affiliation, credentials)

Automatic Information We Collect

  • IP address, browser type, operating system, and device information
  • Login information and authentication data
  • Usage data (pages visited, time spent, features used, click patterns)
  • Study performance data (reaction times, accuracy, behavioural metrics)
  • Cookies and similar tracking technologies
  • Device identifiers and configuration settings
  • Error logs and diagnostic information

Information from Other Sources

  • Updated contact information from our service providers
  • Verification information from institutional databases (for researchers)
  • Authentication data from third-party login services (if applicable)
  • Public research profiles and publications (for researcher verification)

Examples of Automatic Information

  • The Internet Protocol (IP) address used to connect your device to the internet
  • Login credentials, email address, and authentication tokens
  • Content interaction information, such as study completion rates, task duration, and response patterns
  • Device metrics including when the platform is accessed, browser configuration, screen resolution, and time zone settings
  • Platform usage metrics (errors encountered, features accessed, navigation paths)
  • Full URL clickstream to, through, and from our Platform, including timestamps
  • Study history, participation records, and completion status
  • Language and accessibility preferences

3. How We Use Your Data

We process your personal data for the following purposes:

  • To provide access to the Platform and its features
  • To facilitate participation in research studies
  • To communicate with you about your account, studies, and platform updates
  • To analyse and improve platform performance and user experience
  • To comply with legal obligations and ethical research standards
  • To detect and prevent fraud, abuse, or security issues
  • To conduct scientific research and publish aggregated, anonymised findings

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

Consent

For study participation and optional communications (you can withdraw consent at any time)

Contract

To provide the Platform services you've registered for

Legitimate Interests

To improve our services, ensure security, and conduct scientific research

Legal Obligation

To comply with legal and regulatory requirements

5. Who We Share Your Data With

Information about our users is an important part of our research mission, and we are not in the business of selling our users' personal data to others. We share personal data only as described below:

  • Researchers: Study data (anonymised or pseudonymised where possible) may be shared with qualified researchers conducting approved studies. You will be informed when a third-party researcher is involved in a study you participate in.
  • Service Providers: We employ trusted third parties who perform functions on our behalf, such as hosting services, data analytics, email delivery, payment processing, and customer support. These service providers have access to personal data needed to perform their functions but may not use it for other purposes and are bound by confidentiality agreements.
  • Academic and Research Institutions: Collaborative research partners under appropriate data sharing agreements and ethics approvals
  • Legal Authorities: When we believe disclosure is appropriate to comply with the law, enforce our Terms of Service, or protect the rights, property, or safety of Cross Scale, our users, or others
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred. You will be notified via email and/or prominent notice on our Platform of any change in ownership or use of your personal data

We do not sell your personal data to third parties.

Other than as set out above, you will receive notice when personal data about you might be shared with third parties, and you will have an opportunity to choose not to share the information (where legally permissible).

6. How Long We Keep Your Data

We retain your data for as long as necessary to fulfil the purposes outlined in this policy:

  • Account data: Until you request account deletion or after 3 years of inactivity
  • Study participation data: In accordance with research ethics protocols, typically 5-10 years for scientific integrity and replication purposes
  • Technical and usage data: Up to 2 years
  • Legal records: As required by law

7. Your Rights Under GDPR

As a data subject in the EU/EEA, you have the following rights:

Right to Access

Request a copy of your personal data

Right to Rectification

Correct inaccurate or incomplete data

Right to Erasure ('Right to be Forgotten')

Request deletion of your data (subject to legal and scientific obligations)

Right to Restriction

Limit how we use your data

Right to Data Portability

Receive your data in a structured, machine-readable format

Right to Object

Object to processing based on legitimate interests or for direct marketing

Right to Withdraw Consent

Withdraw consent for processing at any time (without affecting prior processing)

To exercise any of these rights, please contact us at info@crosscale.eu. We will respond within one month.

8. How We Protect Your Data

We design our systems with your security and privacy in mind. We implement appropriate technical and organisational measures to protect your personal data:

  • We protect the security of your personal data during transmission by using encryption protocols and software (SSL/TLS)
  • We maintain physical, electronic, and procedural safeguards in connection with the collection, storage, and disclosure of personal data
  • Access controls and authentication (role-based access, two-factor authentication where applicable)
  • Regular security audits and vulnerability assessments
  • Pseudonymisation and anonymisation techniques for research data to minimise identifiability
  • Secure data storage with reputable cloud providers compliant with GDPR
  • Staff training on data protection, confidentiality, and research ethics
  • Our security procedures may require us to verify your identity before disclosing personal data to you

It is important for you to protect against unauthorised access to your password and account. We recommend:

  • Use a unique password for your Cross Scale account that is not used for other online accounts
  • Enable two-factor authentication if available
  • Sign out when finished using a shared computer
  • Do not share your account credentials with others
  • Report any suspicious activity or security concerns immediately

9. What Information Can I Access?

You can access and manage your information through your account dashboard. Examples of information you can access include:

  • Account information (name, email, password, profile details)
  • Study participation history and status
  • Consent records and withdrawal requests
  • Communication preferences and notification settings
  • Language and accessibility preferences
  • Data export requests and download history
  • Privacy settings and cookie preferences

If you are a researcher, you can also access: study protocols, participant recruitment status, data collection settings, collaboration team members, and published research outputs.

