Effective date: 01.03.2025


Privacy Policy of Moitin s.r.o., based in: Miletičova 5B, 821 08 Bratislava, ID No.: 47 349 069, registered in the Commercial Register of the Municipal Court of Bratislava III, Section: Sro, File No.: 123623/B (hereinafter referred to as the "Company" or "Operator") in connection with the use of the ShowCollect application.


INTRODUCTORY PROVISIONS


This Privacy Policy governs the privacy of the personal information of users of the ShowCollect application, which is further defined in the terms of use of the application (the "Application").


The Controller acts in accordance with the provisions of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, Directive 95/46/EC (hereinafter referred to as the "Regulation") and Act No. 18/2018 Coll. on the protection of personal data, as amended (hereinafter referred to as the "Act").


CONTACT DETAILS OF THE OPERATOR


Business name: Moitin s.r.o.

Headquarters: Miletičova 5B, 821 08 Bratislava - Ružinov district

ID: 47 349 069

Minutes: Commercial Register of the Municipal Court Bratislava III, Section: Sro, Entry No.: 123623/B

Tel. no: +421 948 068 744

E-mail: info@showcollect.com


THE PURPOSES OF THE PROCESSING OF PERSONAL DATA


We process your personal data for the following purposes :

  1. maintaining a user account

  2. digitisation of collectors' items in order to create an overview of the collection and its value

  3. operating the social network of the Application or the discussion forum of the Application

  4. billing purposes (in case of purchase of Premium Prepaid Services)

  5. the exercise of our rights and claims

  6. controls by public authorities


WHAT DATA WE PROCESS


We collect the following personal information about you in connection with your use of the App :


  1. User data:

  1. e-mail address

  2. password

  3. profile name

  4. Apple account or Google account credentials


  1. Data needed for social networking / forum Apps where you can select the region or country of interest:

  1. name and surname

  2. City

  3. State

  4. year of birth

  1. Payment details in case of purchase of Premium Prepaid Services:

  1. name and surname

  2. address

  3. payment method apple pay or google pay


  1. Data related to the main purpose of the Application:

  1. photographs of collectibles

  2. list of the collection

  3. the value of collectibles / collections


LEGAL BASIS FOR PROCESSING


We process your personal data in accordance with the following legal bases:

  1. as the data subject, you have consented to the processing of your personal data for one or more specific purposes in accordance with Article 6(1)(a) of the Regulation (maintaining a user account, digitizing collectibles, registering for the social network/forum of the App);

  2. the processing of your personal data is necessary for the performance of a contract to which you are a party as a data subject or to carry out pre-contractual measures at your request as a data subject (processing of your request for and provision of Premium Subscription Services);

  3. processing is also necessary for the fulfilment of a legal obligation of the controller (billing purposes and related bookkeeping, inspections by public authorities);

  4. the processing of your data is necessary for the purposes of the legitimate interests pursued by the controller (exercise of rights and claims).


RETENTION PERIOD


Your personal data will be kept for the following period:

  1. for at least the entire duration of the contractual relationship based on your request to purchase Premium Prepaid Services or, with respect to the exercise of any claims, for a period of four (4) years from the termination of the contractual relationship;

  2. in the case of the processing of personal data for which consent has been granted, we will process this personal data until the time of cancellation/deletion of the user account and/or the social network/forum account of the App or until the consent is withdrawn;

  3. we will process personal data that is necessary for the proper performance of legal obligations for the period specified by the relevant legislation (e.g. tax documents for 10 years).


