Privacy Policy

1. Who processes the data

Personal data controller: Pavel Chukhno, private individual, Topoľová 21, 811 04 Bratislava, email: admin@compassdiaspora.eu. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the legislation of the Slovak Republic.

2. What data do we process?

• Account: email address, password (encrypted), consent marks and their dates.
• Contractor profile: title or name, type of activity, languages, address and coordinates, service regions, description, photo, logo, links to website and social media, offers and files.
• Activity: messages, reviews, favorites, card view statistics (without data on specific visitors).
• Technical data: IP address, browser type, server logs and attack protection.
• In the visitor's browser: the list of recently viewed cards is stored only on your device (localStorage) and is not transmitted to the server until you open the main page.

3. Why and on what basis

• The operation of the account, cards, messages, reviews and tariffs is the performance of the contract (Article 6(1)(b) of the GDPR).
• Official letters (address confirmation, notifications of messages, violations, end of period) – contract execution.
• Kompas news and advertising are available only with your consent (Article 6(1)(a)), which can be revoked at any time.
• Protection against spam and hacking, maintaining a blacklist of violators is a legitimate interest (Article 6(1)(f)).
• Traffic statistics (Google Analytics, after launch on the main domain) - with your consent via a cookie banner.

4. To whom is the data transferred?

• Hosting: Webglobe, sro (Slovakia) — website and email storage.
• Maps and address resolution: Mapbox, Inc. (USA) receives the address or coordinates you enter or view on a map. Transfer to the US is subject to the EU's standard contractual clauses.
• Google Ireland Ltd. — traffic statistics, only with your consent.
• Google Ireland Ltd. — protects forms from spam (reCAPTCHA) and automatically translates website texts and emails into your chosen language (Google Cloud Translation).
• Telegram (Telegram Messenger Inc.) — only if the provider has enabled Telegram notifications: a copy of the message the buyer sends to the provider on the Website (sender's name, offer title, and text) is forwarded to the provider via Telegram, where they can reply. The reply is saved in the conversation on the Website. Transfers outside the EU are subject to the EU's standard contractual clauses.
• The contractor's customer management system (CRM) — only if the contractor has enabled CRM integration on the "Prof" plan: the message the buyer sends to the contractor on the Website (offer title, text, language, and correspondence link) is transferred to the contractor's CRM. The buyer's name and email address are transferred only with their consent (checkbox below the message form, Article 6(1)(a) of the GDPR); consent can be withheld or withdrawn at any time for future messages. The contractor further processes this data in their CRM as an independent operator. The contractor's response from the CRM is saved in the correspondence on the Website.
• The artist's profile information is public—visible to all visitors to the Website. The artist's email address is not shown to other users.

5. Storage periods

• Account and card data - while the account exists.
• The contents of the paid plan after switching to the free one are valid for 12 months.
• Email address blacklisted after removal for violations - [term, e.g. 3 years].
• Server logs - up to [period, eg 90 days].

6. Your rights

You can request access to your data, rectification, deletion, restriction of processing, portability, object to processing, and revoke consent. Most data can be changed or deleted independently in your personal account. For other questions, please contact info@compassdiaspora.eu. You have the right to file a complaint with the supervisory authority: Data Protection Authority of the Slovak Republic, www.dataprotection.gov.sk.

7. Cookie

This site uses cookies necessary for account login and security. Analytical cookies are enabled only with your consent.

8. Changes

This policy is subject to update; the new version is effective from the date of publication. Last updated: November 8, 2026.