Data

Privacy policy

What personal data the services collect, why, on what legal basis, who processes it and what rights you have.

Controller

The controller is Haydamax OÜ, Narva mnt 5, 10117 Tallinn, Harju maakond, Estonia, registry code 17351554. Contact for data protection questions: team@chakloon.com. A data protection officer is not appointed, because the criteria of Article 37 GDPR are not met.

What we collect and why

Account data

e-mail address, chosen handle, display name, language and time zone. Basis: performance of the contract. Kept while the account exists.

Content you publish

posts, comments, uploads and their metadata. Basis: performance of the contract.

Payment data

amount, currency, time, order reference, last digits of the card, and the identifier assigned by the processor. Card numbers never reach us. Basis: performance of the contract and legal accounting obligations. Kept for seven years as accounting records.

Server logs

IP address, request, time, browser identification. Basis: legitimate interest in operating and securing the services. Kept for thirty days.

Audience measurement

page, referrer, country, region, city, device type, and for some services campaign parameters. Collected by our own installation of Umami, which sets no cookies and does not store IP addresses. Basis: legitimate interest in understanding what is read.

Correspondence

what you write to us and our answer. Basis: legitimate interest in answering, or performance of the contract.

Who else processes it

• Hetzner Online GmbH — servers and object storage in Germany and Finland
• Stripe — card payments, as an independent controller for the payment itself
• the mail infrastructure we operate ourselves, for transactional messages
• where a service uses a further processor, its own page says so

We do not sell personal data and do not share it for advertising. Data is processed inside the European Economic Area, except where a processor transfers it under a lawful transfer mechanism.

Your rights

• access to the data we hold about you, and a copy of it
• correction of inaccurate data
• deletion, where there is no legal reason to keep it
• restriction and objection, including objection to processing based on legitimate interest
• portability of data you gave us, in a machine-readable form
• withdrawal of consent at any time, where processing is based on consent

Write to team@chakloon.com. We answer within one month. If you believe we handle your data unlawfully, you may complain to the Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), Tatari 39, 10134 Tallinn, aki.ee, or to the supervisory authority of the country where you live.

Automated decisions

We do not make decisions with legal effect about you by automated means alone. Automated systems are used to produce and rank published material, not to decide about people.

Other documents