Privacy Policy

(part of the General Terms and Conditions for the provision of Uloz.to Disk data storage services)

Who are we and how can you contact us?

In the context of your use of our website https://uloz.to/ and our applications ("Services"), we, Cloud Platforms a.s., are, ID No.: 06410952, with registered office at Javorová 3096, 434 01 Most, registered in the Commercial Register maintained by the Regional Court in Ústí nad Labem under file No. B 2894 (hereinafter referred to as "Uloz.to"), is the controller of your personal data. The controller of personal data is the one who determines the purposes and means of processing, i.e., simply, the one who decides why and how personal data are processed.

We have provided our contact details below in case you do not find answers to your questions in this document or do not understand some of the information provided.

E-mail: [email protected]
Mail: Cloud Platforms a.s., Javorová 3096, 434 01 Most

What personal data do we process and how do we obtain it?

A: We obtain your personal data primarily from you:

When you create and set up a user account on our Services
In order for you to set up an account with us, we need your login, email and password (but this is illegible to us). If you choose to do an expedited registration via SMS, you will provide us with your phone number. When you register, you can also choose to share information about your year of birth and your gender with us (however, providing this information is not mandatory for registration).

Through your account settings, you may also voluntarily provide us with other information such as your place of residence, employment or telephone number.

When using our Services
Each time you use our Services, we record information regarding that use (i.e., account history). If you have activated our affiliate programs, we may also record payouts from them.

Information collected passively
Certain information may be collected passively when you use our services. This includes, but is not limited to, your IP address, browser type and operating system type. We also use cookies and navigation data to collect information regarding the date and time of your visit and the information you searched for and viewed. If you use our mobile app, we may also obtain information about how you use our services on your device.

When we communicate with you
. We collect your personal data when you communicate with us - whether this is via email, telephone or social media (this mainly includes your name, username and contact details). The same applies when you send messages through our Services, including reviews or feedback about our Services.

Information you provide about other people
Before you provide us with personal information (such as an address or phone number) of a third party in the course of using our Services, please make sure that such person agrees to provide us with their personal information and that you can provide it to us. You should also make sure that such person understands how their personal data will be processed by us.

B: In some cases we obtain your personal data from third parties:

We also obtain personal data from publicly available sources, in particular social media and the internet, and from our own activities, primarily by evaluating and analysing your personal data obtained from the above sources.

For what purposes do we process your personal data?
We process your personal data to enable you to access our Services so that you can make full use of them.
For this purpose, we process personal data on the basis of the legal title of performance of the contract.

Managing and improving our Services
Your data is also used to enable us to, among other things, manage, improve and develop our Services by analysing it.
For these purposes, we process your personal data on the basis of legitimate interest.

Prevention of fraud and compliance with legal obligations
We monitor how our Services are used to ensure a high level of data protection.

We do this primarily to be able to detect and prevent fraud and abuse of our Services.
For that purpose, we process personal data on the basis of legitimate interest and to comply with a legal obligation.

Feedback and important changes to the Services
We also use your personal data to obtain feedback from you on the operation of our Services. From time to time, we will also notify you of important changes to our Services.
For these purposes, we process personal data on the basis of a legitimate interest.

Marketing communications (direct marketing)
We also use your contact details to send you information about offers that may be of interest to you. For this purpose, we will contact you primarily via email, SMS, private messages (PM) or via our apps.
You can change your marketing message delivery settings at any time by using your user account, by clicking on the "unsubscribe" link at the bottom of our email messages, or by simply emailing us at the address listed above (in the case of mobile devices, by changing the settings).
For these purposes, we process personal data on the basis of a legitimate interest.

Processing based on consent
In some cases, we process your personal data on the basis of your consent - the purpose and other information relating to such processing is always set out within the information we provide to you when we ask for such consent.

The period for which we process and store your personal data
We will only process and retain your personal data for as long as is necessary for the purposes set out above or as long as is necessary to comply with legal requirements. After this period, we will delete or anonymise the personal data.

Where we process your personal data on the basis of legitimate interest, the processing will continue for as long as our legitimate interest lasts. You may object at any time to the processing of your personal data that is carried out on the basis of a legitimate interest. If you object to the processing of your personal data for marketing purposes (which includes profiling) we will stop processing your personal data for this purpose immediately.

