Privacy Policy

1. Introduction
   

This Privacy Policy describes the scope and conditions under which the Hobio application (the "Application") collects, processes and protects the personal data of registered users of the Application ("You").

Through this Privacy Policy, the Controller of your personal data fulfils its information obligation towards you, as personal data subjects, in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation ("GDPR").

2. Personal data Controller

The controller of your personal data is the company Hobio s.r.o., ID: 21881227, with registered office at Kaprova 42/14, Staré Město, 110 00 Prague 1, Czech Republic ("Controller") which operates the Application.

Please note that this document governs the processing of personal data processed only through the Application. The Application may contain links to service and products of certain third parties,  who are separate data Controllers. In the event that you choose to use their services or visit linked third party sites, the processing of your personal data outside the Application is governed by the rules of those third parties. The Controller is not responsible for the processing of personal data by third parties. 

3. Categories of personal data processed

The Application collects and processes any personal data you provide through the Application interface, including but not limited to:

• Contact and identification information provided when you register your user account within the Application ("Profile"). This information includes your email address, first and last name. The same data will also be provided to the Application if you use your Facebook account or register using your Google account or Apple ID for the registration process. 

• Information filled in your Profile in the App: in particular, your gender, date of birth, photos uploaded by You, description of your person filled in your profile, telephone number, categories of interests such as specific sports or hobbies ("Interests"), your static location by entering a fixed address, city and country resulting from the static location, or your live location, with your consent granted through your device.

• Created Activities: any activity you create in the Application that represents an event focused on a specific category of interest and allows other users to connect with you or join the activity ("Activity"), description of such Activity, the date and location of the Activity, and the conditions for participation in the Activity.

• Interaction with the Application and other users: a list of other users you have added to your friends or blocked users list in the Application, the content of your communications with other users of the Application via messages sent and received, and information about joining and requesting to join your Activity or other users' Activities.

• Your location data: your current location will be used to filter relevant activities in your vicinity and to display relevant content in the Application. Location tracking is subject to your consent to share your current location with the Application on your device.

• Prepaid Services: data relating to the use of prepaid services in the Application, including payment details

4. Purpose of processing personal data

Personal data is processed for the purpose of 

• Enabling the use of the Application and the provision of related services associated with the subscription services within the Application.

• Application development, debugging and improving features in the Application. 

• Analysis and Research, for internal analysis and research to optimize the features of the Application, understand user behavior and tailor the services to their needs.

• Communication between the Controller and you in case of reporting application defects or contacting technical support.

• Maintaining customer relationships, including personalizing services and communicating with customers based on their preferences and behavior within the Application, to improve the customer experience when using the Application.

• Sending newsletters or commercial communications and offers related to the paid services of the Application to registered users of the Application.

• Fraud prevention, detection and investigation of fraudulent conduct or misuse of the Application.

• Displaying external third-party advertising. If you consent to the use of cookies with the Application, this advertising is personalized. 

5. Recipients of personal data

Personal data may be shared with the following third parties:

• Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland: we use Google tools Google's tools for, among other things, the personalization of advertisements by means of so-called cookies. For more information on the processing of personal data by Google using advertising tools, please visit the following link: https://policies.google.com/technologies/cookies?hl=en-US

The aforementioned recipients of personal data are separate Controllers of your personal data.

Your personal data will be also disclosed to the other users of the Application. Certain personal information in the Application is accessible to all other registered users of the Application, in particular your gender (if you consent to this in your Profile settings), your Profile photo, age, country and city, the static address listed in your profile, the description in your profile, your marked Interests and the creation of Activities.

6. Advertisement

The Application displays personalized and non-personalized ads. If you do not consent to personalization for advertising purposes, you will be shown non-targeted advertising in the Application, which will not always be relevant to you. Advertising is displayed in the Application based on the Controller's legitimate interest in funding the operation of the Application.

7. Other processors of personal data

The Controller uses processors of your personal data providing the necessary technical security and support for the operation of the Application. The Controller entered into a contract with all processors of personal data for the processing of personal data within the meaning of Article 28 of the GDPR.

The Controller uses third party services as additional processors of your personal data for the development and operation of the Application. The provider of IT infrastructure, including data hosting, is the company: 

• Github Actions: GitHub, Inc.; 88 Colin P Kelly Jr St, San Francisco, CA 94107, United States.

• Expo EAS: Expo, Inc.; 2205 152nd Ave NE, Redmond, WA 98052, United States.

• Hetzner: Hetzner Online GmbH; Industriestr. 25, 91710 Gunzenhausen, Germany.

• DigitalOcean: DigitalOcean, LLC; 101 Avenue of the Americas, 10th Floor, New York, NY 10013, United States.

Payments on behalf of the Controller within the Application are processed through Apple Pay provided by Apple Inc. located at 1 Apple Park Way, Cupertino, California 95014, USA.

The development and maintenance of the Application is carried out by the Controller's employees and external collaborators based in the European Economic Area.

For analytical purposes, the Controller uses the services of Google Ireland Ltd., located at Gordon House, Barrow Street, Dublin 4, Ireland, as a processor of personal data. The analytical tools use aggregated and statistical data on the use of the Application by registered users.

All third parties used by the Controller as its other processors are contractually obliged to protect your personal data and to process it only in accordance with the applicable legal provisions within the meaning of Article 28 of the GDPR.

8. Legal basis for the processing of personal data

The processing of personal data is based on:

• Consent: Your consent is required for the use of ad personalization. 

• Performance of a contract: for the purposes of performance of the contract between you and the Controller on provision of Application's premium services, if you use the paid features of the Application.

• Compliance with legal obligations: where necessary to comply with legal requirements arising from legislation, in particular in connection with making payments in the Application and complying with the tax obligations of the Controller.

• Controller's legitimate interest in improving the Application and related services, reaching users with Controller's business offers, securing the Application and complying with the rules of use, including protecting and enforcing the rights of Controller and other users of the Application.

9. Retention of personal data

Your personal data will be retained for as long as necessary to achieve the purposes for which it was collected or as required by law. After this period, the personal data will be securely erased or anonymized. The specific duration of the processing of your personal data depends on the specific situation, the type of data, the purpose and the legal basis for processing.

Your personal data relating to your Profile will generally be processed for a period of      30 days after termination of your Profile for any reason, unless processing is necessary for other separate purposes set out below. 

Such a situation may arise if a legitimate interest in the processing of your personal data or a legal obligation applicable to the Controller persists beyond the termination of your Profile. In the case of the use of paid services in the Application, the Controller will process your identification and payment data for a period of 3 years after the paid transaction has taken place, retention period of other personal data is not affected by this exception. This retention period represents the limitation period of property rights under the Civil Code, for which the Controller has a legitimate interest in keeping the data about this transaction for the purpose of substantiating and enforcing any claims related to the payment. If a legal regulation provides for a longer retention period for your payment information, in particular for the recording of payments for tax purposes, the payment data will be processed for this extended period. 

10. Rights of the data subject

In accordance with the GDPR, you have the following rights regarding the processing of your personal data:

• Right of access: you have the right to request access to your personal data.

• Right to repair: you have the right to request the correction of inaccurate or incomplete data.

• Right to erasure: you have the right to request the erasure of your personal data (right to be forgotten).

• Right to restriction of processing: you have the right to request restriction of the processing of your data.

• Right to object: you can object to the processing of your personal data.

• Right to data portability: you have the right to receive your data in a structured and machine-readable format.

• Right to withdraw consent: you can withdraw the consent you have given at any time. In the event of withdrawal of the consent already given, the Controller will terminate the processing of the personal data based on your consent without undue delay, depending on technical and organizational possibilities. Withdrawal of prior consent does not affect the lawfulness of the previous processing of your personal data based on the consent so given.

• Right to file a complaint: you have the right to file a complaint with the relevant Data Protection Authority. For a list of all data protection supervisory authorities in your country and their contact addresses, please see the following link: https://www.edpb.europa.eu/about-edpb/about-edpb/members  

  
  

11. Security of personal data

We ensure that your personal data is protected through technical and organizational measures that prevent unauthorized access, loss or misuse of data. When processing your personal data, the Application uses security mechanisms to ensure a high level of data protection against accidental or unlawful destruction, loss, alteration, unauthorized disclosure of personal data transmitted, stored or otherwise processed.

Please note that you are not supposed to submit sensitive information (special categories of personal data) into the Application.

12. Profiling and automated decision making

The Controller carries out profiling of personal data subjects within the meaning of Article 4 of the GDPR only in the form of collecting data about the current location of your device, which is subject to your consent. There is no automated decision-making in the processing of personal data in the Application. 

13. Changes to this policy

This Privacy Policy may be updated by the Controller from time to time. You will be notified of any material changes either through the Application interface or via the contact email you provided when you registered your user profile.

14. Contact

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact the Controller at info@hobio.app.