If you are a study participant, you can access: studies you've participated in, your responses and performance data, compensation or credit records, and withdrawal history.

10. What Choices Do I Have?

You have choices about the collection and use of your personal data. Many of our Platform services include settings that provide you with options for how your information is used:

Account Information

You can add, update, or delete certain information in your account settings. When you update information, we may keep a copy of the prior version for our records and research integrity purposes.

Communications

If you do not want to receive promotional emails or notifications from us, please adjust your communication preferences in your account settings. You will continue to receive essential service-related communications.

Study Participation

Participation in research studies is always voluntary. You can choose which studies to participate in, and you may withdraw from a study at any time as specified in the study consent form.

Cookies and Tracking

You can manage cookie preferences through your browser settings or our cookie preference centre. Note that blocking certain cookies may limit your ability to use some Platform features.

Data Access and Deletion

You may request access to your personal data or request deletion of your account through your account settings or by contacting us. Note that some data may be retained for legal, research integrity, or legitimate business purposes even after account deletion.

Marketing Preferences

You can opt out of marketing communications at any time by using the unsubscribe link in emails or updating your preferences in your account.

The Help feature on most browsers and devices will tell you how to prevent your browser from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to block cookies altogether. Because cookies allow you to take advantage of essential Platform features, we recommend that you leave them turned on.

Most devices provide users with the ability to change device permissions (e.g., disable/access location services, camera, microphone). For most devices, these controls are located in the device's settings menu. If you have questions about changing device permissions, we recommend contacting your device manufacturer.

11. Cookies and Tracking Technologies

To enable our systems to recognise your browser or device and to provide and improve our Platform services, we use cookies and other identifiers. Like many websites, we use these technologies to enhance your experience and collect usage data.

Essential Cookies

Required for the Platform to function properly (e.g., session management, authentication, security features)

Analytics Cookies

Help us understand how you use the Platform, which features are most popular, and how we can improve (e.g., Google Analytics)

Preference Cookies

Remember your settings, language choices, and other preferences to personalise your experience

Research Cookies

Used specifically for research studies you participate in, to track task completion and performance (always with your informed consent)

You can control cookies through your browser settings. For more details, see our Cookie Policy.

You can opt out of non-essential cookies at any time through your browser settings or our cookie management tool. However, please note that disabling certain cookies may affect your ability to use some Platform features.

12. Third-Party Services and Links

The Cross Scale Platform may include links to third-party websites, applications, or services, and may integrate with third-party tools for research purposes.

  • Third-party authentication providers (e.g., institutional login systems)
  • Payment processors for platform subscriptions
  • Cloud storage and hosting providers
  • Analytics and performance monitoring tools
  • Research tools and integrations (e.g., survey platforms, data analysis software)
  • Links to external research resources and publications

We are not responsible for the privacy practices of third-party websites or services. We recommend reviewing the privacy policies of any third-party services you access through our Platform. Third-party service providers may collect information about you when you interact with their content or services.

13. International Data Transfers

We primarily store data within the European Economic Area (EEA). If we transfer data outside the EEA (for example, when using cloud service providers with global infrastructure), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, adequacy decisions, or other legally compliant transfer mechanisms.

14. Children's Privacy

Cross Scale does not offer services for purchase or use by children. Our Platform is intended for researchers and study participants aged 16 and older.

If you are under 16, you may only use the Platform with the involvement and consent of a parent or legal guardian. If you are between 13 and 16 years old and wish to participate in a research study, specific parental/guardian consent will be required as part of the study consent process. We do not knowingly collect personal data from children under the age of 13 without verified parental consent. If we learn that we have collected personal data from a child under 13 without proper consent, we will delete that information as quickly as possible.

15. Changes to This Privacy Policy

Our research platform evolves constantly, and our Privacy Policy will change as well. We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors.

