Privacy Policy

PRIVACY POLICY
Last update: 25\11\2021

The Kiss Cruise app is a Commercial app. The Kiss Cruise (referred to as "Service", " Kiss Cruise " or "we" or "us" or "our") is committed to protecting and respecting your privacy and handling your personal data in an open and transparent manner. The personal data that we collect and process may vary depending on the service we provide to you.

This privacy policy:

provides an overview of how Kiss Cruise collects and processes your personal data, and informs you about your rights under the EU General Data Protection Regulation ("GDPR") and any national law supplementing or implementing the GDPR,
contains important information about, among others, the collection and use of personal data; the legal grounds for the processing of that data; disclosures of that personal data to third parties and the use of cookies on the app.

For the purposes of this privacy policy:

when we refer to "personal data" we mean data which identifies or may identify you and which may include, for example, your photo, your name, your email address, gender, date of birth, location (country, city).
when we refer to "processing" we mean the handling of your personal data by us, including collecting, protecting and storing your personal data, and
when we refer to our "app" or "Service" we mean http://kissterio.love/.

Who we are
All rights for the Kiss Cruise app belongs to GarnetCast s. r. o. (LLC) - a company registered in the Czech Republic, under registration number 07711948 as a limited liability company having its registered office at Sokolovská 270/201, Vysočany, 190 00 Praha 9, Czech Republic.

Our Data Protection Principles
We adhere to the principles relating to processing of personal data set out in the GDPR which require personal data to be:

Processed lawfully, fairly and in a transparent manner (Lawfulness, Fairness and Transparency).
Collected only for specified, explicit and legitimate purposes (Purpose Limitation).
Adequate, relevant and limited to what is necessary in relation to the purposes for which it is Processed (Data Minimisation).
Accurate and where necessary kept up to date (Accuracy).
Not kept in a form which permits identification of data subjects for longer than is necessary for the purposes for which the data is Processed (Storage Limitation).
Processed in a manner that ensures its security using appropriate technical and organisational measures to protect against unauthorised or unlawful processing and against accidental loss, destruction or damage (Security, Integrity and Confidentiality).
Not transferred to another country without appropriate safeguards being in place (Transfer Limitation).
Made available to data subjects and data subjects allowed to exercise certain rights in relation to their Personal Data (Data Subject's Rights and Requests).
We are responsible for and must be able to demonstrate compliance with the data protection principles listed above (Accountability).

Privacy Policy
1. Data Controller
1.1 This privacy policy applies where we are acting as a data controller with respect to your personal data and therefore determine the purposes and means of the processing of that personal data.

1.2 We will ask you to consent to our use of cookies in accordance with the terms of this policy when you first using our Service.

1.3 Our Service incorporates privacy controls you can use to specify whether you would like to receive marketing, limit the publication or any other use of your information. You can access such privacy controls via [email protected].

2. How we collect your personal data
2.1 We obtain your personal data mainly through any information you provide directly to us or through information provided by third parties. Below is a list of ways in which we collect your personal data.

Personal data collected directly from you, including:

when you complete our Services registration forms,
when you enter and use our Service, and/or performing contractual obligations, and
when you contact us for any enquiries, complaints or for any other reason.

Personal data collected from other sources, including:

via third parties including our business partners, contractors and/or vendors in a manner that is permitted,
through tags in websites you use and/or manage or control.
The partner of the App for displaying ads in the App is CLEVER ADS SOLUTIONS, which works with other third-party resources such as Google AdMob, Unity Ads and others.

A complete list of third-party resources with which CLEVER ADS SOLUTIONS cooperates, as well as the terms of data processing of CLEVER ADS SOLUTIONS, can be seen here.

In addition, the App uses third-party providers to analyze your activity in the application, so that we can make our App better. Link to the privacy policy of third party service providers used by the application:

The Application stores data using the Amazon cloud service, the privacy policy of which can be found here

Also, the Application may transfer your personal data in connection with the requirement of the law, for example:

● to establish, exercise, protect or ensure the legal rights and interests of the Service;
● to comply with a court order, such as a court order, subpoena, or search warrant;
● government / law enforcement investigations or other requirements established by law;
● to assist in the prevention and detection of crimes;
● to protect the safety or vital interests of a person.

3. Personal Data We Use, Purposes and Legal Grounds
We may collect the following personal data from you depending on the service we provide to you. We will only process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:

Type of information

Data about your use of our Service.
IP address, geographical location, browser type and version, operating system, referral source, length of visit, page views, website navigation paths, DVR-like video playback of your sessions on our website, timing, frequency, pattern of your service use.

Profile data
Your name, address, telephone number, email address, gender, date of birth.

Publication data
Information that you post for publication on our Service or through our services.

Inquiry data

Transaction data
The transaction data your contact details, your card details and the transaction details.

Notification data

Correspondence data
The communication content and metadata associated with the communication.

