{% extends "base.html" %} {% load i18n %} {% load translations %} {% block breadcrumbs %}
- {% trans "Legal" %}
- {% trans "Privacy" %}
{% endblock %} {% block content %} {% include 'legal/menu.html' %}

#### {% trans "Privacy Policy" %}

We comply with the Regulation No. 2016/679, the General Data Protection Regulation, also known as GDPR. This document includes necessary specifications.

## Personal Data Controller

Ing. Michal Čihař, Zdiměřická 1439/8, 149 00 Praha, Czechia, Reg. No. 04705904

We have appointed a data protection officer who may be reached via privacy@weblate.org.

## Personal Data we process

{% trans "We process only Personal Data User provides us by using our service:" %}

{% trans "Name and email" %}
  {% trans "These are used to identify you in the VCS commits" %}
  {% trans "Additionally, email is used for notification of watched events" %}
{% trans "Password in hashed form" %}
  {% trans "Used to authenticate user if configured" %}
{% trans "IP address and browser name" %}
  {% trans "These are logged in case of important changes to your account (e.g. password change) to allow diagnosis in case your account is stolen" %}

## Purpose and legal basis of processing Personal Data

Your Personal Data will be used for the purposes of the Service:

- for providing our services on the Service, to contact you in matters regarding our services (also by means of emails and messaging) and to ensure the technical functionality of our services fulfillment of contractual or pre-contractual obligations (Article 6 (1) b. GDPR)
- to analyze your use of our services and improve our services (Article 6 (1) b. and f. GDPR)
- with your express consent or instruction to carry out our business activities or sent you newsletters (Article 6 (1) a. GDPR)

## Access to the Personal Data

Controller has made all reasonable technical means to protect the Personal Data. Only authorized persons can access the Personal Data.

Third parties which can gain access to the Personal Data when necessary are:

- Persons which are contracted for technical assurance of the service.
- Payment processors.

All Personal Data is stored in the European Union.

## The Personal Data retention

The Personal Data is stored in the Service until User deletes his account in the service.

Access log information might be collected for longer period for the purpose of establishing, exercise or defence of legal claims.

## Your rights

User provides use Personal Data voluntarily. Without this we are not able to provide our services.

We want you to always be in control of your Personal Data. To this end, you have certain rights that allow for it. Under certain conditions, you may:

- Gain access to all your Personal Data that we use or processing, and even get a copy of all of it (Article 15 GDPR)
- Correct the Personal Data that we are processing if you think that there are mistakes
- Order us to delete your Personal Data
- Restrict the Personal Data processing
- Object to processing
- Receive your Personal Data in a commonly used and machine-readable format or to transmit this Personal Data to a different provider.

{% endblock %}