Privacy Policy (GDPR)

The Data Controller pursuant to Article 4(7) of Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. is: • Name / Controller: Milan – CROWDIZ (independent operator of the analytical portal crowdiz.com) • Domicile: Bratislava, Slovak Republic • Email for privacy inquiries: info@crowdiz.com The Controller is not mandated to designate a Data Protection Officer (DPO). Inquiries and requests are addressed directly by the operator via the contact email specified above.

The nature of personal data collected depends on your interaction with Crowdiz: 1. Website Visitors: • Server Log Telemetry: IP address, date and time of request, browser version, operating system, referrer URL, and diagnostic response codes. • Cookie Information: Anonymized session IDs and aggregated navigation metrics (solely if analytics consent was provided). 2. Individuals Contacting Us: • Contact Data: Name/handle, email address, and correspondence content sent to our mailbox. 3. Platform Partners & Administrators: • Verification & Authentication: Email credentials, authentication tokens, contact representative details for managing partner platform profiles.

Personal records are processed exclusively under established lawful grounds: • Technical Operation & Cyber Defense: Legal Basis: Legitimate interest under Art. 6(1)(f) GDPR for guaranteeing uptime, fault isolation, and defending against DDoS or automated exploit attempts. • Inquiry Handling & User Communications: Legal Basis: Legitimate interest in responding to user questions under Art. 6(1)(f) GDPR, or pre-contractual measures at your request under Art. 6(1)(b) GDPR. • Traffic Analytics (Google Analytics): Legal Basis: Your prior freely given consent under Art. 6(1)(a) GDPR supplied through our cookie banner. • Statutory Compliance: Legal Basis: Compliance with legal obligations under Art. 6(1)(c) GDPR when required by applicable statutory bodies or courts.

We never sell, lease, or distribute your personal records. We cooperate with verified technical processors under data processing agreements: • Google Cloud / Firebase (Google Ireland Limited): Hosting architecture, Firestore database, and authentication. • Google Analytics (Google Ireland Limited): Aggregated anonymized traffic telemetry. • Email and DNS Providers: Ensuring reliable message delivery and infrastructure integrity. • Law Enforcement & Courts: Solely when compelled under valid legal warrants.

Our primary storage infrastructure resides in European Union data centers. In instances involving Google LLC technical services, data may be transferred to the US under the EU-U.S. Data Privacy Framework (DPF) adequacy decision and Standard Contractual Clauses (SCCs).

Personal data is preserved only as long as necessary to fulfill designated objectives: • Server Security Logs: Kept for 30 to 90 days, then overwritten. • Email Inquiries: Kept for the duration of correspondence and up to 12 months thereafter. • Analytics Records: Kept for up to 14 months in anonymized format. • Administrative Accounts: Kept for the duration of active management duties.

As a data subject, Articles 15 through 22 of the GDPR confer extensive rights. Review the table below for a structured breakdown and instructions on exercising them.

We enforce rigorous administrative and technical safeguards to secure personal data against unauthorized disclosure or loss: • End-to-end 256-bit TLS/HTTPS encryption across all portal routes. • Secured credential hashing, strong administrative access controls, and multi-factor authentication. • Continuous dependency auditing to mitigate known software vulnerabilities.

Crowdiz performs no automated individual decision-making or profiling under Article 22 GDPR producing legal or similarly substantial effects.

If you believe your personal data processing violates the GDPR or national legislation, you have the right to lodge a complaint with the competent supervisory body: • Office for Personal Data Protection of the Slovak Republic • Address: Hraničná 12, 820 07 Bratislava 27, Slovak Republic • Website: https://dataprotection.gov.sk • Email: statny.dozor@pdp.gov.sk