Privacy Policy

Last updated: April 1, 2026

This Privacy Policy explains how Rivju processes personal data under Regulation (EU) 2016/679 (GDPR). Rivju is operated by an individual controller. For all privacy requests, contact support@kjuu.sk.

1. Data We Process

• Account data for service owners: username, optional email, password hash.
• Feedback data: endpoint, vote value, optional reason tag, timestamp, anti-abuse key.
• Message data: message body, timestamp, optional contact string, optional linked sender account.
• Security and technical data required to protect service integrity (for example truncated IP metadata).

2. Purposes and Legal Bases (GDPR Art. 6)

• Service delivery and account management: performance of a contract (Art. 6(1)(b)).
• Security, abuse prevention, and diagnostics: legitimate interest (Art. 6(1)(f)).
• Compliance with legal obligations: legal obligation (Art. 6(1)(c)).

3. Recipients and Processors

Data is processed by Rivju and trusted infrastructure providers needed to run the platform. Data is not sold. Data may be disclosed only when required by applicable law.

4. International Transfers

If data is transferred outside the EEA, Rivju applies appropriate safeguards required by GDPR, such as Standard Contractual Clauses or equivalent legal transfer mechanisms.

5. Retention

• Account data is retained while the account is active and for a limited period needed for legal/security purposes.
• Feedback and messages are retained until deleted by the owner or administrative retention cleanup.
• Security logs and anti-abuse metadata are retained only as long as reasonably necessary for protection and audits.

6. Cookies and Tracking

Rivju uses essential cookies for authentication/session handling and anti-abuse controls. Rivju does not use advertising trackers for anonymous voters.

7. Your GDPR Rights

Subject to applicable law, you may request access, rectification, erasure, restriction, objection, and data portability. You may also lodge a complaint with your local supervisory authority, including the Slovak Data Protection Authority.

8. Security

Rivju applies technical and organizational measures designed to protect confidentiality, integrity, and availability. No method of transmission or storage is absolutely secure.

9. Contact

Privacy requests and questions: support@kjuu.sk.

This policy is a practical compliance text and not legal advice.