Privacy Policy - SplitPeaks

Protecting your personal data is important to us. In this privacy policy, we want to explain in detail what personal data we collect when you use splitpeaks.com or splitpeaks.com (hereinafter referred to as "Services") and for what purpose they are used.

Contact details and data controller

The data controller is:

Company details

You can contact us at kontakt@splitpeaks.com. You can also contact our Data Protection Officer at rodo@splitpeaks.com.

Subject of data protection

The subject of data protection is personal data, i.e. any information relating to an identified or identifiable natural person.

Automated data collection

When using our Services, your device automatically transmits data for technical reasons. The following data is stored separately from other data that may be transmitted by you:

• Browser type and version
• Operating system
• Referring URL
• URL of the loaded page
• Network connection delay
• Date and time of server request
• Your IP address

We collect this data in order to:

• Enable users to use the application. This is the primary purpose of collecting the above data.
• Ensure the security of our IT systems, e.g. to prevent specific attacks on our systems and identify attack patterns.
• Ensure the proper functioning of our IT systems, e.g. when errors occur that we can only fix by logging the IP address.
• Enable the prosecution of crimes, security protection or legal proceedings in the case of specific indications of crimes.

Your IP address is stored for a period of 90 days. In this case, the processing is based on our predominant legitimate interests mentioned above (Art. 6(1)(f) GDPR).

Registration data

To use all features of splitpeaks, you must register. For this purpose, you must provide the following mandatory data:

• Email address
• Username

Alternatively, you can log in to splitpeaks using your Google account. In this case, we will receive the following data from Google LLC, 1600 Amphitheater Pkwy Mountain View, California 94043, USA:

• First and last name
• Email address
• Profile picture
• Authorization token

After signing up, you will receive an activation email to activate your splitpeaks account.

Your registration data is necessary for splitpeaks to create a user account for you. It also serves to activate and manage your account and enable you to use all features of the Service. In this way, you consent to entering into a user agreement (free of charge), which allows us to store data (in accordance with Art. 6(1)(b) GDPR).

To enter into the agreement, you must provide us with this data. However, you are not obligated to enter into the agreement or to provide the data.

You may also voluntarily provide additional information during registration, for example, you can add a profile picture and tell about yourself. This information is voluntary and is not required for registration. However, please note that this information may be visible to other splitpeaks users according to your settings. We collect this data to be able to provide you with the appropriate features of our Services, Art. 6(1)(b) GDPR.

Community features

On splitpeaks, you can interact with other users, for example by commenting, providing other tips, or discussing with other users. You can also follow other users if you want to stay up to date with new content from them.

The use of these features is voluntary. If you use them, we collect the data you entered to share it with other splitpeaks users according to your settings and the feature you use.

Your data is processed for these purposes to provide you with features within the user agreement (Art. 6(1)(b) GDPR).

Requests

Direct inquiries via our contact details If you send us inquiries by email or other means (e.g. mail), your data will be processed to handle the inquiry. This includes:

• Your first and last name
• Time and date of the inquiry and other information you provide in the inquiry
• Depending on how you contact us or what contact details you provide, we may also process:
• Your email address
• Your address

Purpose and legal basis for processing

The legal basis for processing is our legitimate interest (Art. 6(1)(f) GDPR) for the purpose of rapid communication, conducting the exchange you seek, and proper processing of your inquiry.

Data storage

We store inquiries related to contracts or having potential legal significance for the general limitation period, i.e. three years from the end of the year in which we received your inquiries. All other inquiries are stored for a period of 24 months.

Commercial communication

If you register with us, we will inform you about news regarding our services on the splitpeaks platform approximately once a month. In this case, the collection and processing of your personal data is based on our legitimate interest in promoting similar services to your user account (Art. 6(1)(f) GDPR).

You can object to this at any time, even during registration, by deactivating the appropriate checkbox or by clicking the unsubscribe link in individual emails.

Cookies

What are cookies and tracking technologies?

When we use the word "cookies" in this privacy policy, we mean any tracking technology that stores or accesses information on the user's device, including any SDKs, tracking pixels, HTML5 local storage, local shared objects, and fingerprinting techniques.

Cookies are usually classified: (A) by purpose (technical cookies, analytical cookies, profiling cookies); (B) by publisher (first-party cookies, third-party cookies); (C) by duration (session cookies, persistent cookies).

This classification is important because different legal requirements apply depending on how the cookie is classified.

Social plugins

If you wish, you can use social plugins to share our website content on social networks. We provide a "two-click" solution: if you want to share content using such a plugin, you must first click the icon of the respective social network.

Disclosure of your data

Your data will only be disclosed beyond what is described in this data protection statement in the following cases:

If it is necessary to clarify illegal use of our Services or to pursue legal claims, personal data will be disclosed to external advisors (e.g. lawyers), law enforcement authorities and, if necessary, injured third parties.

In addition to the processors already mentioned in this data protection statement, we also use the following categories of subcontractors:

• IT service providers
• Cloud service providers
• Software providers

Transfer of data to third countries

We also process data in countries outside the European Economic Area ("EEA"), in so-called third countries, or transfer data to recipients in these third countries.

If your personal data is transferred outside the cases described in this data protection statement to recipients outside the European Economic Area, we transfer your data to third countries for which the European Commission has issued an adequacy decision pursuant to Art. 45(1) GDPR.

Automated decision-making and visitor profiling

We do not use automated decision-making with regard to profiling.

Deletion of your data

Unless otherwise stated, we delete or anonymize your personal data as soon as it is no longer needed for the purposes for which it was collected or used in accordance with the previous paragraphs. As a general rule, we store your personal data for the duration of use or the agreement concluded via the website, as well as for a period of 30 days during which we store backups after data deletion.

If you delete your user account, your account will be completely and permanently deleted. However, we will keep backups of your data for a period of 30 days before their final deletion, provided that this data is no longer required for legal reasons.

Your rights as a data subject

With regard to the processing of your personal data, you have the following rights:

Right of access to data

You have the right at any time, upon request, to obtain information about the personal data we process in accordance with Art. 15 GDPR.

Right to rectification

You have the right to request immediate rectification of your personal data if it is inaccurate.

Right to erasure

You have the right, under the conditions set out in Art. 17 GDPR, to request the erasure of your personal data.

Right to restriction of processing

You have the right to request restriction of processing in accordance with Art. 18 GDPR.

Right to data portability

You have the right to receive personal data you have provided to us in a structured, commonly used and machine-readable format, in accordance with Art. 20 GDPR.

Right to object

You have the right at any time to object to the processing of your personal data on the basis of Art. 6(1) GDPR.

Right to lodge a complaint

You have the right to contact the supervisory authority of your choice in case of complaints.

Changes to this privacy policy

We reserve the right to update this privacy policy to reflect changes in our practices and services. When we publish changes to this privacy policy, we will update the date of this privacy policy. We recommend that you check this page from time to time to stay up to date with any changes to this privacy policy.