GDPR & Privacy Policy

§ 1. GDPR Compliance

1. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679, the Slovak Act No. 18/2018 Coll. on Personal Data Protection, and other applicable laws.

§ 2. What Personal Data We Collect

1. Account data: username, email address, date of birth, display name, profile picture, bio, and links.

2. Technical data: IP address (collected at registration and login for security and geolocation-based age compliance), browser user agent, device type, and session tokens.

3. Usage data: page view counts, widget interaction data, and general analytics (non-personally identifiable).

4. Verification data: real name and date of birth submitted during profile verification requests.

§ 3. Legal Basis for Processing (GDPR Art. 6)

1. Contract performance (Art. 6(1)(b)): Processing necessary to provide the Service (account management, profile hosting).

2. Legal obligation (Art. 6(1)(c)): Age verification, law enforcement cooperation, and child protection compliance.

3. Legitimate interests (Art. 6(1)(f)): Security, fraud prevention, spam protection, and platform abuse prevention.

4. Consent (Art. 6(1)(a)): Non-essential cookies, analytics cookies (where applicable).

§ 4. Your Rights Under GDPR

1. As a data subject under GDPR, you have the following rights: Right of access (Art. 15); Right to rectification (Art. 16); Right to erasure / "right to be forgotten" (Art. 17); Right to restriction of processing (Art. 18); Right to data portability (Art. 20); Right to object (Art. 21); Right to withdraw consent at any time.

2. To exercise any of these rights, contact us at support@make-a.click. We will respond within 30 days as required by GDPR.

§ 5. Data Retention

1. Active account data is retained for the duration of your account's existence.

2. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

3. IP logs and security logs are retained for up to 12 months for fraud prevention purposes.

4. Verification data may be retained for up to 5 years where required for identity verification and legal compliance.

§ 6. Data Sharing & Third Parties

1. We do not sell, rent, or trade your personal data. We may share data with Cloudflare for DDoS protection and CAPTCHA (Turnstile), transactional email service providers, and law enforcement or authorities when legally required.

§ 7. Cookie Policy

1. We use cookies and similar technologies to operate and improve the Service. By using make-a.click, you consent to our use of cookies in accordance with this policy.

Types of cookies we use:

• Strictly necessary cookies: Session tokens and authentication cookies required to keep you logged in and secure. These cannot be disabled.
• Security cookies: Used by Cloudflare Turnstile for bot and spam protection.
• Preference cookies: Store your UI preferences (e.g., theme settings).
• Analytics cookies: Anonymous, aggregated usage data to help us understand how the Service is used. No personally identifiable information is collected.

§ 8. Contact & Complaints

1. For all data protection inquiries or GDPR requests, contact us at: support@make-a.click.

2. You also have the right to lodge a complaint with the Slovak Data Protection Authority (Úrad na ochranu osobných údajov SR) at dataprotection.gov.sk.