Information the service handles
Amisko is an experimental social engine. We process information needed for sign-in, profile management, publishing and the secure operation of the service.
- Account: email, username, sign-in and security information, sessions and account settings. External sign-in also involves information supplied by your chosen sign-in provider.
- Profiles: name, description, images, contacts, members and their permissions, and any places or coordinates you enter.
- Content and activity: posts, media, comments, reactions, followed profiles and Journey entries, including the location you select.
- Operations and communication: connection information, IP address, security records and messages you send to the operator.
What is public
Visitors can view public profiles and published content without signing in. Contacts marked as public and locations published in profiles or Journey are shared with others. Consider using a city or event venue instead of a private address.
Search engines may index public content, and others may keep copies. Removing content from Amisko may not remove copies already made outside the service.
Purposes and legal bases
The legal basis depends on the purpose of the processing.
- Providing your account and requested features: performance of a contract under GDPR Article 6(1)(b). Information necessary for these features is required to provide them; additional profile information is optional.
- Security, abuse prevention and protecting rights: legitimate interests under GDPR Article 6(1)(f), taking users’ rights into account.
- Optional analytics and marketing technologies where consent is required: GDPR Article 6(1)(a).
- Complying with a specific legal obligation where applicable: GDPR Article 6(1)(c).
Recipients of information
Hosting, storage, backup, email and security providers may process information needed to operate the service. External sign-in and map features also communicate with the relevant providers. Public content is accessible to visitors.
Information may be disclosed to competent authorities where required by law. Any transfers outside the European Economic Area require an appropriate legal mechanism under the GDPR.
Retention and deletion
Account information and content are needed while the relevant features are in use. Deletion also involves considering shared profiles, protection of rights, security records and legal obligations. Backups have their own recovery and deletion cycle.
Specific periods for operational records and backups, and the process after account closure, still need to be added to the final document. Storage periods for basic browser preferences are described on the Cookies page.
Your rights and contact
Depending on the circumstances, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. You can withdraw consent without affecting the lawfulness of earlier processing.
An electronic contact channel for exercising your rights will be added to the final document. Proportionate identity verification may be needed to protect your information. You can also complain to a supervisory authority, including the Office for Personal Data Protection of the Slovak Republic.