Personal Data Controller
Hory.app s.r.o.
Company No.: 09504800
with registered office at Žitavská 133/59, Liberec XI-Růžodol I, 460 01 Liberec
registered in the Commercial Register maintained by the Regional Court in Ústí nad Labem under file number C 45869
e-mail: info@hory.app
tel.: +420 732 554 361
In connection with the provision of the Hory.app service, our company, in its capacity as a personal data controller, processes (i.e., primarily collects, stores, and uses) personal data of users to the extent specified below, always in accordance with Regulation (EU) No. 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter referred to as "GDPR") and Act No. 110/2019 Coll., on the processing of personal data.
These personal data processing principles provide Hory.app users with a comprehensive overview of how our company processes personal data, as well as the rights of users as data subjects. These principles fulfill the conditions of the information obligation pursuant to Article 13 of the GDPR.
Basic Processing Rules
Users' personal data are:
- processed always fairly and in a lawful and transparent manner,
- collected for specified, explicit and legitimate purposes,
- adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed,
- accurate and, where necessary, kept up to date,
- stored in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed,
- processed in a manner that ensures appropriate security of personal data.
Legal Basis for Processing
The legal bases for processing users' personal data by our company are:
- conclusion and fulfillment of the Hory.app application usage agreement,
- fulfillment of our company's legal obligations stipulated by legal regulations,
- potential legitimate interest of the company,
- consent of the user as the data subject.
The user is always informed whether the provision of personal data is a statutory or contractual requirement, and whether the user is obliged to provide personal data and what consequences the eventual non-provision of such data would have.
Scope of Personal Data Processing
In connection with the legal bases of processing described above, our company processes the following
- name, nickname, and optionally surname
- year of birth
- email address
- bank account number in case of annual contribution payment
- GPS coordinates and related technical data, including GPS sharing
- IP addresses
These personal data are necessary for the proper provision of the Hory.app service, and without them
- photos
- cookies when visiting the website
These personal data are generally processed based on the consent of the data subjects.
- other information concerning the user or third parties, necessary for proper provision
These personal data are processed based on legal grounds related to the nature
Personal data are processed both manually and automatically.
Purpose of Personal Data Processing
The purpose of processing users' personal data is to provide Hory.app services, according to the contract concluded between the user and our company, which primarily include the use of the Hory.app application, the use of extended settings of the Hory.app website (leaderboards, statistics, photos, etc.).
Recipients of Personal Data
Our company, as the personal data controller, discloses personal data only to:
- to its members involved in the administration of the Hory.app application and service,
- to a limited extent, other Hory.app users within the scope of competitions and statistics,
- to personal data processors that are in a contractual relationship with our company (e.g., IT services, hosting, etc.),
- in justified cases, also to other controllers, while respecting legal regulations,
- to public authorities in cases stipulated by law,
- to other recipients, if such disclosure is in accordance with the user's needs and instructions.
Duration of Personal Data Processing
Personal data is processed for the duration of the above-mentioned contract for the provision of the Hory.app service, and after its termination (account deletion and application uninstallation), the user's personal data will be handled in accordance with applicable legal regulations, with our company being authorized to process personal data for a maximum of three years from the termination of the contract in connection with the protection of any claims of our company.
Rights of the Data Subject
The user, as the data subject, has in connection with the processing of their personal data by
- Right to access personal data. The user is entitled to obtain information from our company as to whether it processes their personal data, and if so, what data it is and how it is processed. The user also has the right to have our company, as the controller, rectify inaccurate personal data concerning them without undue delay upon their request. The user has the right to complete incomplete personal data at any time.
- Right to erasure. Based on the user's request and subject to the conditions of the GDPR, our company is obliged to erase and dispose of the personal data it processes concerning the requesting user.
- Right to restriction of personal data processing. In cases defined by legal regulations
- Right to data portability. The user is entitled to obtain from our company
If the user is dissatisfied in any way with the processing of their personal data by our company, they may file a complaint either directly with us or contact the Office for Personal Data Protection, ID: 70837627, with its registered office at Pplk. Sochora 27, 170 00 Prague. More information about user rights is available on the website of the Office for Personal Data Protection. (<a href="http://www.uoou.cz/6-prava-subjektu-udaj/d-27276">http://www.uoou.cz/6-prava-subjektu-udaj/d-27276</a>)
Third-party services used
To determine the approximate country of the user based on their IP address (in order to display relevant content), we use the DB-IP database. IP Geolocation by DB-IP. The database is processed exclusively on our server and the IP address is not shared with third parties.