Any of your personal data identified in this policy

Any of your personal data identified in this policy

Purpose

To analyse the operation of our Service and identify usability problems and other areas for improvement.

Operating our Service, providing our services, communicating with you. Fulfilment of KYC / AML procedures.

The publication data may be processed for the purposes of enabling such publication and administering our Service and services.

The inquiry data may be processed for the purposes of fulfilment of our KYC and AML obligations. The proper performance of our payment obligations to you.

The transaction data may be processed for the purpose of payments and keeping proper records of those transactions.

The notification data may be processed for the purposes of sending you the relevant notifications and/or newsletters.

The proper performance of our contractual obligation before you.

Exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure, the protection and assertion of our legal rights, your legal rights and the legal rights of others.

The obtaining or maintaining insurance coverage, managing risks, or obtaining professional advice.

Legal basis of processing

Legitimate interests in monitoring and improving our Service.

Legitimate interests in the proper administration of our Service.
Performing the contract we have with you.

Legitimate interests for the proper administration of our Service and business.
Performing the contract we have with you.

Performing the contract we have with you.

Performing the contract we have with you.

Consent. Performing the contract we have with you.

Consent. Performing the contract we have with you.

Our legitimate interests.

Our legitimate interests.

4. Information We May Provide to Third Parties
We may disclose your personal data to the third parties listed below. When we do so, we require those third parties to have appropriate technical and organisational measures in place to protect your personal data. We will not share any of your personal data for any purpose other than the purposes described in this privacy policy, nor will we sell your personal data to anyone.

4.1 Any member of our group of companies (this means our subsidiaries, our ultimate holding company and all its subsidiaries) insofar as reasonably necessary for the purposes, and on the legal bases, set out in this privacy policy.

4.2 To our insurers and/or professional advisers insofar as reasonably necessary for the purposes of managing risks, obtaining professional advice, or the establishment, exercise or defence of legal claims, whether in court proceedings or in an administrative or out-of-court procedure.

4.3 Payment services providers we have chosen to support us with financial transactions relating to our Service. We will share transaction data with our payment services providers only to the extent necessary for the purposes of processing your payments, refunding such payments and dealing with complaints and queries relating to such payments and refunds.

In specific, when paying by WebMoney your information may be disclosed and/or transferred and/or collected by Paymaster24 LTD in UK, as per the Paymaster24 LTD Privacy Policy.

4.4 Governmental and regulatory bodies, including law enforcement authorities, in connection with enquiries, proceedings or investigations by such parties or in order to enable Propeller to comply with its legal and regulatory requirements.

4.5 Partners, contractors and/or vendors in order to perform contract we have with you.

5. Your data protection rights
You have the following rights in terms of the personal data we hold about you:

The right to be informed

The right to access

The right to correction
(rectification)

The right to erasure (The right to be forgotten)

The right to restrict processing

The right to data portability

The right to object

The right to withdraw consent

The right to complain

Kiss Cruise is publishing this privacy policy to keep you informed as to what we do with your personal data. You can ask us for information regarding any data of yours that we keep at any time. This information concerns, among other things, the data categories we process, for what purposes we process them, the origin of the data if we did not acquire them directly from you and, if applicable, the recipients to whom we have sent your data.

This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it. You can obtain a copy of your data from us free of charge. If you are interested in other copies, we reserve the right to charge for the additional copies.

You can request that we correct your data. We will initiate appropriate measures to keep the data of yours that we continuously process correct, complete, and up to date, based the latest information available to us

You can request that we delete your data provided the legal requirements have been met. In accordance with Article 17 the GDPR, this can be the case if:

the data are no longer required for the purposes they were acquired or otherwise processed;
you revoke your consent, which is the basis of the data processing, and there is no other legal basis for the processing;
you object to the processing of your data and there are no legitimate reasons for the processing or you object to data processing for the purposes of direct advertising;
the data have been processed illegally.

Where the processing is not necessary:

To ensure adherence to a legal obligation that requires us to process your data
In particular with regard to legal retention periods
To assert, exercise or defend against legal claims

You can request that we restrict the processing of your data if:

You dispute the correctness of the data - for the period of time we need to check the correctness of the data;
The processing is illegal but you do not wish to have your data deleted and request a restriction of use instead;
We no longer need your data, but you need them to assert, exercise or defend against legal claims;
You have filed an objection to the processing, though it has not yet been decided whether our legitimate grounds outweigh yours.

At your request, we will transfer your data– where technically possible – to another responsible entity.
However, this right only applies if the data processing is based on your consent or is required to fulfill a contract. Instead of receiving a copy of your data, you can ask us to send the data directly to another responsible entity that you specify.

You can object to the processing of your data at any time for reasons that arise from your special situation provided the data processing is based on your consent or our legitimate interest or that of a third party. In this case, we will no longer process your data. The latter does not apply if we are able to prove there are compelling, defensible reasons for the processing that outweigh your interests or we require your data to assert, exercise or defend against legal claims.