Changes will be posted on this page with a new 'Effective Date' at the top. For material changes that significantly affect your rights, we may also notify you by email or through a prominent notice on the Platform. We encourage you to review this policy periodically. Continued use of the Platform after changes become effective constitutes your acceptance of the updated policy. We stand behind the promises we make and will never materially change our policies to make them less protective of personal data collected in the past without obtaining consent from affected users.

16. Complaints and Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with a supervisory authority.

In Poland, the supervisory authority is: President of the Personal Data Protection Office (PUODO) Address: ul. Stawki 2, 00-193 Warsaw, Poland Website: https://uodo.gov.pl Email: kancelaria@uodo.gov.pl If you are located in another EU/EEA country, you may also contact your local data protection authority.

17. Dispute Resolution and Governing Law

Any dispute over privacy or this Privacy Policy is subject to our Terms of Service, including limitations on damages and resolution of disputes.

This Privacy Policy and any disputes relating to it are governed by the laws of the Republic of Poland. If you have any concern about privacy at Cross Scale, please contact us with a thorough description, and we will work to resolve it promptly.

18. Contact Us and Data Protection Requests

If you have any questions about this Privacy Policy, wish to exercise your rights, or have concerns about your personal data, please contact us: Cross Scale, LLC Registered Address: Warsaw, postal code 02-339, Poland Email: info@crosscale.eu Website: https://crosscale.eu

We will acknowledge your request promptly and respond substantively within one month. In complex cases, we may extend this period by two additional months, and we will inform you of any such extension.

Terms of Service

Welcome to Cross Scale ("we", "our", "us"). These Terms of Service ("Terms") govern your access to and use of our website, services, and content provided through https://crosscale.eu (the "Platform"). By using our Platform, you agree to these Terms. If you do not agree, please do not use the Platform.

1. About Us

Cross Scale is a Poland-based platform for cognitive science research, facilitating study recruitment, sharing scientific content, and enabling collaboration among researchers and participants.

Cross Scale, LLC Registered Address: Warsaw, postal code 02-339, Poland Email: contact@crosscale.eu Website: https://crosscale.eu

2. Eligibility

You must be at least 16 years old to use this Platform. If you are under 16, you must have consent from a parent or legal guardian before using the site or participating in any studies.

3. Platform Use

By using the Platform, you agree to:

  • Use it only for lawful purposes;
  • Not interfere with its operation or security;
  • Not submit false information;
  • Not copy, distribute, or reuse any content without permission.

Violation of these rules may result in suspension or termination of your access.

4. Intellectual Property

All content, logos, texts, graphics, and other elements on the Platform are the property of Cross Scale or its licensors and are protected under intellectual property laws. Unauthorised use, reproduction, or distribution is prohibited unless explicitly permitted.

5. Study Participation

If you choose to participate in research studies through the Platform:

  • You will be provided with a participant information sheet and consent form;
  • Participation is voluntary, and you can withdraw at any time without consequence;
  • Any data collected will be handled according to ethical guidelines and GDPR regulations;
  • Some studies may require specific eligibility criteria.

Full details about data usage and consent will be presented before participation.

6. Privacy and Data Protection (GDPR)

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and relevant Polish data protection laws.

Please refer to our Privacy Policy for full details on:

  • What personal data we collect and why;
  • Legal bases for processing your data;
  • Your rights under GDPR (e.g., access, rectification, erasure, restriction, objection, data portability);
  • How we store and protect your data;
  • How to contact us or lodge a complaint.

Cross Scale, LLC Registered Address: Warsaw, postal code 02-339, Poland Email: contact@crosscale.eu Jurisdiction: Republic of Poland

7. Cookies

We use cookies and similar technologies to enhance user experience and collect usage statistics. You will be notified upon first visit and asked to give or deny consent where required. See our Cookie Policy for details.

8. External Links

The Platform may contain links to third-party websites. We are not responsible for the content, privacy policies, or practices of third-party sites. Accessing them is at your own risk.

9. Modifications to Terms

We may revise these Terms at any time. Updates will be posted on this page with a new "Effective Date". Continued use of the Platform after changes means you accept the updated Terms.

10. Limitation of Liability

To the fullest extent permitted by law, Cross Scale shall not be liable for any indirect, incidental, special, or consequential damages arising out of your use or inability to use the Platform.

11. Governing Law and Jurisdiction

These Terms are governed by the laws of the Republic of Poland. Any disputes arising from these Terms or use of the Platform shall be subject to the exclusive jurisdiction of the Polish courts.

12. Contact Us

For questions or concerns regarding these Terms or your data: Cross Scale, LLC Registered Address: Warsaw, postal code 02-339, Poland Email: contact@crosscale.eu Website: https://crosscale.eu

13. Related Policies

These Terms incorporate the following by reference:

  • Privacy Policy
  • Cookie Policy