CATEGORIES OF BENEFICIARIES


Your personal data may be provided to the following categories of recipients:

  1. Payment gateway operator and banking institutions: the operator does not have your payment card data unless it is stored. By default, only the secure payment gateway apple pay or google pay and from the Apple or Google platform and the relevant banking institutions have your payment card data. When you pay with a payment card from your computer, the communication with the payment gateway server takes place via an iframe (i.e. the payment gateway page is displayed directly on our website without the need for further redirection). The payment card information is recorded directly in the payment gateway, we do not process or store this data;

  2. debt collection companies, law firms, debt buyers and/or public authorities: in the event that we need to exercise our rights in the event of default on your obligations to our company, we may transfer your personal data to the above-mentioned recipients or institutions for this purpose;

  3. service centre, Operator's supplier: in the event of a reported defect or malfunction of the Application, the Operator's service centre / supplier may need more information about the defect, its manifestations or other relevant information in order to properly resolve and remove it;

  4. other users of the social network/forum of the App: if you have given your consent and registered in the forum/social network of the App, your personal data in the form of your username and shared photos can also be seen by other users of the social network/forum of the App


The Controller cooperates exclusively with recipients who guarantee at least the same or similar level of protection of your personal data as the Controller itself. The above does not apply to other users of the social network, for whom the Operator is not responsible, and therefore we recommend caution when sharing data with other users within the social network / forum of the Application, as data may be shared, transferred, copied and further disseminated on the Internet.


TRANSFER TO OTHER COUNTRIES OR INTERNATIONAL ORGANISATIONS


The controller does not intend to transfer your personal data to a third country or an international organisation.


YOUR RIGHTS


As a data subject, you have the following rights in relation to the processing of personal data in accordance with the relevant provisions of the Regulation and the Act:


Data subject's right of access - the data subject has the right to obtain confirmation from the controller as to whether personal data relating to him or her are being processed. Where the controller processes such personal data, the data subject shall have the right to obtain access to those personal data and information about

  1. the purpose of the processing of personal data,

  2. the category of personal data processed,

  3. the identification of the recipient or the category of recipient to whom the personal data have been or are to be disclosed, in particular a recipient in a third country or an international organisation, if applicable,

  4. the period of retention of the personal data; if this is not possible, information on the criteria for determining it,

  5. the right to require the controller to rectify, erase or restrict the processing of personal data relating to the data subject, or to object to the processing of personal data,

  6. the right to initiate proceedings under section 100 of the Act,

  7. the source of the personal data, unless the personal data were obtained from the data subject,

  8. the existence of automated individual decision-making, including profiling pursuant to Article 28(1) and (4); in such cases, the controller shall provide the data subject with information, in particular on the procedure used as well as on the meaning and the envisaged consequences of such processing of personal data for the data subject.


The data subject shall have the right to be informed of the appropriate safeguards relating to the transfer where personal data are transferred to a third country or an international organisation.


The controller is obliged to provide the data subject with his or her personal data that he or she processes. The controller may charge a reasonable fee corresponding to the administrative costs for the repeated provision of the personal data requested by the data subject. The controller shall provide the personal data to the data subject in the manner requested by the data subject.


The right to obtain personal data shall not adversely affect the rights of other natural persons.


Right to rectification of personal data - the data subject has the right to have inaccurate personal data concerning him or her rectified by the controller without undue delay. Having regard to the purpose of the processing of personal data, the data subject shall have the right to have incomplete personal data completed.


Right to erasure of personal data - the data subject has the right to have personal data concerning him or her erased by the controller without undue delay.


The controller is obliged to erase the personal data without undue delay if the data subject has exercised the right to erasure, if

  1. the personal data are no longer necessary for the purpose for which they were collected or otherwise processed,

  2. the data subject withdraws consent pursuant to Section 13(1)(a) or Section 16(2)(a) of the Act, on the basis of which the processing of personal data is carried out, and there is no other legal basis for the processing of personal data,

  3. the data subject objects to the processing of personal data pursuant to Section 27(1) of the Act and no legitimate grounds for the processing of personal data prevail, or the data subject objects to the processing of personal data pursuant to Section 27(2) of the Act,

  4. personal data are processed unlawfully,

  5. the reason for deletion is the fulfilment of an obligation under a law, a special regulation or an international treaty by which the Slovak Republic is bound, or

  6. personal data were collected in connection with the offer of information society services pursuant to Section 15(1) of the Act.