To whom do we disclose your personal data?
We share your personal data with the following recipients:

• with our suppliers, primarily suppliers of IT, hosting and marketing services, providers of statistical and database software tools, and, where appropriate, with other entities that provide services to us.

Under certain circumstances, we may be required by law to share your personal data with third parties (such as public authorities, etc.) without your consent. This is our legal obligation.
The processing of your personal data for the above purposes may involve transferring it to countries outside the European Economic Area. In such cases, except where the relevant public authority has determined that the relevant country guarantees an adequate level of data protection, we will ensure that the personal data transferred is protected in accordance with applicable data protection regulations. To ensure an adequate level of protection, we typically use a data transfer agreement and standard contractual clauses approved for this purpose by the European Commission. Further details of these transfers, which we expect to be minimal, can be provided on request.

How do we process your personal data and how is it secured?
The processing of personal data is carried out manually and automatically in electronic information systems, in electronic or paper form. Your personal data is primarily processed by our employees and processors. We have taken appropriate security measures (in particular technical measures such as encryption and organisational measures) to protect your personal data from any accidental loss, destruction, misuse, damage and unauthorised or unlawful access. We have entered into relevant contracts with the processors who process your personal data for us as controllers to ensure that your personal data is adequately protected. Employees and processors involved in the processing of your personal data are bound by confidentiality obligations.

What are your rights in the area of data protection?
You can exercise the following rights at any time during the processing of your personal data:

1. Right of access. You have the right to obtain confirmation of whether and what personal data we are processing about you, including the right to receive copies of the personal data we are processing. Please note that it will not be possible to disclose information in a way that would compromise our business secrets or the rights of third parties.
2. Right to rectification and completion. If you find that your personal data we process is inaccurate or incomplete, you have the right to ask us to correct and update it.
3. Right to erasure. In some cases, you have the right to contact us to request the erasure of your personal data that we process. Please note that erasure of personal data cannot be carried out if the processing is necessary.
4. Right to restriction of processing. In some cases, such as when you question the accuracy, lawfulness or our need to process your personal data, you have the right to ask us to restrict the processing of your personal data. If we comply with your request, we will restrict the processing of your personal data to the minimum necessary (and we will generally not actively process the data further). We will record in our systems that the data is subject to the restriction. If the restriction is lifted and we intend to continue processing your personal data, we will inform you in advance.
5. Right to portability. You have the right to request that we transfer (in a commonly used and machine-readable format) your personal data that you have provided to us and that we process to a third party (another data controller) that you specify in your request. Please note that you can only exercise this right if we are processing your personal data on the basis of your consent or for the purposes of performing a contract and the processing is automated.
6. Right to lodge a complaint with a supervisory authority. If you believe that there has been a breach of the obligations set out in data protection legislation, you have the right to lodge a complaint with the Data Protection Authority or another authority of a Member State of the European Union which is responsible for supervising compliance with data protection obligations.

Right to object to the processing of personal data
In addition to the above rights, you also have the right to object to the processing of your personal data. You may object where the legal basis for the processing of your personal data is the legitimate interest of the controller or a third party (or where the legal basis for the processing is the performance of a task carried out in the public interest or in the exercise of official authority).

You may also object where we process your data for direct marketing purposes (based on a legitimate interest), including profiling, in order to find the most suitable and interesting offers for you.

If you object to processing, we will not process your personal data further until we can demonstrate compelling reasons for processing that override your interests or rights and freedoms. If you object to processing for direct marketing purposes, we will cease processing your personal data for this purpose without further action.

How can you exercise your rights?
If you decide to exercise any of the above rights against us, please write to us at the email or postal address above. Please note that if you exercise your right, we must be sure of your identity. Therefore, in some cases we may ask you to provide proof of identity.

If you exercise any of the above rights, we will inform you in writing without undue delay how we will deal with your request.

Changes to the Personal Data Processing Policy
We may modify or update this personal data processing information in the future. If we make changes, you will know this by, among other things, updating the date of the last modification set out at the beginning of this policy. If we make changes that could have a significant impact on your privacy, we will also notify you in another appropriate manner (e.g., by email or a notice posted in our Services). We encourage you to read the Privacy Notice regularly to stay informed about how we process your personal information and how you can protect your privacy.