Enigmatus s.r.o., with its registered office at Národní 981/17, Praha 1, postal code 110 00, a company incorporated in the Commercial Register administered by the Municipal Court in Prague, Section C, Entry 159269, registration number 290 04 454, as the controller, who is the operator of the Mageo social network internet service (hereinafter referred to as "Services").

These Principles are issued in accordance with Regulation (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data (hereinafter referred to as "GDPR"), in order to ensure the information duty of Enigmatus s.r.o. as the controller pursuant to Article 13 of the GDPR, and are effective as from 5 June 2020.
We process the personal data that you provide to us in connection with the use of our services or that will otherwise be provided to us with your consent.

These are most often data that you provide to us during the registration and use of our services, or while making a purchase in the application, especially:

• First name and surname;
• Gender;
• Nickname;
• Email address;
• Date of birth;
• Country of origin;

When you visit our website, when you use our services and the application, we may collect information about your visits, such as your IP address, date and time of access, information about your operating system, web browser, your behaviour on our website. If you visit our website from your mobile phone, tablet, etc., we may also process information about that device. In these cases, however, we try to anonymize this information as much as possible so that it cannot be assigned to a specific person.

Furthermore, we process information and content that you enter through our application to your account and information about persons with whom you are in contact through our application.

We only collect information about your location if this is required by a specific functionality of the Mageo service, such as determining your current location or an activity you carry out at the given location, e.g. "island settlement".

Your location can be determined, with varying accuracy, in the following ways:

• GPS;
• IP address;
• information about objects near your device, such as Wi-Fi hotspots, mobile network transmitters or Bluetooth-enabled devices.

We process your personal data because it is necessary to fulfil the contract for provision of services we enter into with each other and for the purpose of our legitimate interests in order that we can administer your user accounts for our services so that we can provide you with the services you have expressed interest in, and in order that we can ensure and constantly increase the security of our services and your data. Furthemore, we process your personal data to fulfil legal obligations, especially in relation to financial administration bodies, if payments are made between us.

We also process your data for the purpose of:

• improving the quality of our services and developing new services;
• performing analyses and measurements in order to determine how our services are used;
• analysing your preferences;
• sending commercial messages and content newsletters;
• answering your questions sent via the support contact form;
• verifying payments.

We pass on your personal data to the following persons who subsequently have access to your data:

• persons to whom we provide data for the purpose of analysing the traffic to our services;
• persons who secure for us the technical operation of a certain service or operators of technologies we use for our services;
• persons who secure for us sufficient security and integrity of our services and website and also regularly test this security;
• business partners or sponsors;
• external accountants or external attorneys bound by the confidentiality obligation for the purpose of fulfilling our legal obligations or in the event of resolving disputes between us.

Under certain, precisely defined conditions, we are obliged to transmit some of your personal data on the basis of applicable legal regulations e.g. to the Police of the Czech Republic or other bodies active in criminal proceedings, including specialized units (ÚOOZ, Customs Administration, etc.) and to other public administration authorities.
We process your personal data automatically.

When processing your personal data, we take all necessary technical and organizational measures ensuring their protection.

We will process your data for the entire period of using our services (i.e. for the duration of the contractual relationship between us). We retain personal data that are necessary for the fulfilment of our legal obligations for the entire time necessary to fulfil these obligations. Subsequently, your data are deleted from the system.
In relation to your personal data, you have expecially the following rights:

Under the GDPR, you have the following rights:

1. Right of access to personal data.
   You have the right of access to personal data which includes the right to obtain from us confirmation as to whether or not we process your personal data as well as the information about the purposes of the processing, the categories of personal data concerned, the recipients to whom the personal data have been or will be disclosed, the envisaged period of processing, the existence of the right to request from us rectification or erasure of your personal data or restriction of their processing or to object to such processing and the right to lodge a complaint with a supervisory authority.
   
   You can exercise the right to obtain confirmation of the processing of personal data and the said information in writing or electronically using our aforementioned contact information.
   
2. Right to rectification of inaccurate data.
   You have the right to obtain from us the rectification of inaccurate personal data we process about you. On the other hand, however, you are obliged to notify us of any changes to your personal data and to prove that such a change has taken place. At the same time, you are obliged to provide us with cooperation if we find out that personal data that we process about you are not accurate. We will carry out the rectification without undue delay, but always with regard to the given technical possibilities.
   
3. Right to erasure.
   You have the right to obtain from us the erasure of personal data concerning you unless we prove that there are legitimate grounds for the processing of these personal data.
   
4. Right to restriction of processing.
   If you contest the accuracy of the personal data, the reasons for their processing or if you object to their processing, you have the right to obtain from us restriction of the processing of your personal data until your complaint is resolved.
   
5. Right to notification regarding rectification, erasure or restriction of processing.
   In the event of a rectification, erasure or restriction of the processing of your personal data, you have to right to be notified of such a record. If personal data are rectified or erased, we will inform the individual recipients of your personal data accordingly, except in cases where this proves to be impossible or if it woud require disproportionate effort. Based on your request, we can provide you with information about these recipients.
   
6. Right to personal data portability.
   You have the right to the portability of the personal data concerning you which you have provided to us, in a structured, commonly used and machine-readable format, and the right to ask us to transmit those data to another controller. You can also request that we submit this information in this format to you.
   
7. Right to object to the processing of personal data.
   You have the right to object to the processing of your personal data for the reason of our legitimate interest. If we do not demonstrate that there are compelling legitimate grounds for the processing which override your interests, rights and freedoms, we will terminate the processing of your personal data without undue delay.
   
8. Exercise of the above rights.
   Enigmatus s.r.o. is not obliged to have and does not have a data protection officer. To exercise the above rights, you can contact as in writing at Enigmatus s.r.o., Praha 1, Národní 981/17, postal code 110 00, or electronically at info@enigmatus.com.
   
9. Right to contact the Office for Personal Data Protection.
   We will be happy if you discuss any shortcomings associated with the processing of personal data with us first. We strive for maximum protection of your personal data and it is definitely not our goal to harm your rights in the slightest, and therefore we will pay close attention to your complaints. Nevertheless, if you want to contact the supervisory authority, you have the right to contact the Office for Personal Data Protection (https://www.uoou.cz/) with complaints concerning the processing of your personal data.
   

Should you have any questions concerning the principles of personal data processing, contact us at the email address info@enigmatus.com or in writing at our address: Enigmatus s.r.o., Národní 981/17, Praha 1, postal code 110 00, Czech Republic, Europe.

Identification: registration No. 29004454, VAT No. CZ29004454