Withdraw the consent you gave us with regard to the processing of your personal data for certain purposes, such as to allow us to promote our products and services to you.

Kiss Cruise takes your rights very seriously. However, if you are of the opinion that we have not dealt with your complaints adequately, you have the right to submit a complaint to the data privacy protection authorities responsible

We endeavour to address all of your requests promptly.

6. International Transfers of Your Personal Data
6.1 We do not envisage that any of your personal data will be transferred to countries outside the European Economic Area (EEA) as our offices, facilities, subcontractors and other third parties with which we work are all located within the EEA.

6.2. In the event that this changes in the future and one or more recipients of your personal data are located outside the EEA, where data protection laws may be of a lower standard than in the EEA, we will impose the same data protection safeguards that we deploy inside the EEA to ensure that your personal data are always protected.

6.3. The information that we request will be retained on our server on address http://aws.amazon.com/.

7. Retaining and Deleting Personal Data
7.1 We will keep your personal data for as long as is necessary for the purpose for which we initially collected them. Once such period has ended, we will keep your personal data for the longest of the following periods: a) any retention period set out in our retention policy which is in line with regulatory requirements relating to retention; or (b) the end of the period in which legal action or investigations might arise in respect of the services provided.

7.2 Once the retention period of your personal data lapses, we will ensure that your personal data are either irreversibly anonymised or securely destroyed.

8. Confidentiality and Security
8.1 We deploy various security measures such as encryption and authentication tools in line with the current state of the art to protect and maintain the security, integrity and availability of your personal data.

8.2 100% protection against unauthorised access in the case of data transfers across the internet or a website cannot be guaranteed, but we and our service providers and business partners do our utmost to protect your personal data in line with the prevailing data protection legislation by means of physical and electronic physical precautions. Among other things, we use the following measures:

Strict criteria for authorisation to access your personal data on a "need-to-know" basis only and exclusively for the specified purpose;
Transfer of acquired data in secured form;
Storage of confidential data in secure server on address https://aws.amazon.com/;
Firewall safeguarding of IT systems to provide protection against unauthorised access, and
Continuous monitoring of access to IT systems to detect and prevent the misuse of personal data.

9. Changes to this privacy policy
9.1 We may update our Privacy Policy from time to time. Thus, you are advised to review this page periodically for any changes. We will notify you of any changes by posting the new Privacy Policy on this page. These changes are effective immediately after they are posted on this page.

10 Contacts
10.1 If you have any questions or suggestions about our Privacy Policy, do not hesitate to contact us at [email protected].

11. Cookies
11.1 We want to inform you that whenever you use our Service we collect data and information (including through third-party products) on your phone called "Log Data". This log information may include such information as the address, information about the device, unique advertising identifiers of the device (for example, Google Advertiser ID and IDFA), cookies, IP address, geographical coordinates, information about your Internet and mobile service provider , application usage data (including logs, statistics), as well as other statistical data. We collect such data and use it to analyze and improve the Service, as well as to take into account preferences when displaying advertising in the Service.

11.2 Cookies are files with a small amount of data that are commonly used as anonymous unique identifiers. These are sent to your browser from the websites that you visit and are stored on your device's internal memory. This Service does not use these "cookies" explicitly. However, the app may use third party code and libraries that use "cookies" to collect information and improve their services. You have the option to either accept or refuse these cookies and know when a cookie is being sent to your device. If you choose to refuse our cookies, you may not be able to use some portions of this Service.

12. Links to Other Sites
12.1. This Service may contain links to other sites. If you click on a third-party link, you will be directed to that site. Note that these external sites are not operated by us. Therefore, we strongly advise you to review the Privacy Policy of these websites. We have no control over and assume no responsibility for the content, privacy policies, or practices of any third-party sites or services.

13. Children's Privacy
13.1. These Services do not address anyone under the age of 13. We do not knowingly collect personally identifiable information from children under 13. In the case we discover that a child under 13 has provided us with personal information, we immediately delete this from our servers.

13.2. If you are a parent or guardian and you are aware that your child has provided us with personal information, please contact us [email protected] so that we will be able to do necessary actions.

14. Remarketing
14.1 We are also obligated to warn you that our application uses the remarketing function (a function that allows us to identify users who have previously visited our application). In addition, using of dynamic remarketing, allows the Service to optimize advertising information for you, so you see this information according to your own preferences. This function is used by the Service using third-party services, such as Google Ads, Facebook Ads.

15. Service Providers
15.1 We may employ third-party companies and individuals due to the following reasons:

To facilitate our Service;
To provide the Service on our behalf;
To perform Service-related services; or
To assist us in analyzing how our Service is used.

15.2 We want to inform users of this Service that these third parties have access to your Personal Information. The reason is to perform the tasks assigned to them on our behalf. However, they are obligated not to disclose or use the information for any other purpose.

Previous versions of the document:
https://kissterio.love/pp/250321