Right to restriction of processing of personal data - the data subject has the right to have the controller restrict the processing of personal data if

  1. the data subject objects to the accuracy of the personal data during a period allowing the controller to verify the accuracy of the personal data,

  2. the processing of the personal data is unlawful and the data subject objects to the erasure of the personal data and requests instead the restriction of their use,

  3. the controller no longer needs the personal data for the purpose of processing the personal data but the data subject needs them to exercise a legal claim, or

  4. the data subject objects to the processing of personal data pursuant to Section 27(1) of the Act, pending verification whether the legitimate grounds on the part of the controller outweigh the legitimate grounds of the data subject.


Notification obligation in connection with rectification, erasure or restriction of processing of personal data - the controller is obliged to notify the recipient of rectification of personal data, erasure of personal data or restriction of processing of personal data carried out pursuant to § 22, § 23 (1) or § 24 of the Act, unless this proves impossible or does not require disproportionate effort. The controller shall inform the data subject of the recipients referred to in the preceding sentence if the data subject so requests.


Right to data portability - the data subject has the right to obtain personal data concerning him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and has the right to transfer those personal data to another controller, if technically feasible and if

  1. personal data are processed pursuant to Section 13(1)(a), Section 16(2)(a) or Section 13(1)(b) of the Act; and

  2. the processing of personal data is carried out by automated means.


Right to object to the processing of personal data - the data subject has the right to object to the processing of his or her personal data on grounds relating to his or her particular situation carried out pursuant to Section 13(1)(e) or (f) of the Act, including profiling based on these provisions. The controller shall not further process the personal data unless it demonstrates compelling legitimate interests for the processing of the personal data which override the rights or interests of the data subject or grounds for exercising a legal claim. The data subject shall have the right to object to the processing of personal data concerning him or her for direct marketing purposes, including profiling to the extent that it is related to direct marketing. If the data subject objects to the processing of personal data for the purpose of direct marketing, the controller may no longer process the personal data for the purpose of direct marketing.


Automated individual decision-making, including profiling - the data subject has the right not to be subject to a decision which is based solely on automated processing of personal data, including profiling, and which has legal effects concerning him or her or similarly significantly affects him or her. The preceding sentence shall not apply where the decision is

  1. necessary for entering into a contract or performance of a contract between the data subject and the controller,

  2. implemented on the basis of a special regulation or an international treaty by which the Slovak Republic is bound and which also provides for appropriate measures guaranteeing the protection of the rights and legitimate interests of the data subject, or

  3. based on the explicit consent of the data subject.


The right to file a petition with the Office for Personal Data Protection pursuant to § 99 et seq. Act for suspected violation of rights in the processing of personal data.


SECURITY OF YOUR PERSONAL DATA


We treat your personal data professionally and sensitively. Personal data is stored in a secure database with the need for authorized access. All our systems are protected against misuse of personal data and all personal data is treated as strictly confidential. All staff of the Operator who, in order to ensure the proper functioning of the Application and the best user experience for you, come into contact with your personal data, have been properly instructed and trained on the proper and sensitive handling of your personal data.


In order to protect your personal data, we have put in place appropriate technical and organisational measures such as pseudonymisation, encryption, access and storage policies.






COMMON AND FINAL PROVISIONS


The provision of personal data is a contractual requirement of the Data Controller. The data subject is not obliged to provide personal data. However, the consequence of not providing personal data is the inability to use the services of the Application.


Where your consent is required for the processing of personal data for a specific purpose, you as the data subject have the right to withdraw your consent at any time in writing or by e-mail to the address or e-mail address of the Controller, as specified in this Policy, or by cancelling your user account using the procedure in the link "cancellation of user account". Withdrawal of consent does not affect the lawfulness of processing based on consent granted before its withdrawal.


Personal data of persons under the age of 16: The App is not intended for children under the age of 16. If you are under 16, you should not use the App.