1. Data controller
The controller of personal data is:
Revolucion Dawid Sieńko
ul. Skotnia 5
32-070 Wołowice
Poland
EU VAT ID: PL5492367854
e-mail: contact@talehaven.app
For matters concerning privacy and personal data, you can get in touch at contact@talehaven.app.
2. What data we process
Depending on how you use Talehaven, we may process:
1. e-mail address, nickname, profile name and avatar,
2. encrypted or hashed authentication data,
3. content created in the application,
4. uploaded files, images, documents, maps and recordings,
5. information about campaigns, shares, invitations and visibility settings,
6. IP address, device type, browser and basic technical data,
7. information about logins, errors, security events and feature usage,
8. messages sent to support,
9. complaints, infringement reports and appeals against moderation decisions,
10. information about consents and cookie settings.
We do not ask you to send real identity documents, medical or financial data, or other sensitive information.
3. Purposes and legal bases
We process data in order to:
1. create and run an account, on the basis of the necessity to perform a contract,
2. store material and keep Talehaven's features working, on the basis of the necessity to perform a contract,
3. enable material to be shared and published in the Marketplace, on the basis of the necessity to perform a contract,
4. send technical messages and information about the account, on the basis of the necessity to perform a contract,
5. ensure security, prevent fraud and abuse and protect the application, on the basis of the Operator's legitimate interest,
6. handle reports, moderate content and protect the rights of users and third parties, on the basis of the Operator's legitimate interest,
7. establish, pursue and defend claims, on the basis of the Operator's legitimate interest,
8. fulfil obligations arising from the law, on the basis of a legal obligation,
9. carry out optional analytics, send a newsletter or marketing communications, on the basis of consent where such consent is required.
Providing the data required at registration is voluntary, but without it creating and running an account may not be possible.
4. Users' content and files
1. The user decides what material they upload to Talehaven and who they share it with.
2. Material may be:
a) private,
b) shared with specific users or a campaign,
c) publicly available in the Marketplace.
3. Public material may be visible together with the nickname, profile name, description, author information and the selected licence.
4. Users should not place other people's real personal data in their material without an appropriate basis.
5. Authorised people acting on Talehaven's behalf may access specific material only where this is necessary to:
a) carry out a user's request,
b) resolve a technical problem,
c) ensure security,
d) handle a report,
e) fulfil a legal obligation.
6. Talehaven may automatically analyse basic file parameters in order to detect malware, spam and technical threats.
5. Invitations
1. A user may provide another person's e-mail address in order to send an invitation to a campaign, session, poll or event.
2. The address will be used solely to handle the invitation and directly related communication.
3. The invited person's address will not be used for marketing without a separate legal basis.
4. Users should only send invitations to people they have a legitimate reason to contact.
6. Who we may share data with
Data may be entrusted to entities supporting the operation of Talehaven, in particular providers of:
1. hosting and cloud infrastructure,
2. file storage and backups,
3. e-mail,
4. security and abuse protection,
5. error and performance monitoring,
6. analytics, where the user has given the required consent,
7. technical, legal and accounting services.
These entities may process data only to the extent needed to perform their services.
Data may also be provided to public authorities where such an obligation arises from the law.
7. Transfers outside the European Economic Area
Some infrastructure or internet service providers may process data outside the European Economic Area.
Where such a transfer takes place, it is carried out on the basis of an appropriate legal mechanism, in particular a European Commission adequacy decision or standard contractual clauses.
8. How long we keep data
1. We keep account data for as long as the account exists.
2. After an account is deleted, data is deleted or anonymised, unless keeping it is still needed to:
a) fulfil a legal obligation,
b) handle a report,
c) protect security,
d) establish, pursue or defend claims.
3. We keep technical data and security logs for the period needed to ensure security and diagnose problems.
4. Infringement reports and moderation decisions may be kept for the period needed to handle an appeal, protect users and defend claims.
5. Backups are deleted in line with the backup and overwrite cycle.
6. Material published in the Marketplace may remain on the accounts of people who lawfully downloaded it before it was removed.
9. Your rights
You have the right to:
1. access your data,
2. rectify your data,
3. erase your data,
4. restrict processing,
5. data portability, where applicable,
6. object to processing based on a legitimate interest,
7. withdraw consent at any time,
8. lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych).
Withdrawing consent does not affect the lawfulness of processing carried out beforehand.
Requests concerning data can be sent to contact@talehaven.app.
Before acting on a request, we may ask you to confirm your identity where this is needed to protect the account.
10. Automated tools
Talehaven may use automated tools to detect:
1. malware,
2. spam,
3. unusual logins,
4. attempts to circumvent security measures,
5. repeated abuse.
Content being flagged automatically does not necessarily mean it will be permanently removed. A decision to permanently block an account or material may be reviewed by a human.
11. Security
We apply appropriate technical and organisational measures to protect data, including access control, authentication mechanisms, backups and infrastructure safeguards.
No online system can, however, guarantee that risk is eliminated entirely.
Users should use a unique password and should not share their login credentials with other people.
12. Cookies
1. Talehaven may use cookies and similar technologies necessary to:
a) maintain a session,
b) log in,
c) remember settings,
d) ensure security.
2. Necessary cookies are used to the extent required for the application to work.
3. Analytics, advertising or marketing cookies may only be activated after consent has been obtained, where such consent is required.
4. Users can change their optional cookie settings in the privacy settings panel.
13. Minors
Talehaven is not intended for children under the age of 16.
If we learn that an account has been created by someone who does not meet the age requirement, we may block the account or ask for appropriate confirmation.
14. Changes to this Policy
This Privacy Policy may be amended in connection with changes in the law, the application's features, technology providers or the way data is processed.
Users will be informed of material changes in the application or by e-mail.
15. Contact
Questions about privacy and personal data can be sent to: