PRIVACY POLICYDEYKOD Privacy PolicyLast Updated: 7.7.2026Effective Date: 7.7.20261. IntroductionThis Privacy Policy ("Privacy Policy") explains how Mavateo s.r.o. ("Operator", "Controller", "we", "our", or "us"), acting as the data controller, collects, uses, stores, secures, and otherwise processes the personal data of users of the DEYKOD mobile application and related services.Mavateo s.r.o. considers the protection of users' privacy to be one of its highest priorities. The purpose of this Privacy Policy is to transparently explain what personal data we process, why we process it, how long we retain it, and what rights users have regarding the processing of their personal data.This Privacy Policy has been prepared in accordance with the requirements of the Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation – GDPR) and the applicable laws of the Czech Republic.Mavateo s.r.o. is committed to processing personal data only to the extent necessary for providing the DEYKOD Service, protecting such data through appropriate technical and organizational measures, and respecting the rights of all data subjects.2. Data ControllerFor the purposes of Article 4(7) of the GDPR, the controller of your personal data is:Mavateo s.r.o.Registered Office:Ohnišťovice 29345 22 PoběžoviceCzech RepublicEmail: info@deykod.comThe Controller is responsible for ensuring that personal data is processed lawfully, fairly, transparently, and securely.The Controller continuously evaluates its technical and organizational security measures and implements appropriate safeguards designed to protect personal data against unauthorized access, loss, misuse, destruction, alteration, or any other unauthorized processing.3. Scope of this Privacy PolicyThis Privacy Policy applies to all individuals using the DEYKOD Application, regardless of whether they use the free version or a Premium subscription. It applies in particular to:registration of user accounts;signing in to the Application;use of Application features;communication with the Operator;management of user accounts;verification of Discount Code Providers;reporting invalid, expired, or malfunctioning discount codes.This Privacy Policy does not apply to third-party websites, applications, or services that may be accessible through links provided within the DEYKOD Application. Any processing of personal data by such third parties is governed exclusively by their own privacy policies.4. DefinitionsFor the purposes of this Privacy Policy, the following definitions shall apply.DEYKOD ApplicationThe mobile application and related online services operated by Mavateo s.r.o., designed to provide users with access to discount codes published by authorized providers together with related features and services.UserAny natural person using the DEYKOD Application, regardless of whether they have created an account or only access publicly available features.Registered UserA User who has created an account using an email address and password.Discount Code ProviderA natural or legal person approved by the Operator and authorized to publish discount codes within the DEYKOD Application.Verified AccountA user account for which the registered email address has been successfully verified. Verified Account status confirms only the successful verification of the email address. It does not constitute verification of the User's identity or confirmation of any commercial partnership.Verified DEYKOD PartnerA designation intended for influencers, companies, or other entities that successfully complete the verification process established by the Operator. The conditions governing this program will be set out in a separate Verification Policy.Personal DataAny information relating to an identified or identifiable natural person as defined by the GDPR.ProcessingAny operation or set of operations performed on Personal Data, including collection, recording, storage, organization, use, modification, disclosure, deletion, anonymization, or any other form of processing.GDPRRegulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data.5. Nature of the DEYKOD ServiceDEYKOD is a technology platform that enables users to discover and use discount codes published by their authorized providers.The purpose of the Application is not to sell products or services but to provide a trusted environment for discovering and sharing current promotional offers.The Operator expressly states that:DEYKOD is not an online store;DEYKOD is not a party to any purchase agreement concluded between a User and a merchant;DEYKOD does not provide individual discounts;DEYKOD does not act as an agent, representative, or reseller for influencers, merchants, or companies;DEYKOD does not guarantee that any particular discount code will remain active, valid, or redeemable.The provider of each discount code is solely responsible for its accuracy, validity, availability, terms, and conditions.The Operator reserves the right to remove, restrict, or hide any content that it reasonably believes to be invalid, misleading, fraudulent, or otherwise in violation of the rules governing the DEYKOD platform.6. Categories of Personal Data We ProcessThe Operator processes only the personal data that is necessary for providing the DEYKOD Service or that may be processed based on applicable law or the User's consent.In the first public release of the Application, we may process the following categories of personal data:Identification DataEmail addressUsernameAuthentication DataSecurely stored password hashTechnical authentication identifiers related to user loginThe Operator never stores passwords in plain text.Technical InformationTo ensure the secure operation of the Application, we may process technical information including:Device typeOperating system versionApplication languageApplication versionTechnical information required for diagnostics, troubleshooting, and error resolutionThese technical data are not used for advertising or marketing purposes.Approximate Location DataIf the User grants the necessary permission, the Application may process the approximate location of the device in order to display geographically relevant offers. Providing location access is entirely voluntary and may be disabled at any time through the settings of the User's device.CommunicationsIf a User contacts the Operator by email, contact form, or other communication channels, we may process the information contained in that communication solely for the purpose of responding to the request.Reports of Invalid Discount CodesWhen submitting a report regarding an invalid or malfunctioning discount code, we may process:Identification of the reported discount code;Date and time of the report;The content of the report;The reporting User's account identifier.These data are processed solely for quality assurance and service administration purposes.7. How We Collect Personal DataThe Operator collects personal data only by lawful, fair, transparent, and proportionate means. Personal data are obtained primarily in the following ways.7.1 User RegistrationWhen creating an account, the User provides information including:Email address;Password;Username.These data are necessary for creating and managing the User account.7.2 Use of the ApplicationWhile the Application is being used, certain technical logs may be automatically generated in order to:ensure proper operation of the Application;maintain security;resolve technical issues;prevent abuse and fraudulent activity.These technical records are not used for profiling Users.7.3 Location InformationApproximate device location is collected only if the User grants the required permission through the operating system of their device. Refusing this permission does not prevent registration or the normal use of the Application but may limit location-based features and geographically relevant offers.7.4 Communication with the OperatorIf a User contacts the Operator via email or another communication channel, we process only the information necessary to respond to the inquiry or request.7.5 Reporting Invalid or Suspicious Discount CodesUsers may report invalid, expired, or suspicious discount codes through the Application. In such cases, we may process:User account identifier;Reported discount code;Date and time of the report;Report description or comments.These data are processed exclusively for maintaining the quality, reliability, and integrity of the DEYKOD Service.8. Purposes of Processing Personal DataPersonal data are processed only to the extent necessary for providing and improving the DEYKOD Service. The principal purposes of processing include the following.8.1 User Registration and Account ManagementRegistration data are processed to:create User accounts;authenticate Users;manage User profiles;maintain account security.8.2 Providing the DEYKOD ServicePersonal data are processed in order to:provide access to Application features;display discount codes and promotional offers;manage favorites and saved items;store User preferences and settings.8.3 Security and Fraud PreventionThe Operator processes certain technical information for the purpose of:protecting User accounts;preventing abuse of the Service;detecting fraudulent activity;investigating technical incidents;maintaining the integrity and security of the Application.8.4 Quality AssuranceThe Operator may process information relating to:reports of invalid discount codes;management of verified providers;removal of invalid or misleading offers;improving Application functionality and overall user experience.8.5 Compliance with Legal ObligationsPersonal data may also be processed where necessary to comply with obligations imposed by the laws of the Czech Republic, the European Union, or other applicable legal requirements.9. Legal Bases for ProcessingThe Controller processes personal data only where a valid legal basis exists under Article 6 of the GDPR. The legal bases applicable to the DEYKOD Service include the following.9.1 Performance of a ContractMost personal data are processed because they are necessary to provide the DEYKOD Service. Without such processing it would not be possible to:create User accounts;authenticate Users;manage User profiles;provide the features of the Application.9.2 Compliance with Legal ObligationsCertain personal data may be processed where required by applicable laws and regulations.9.3 Legitimate InterestsThe Controller may process certain personal data where necessary to pursue its legitimate interests, including:protecting the Application against abuse;preventing fraud;maintaining the security of the Service;protecting the legal rights and interests of the Operator.Whenever processing is based on legitimate interests, the Controller carefully balances those interests against the fundamental rights and freedoms of Users.9.4 User ConsentWhere required by applicable law, personal data will be processed on the basis of the User's freely given consent. In the first public version of the Application, this primarily concerns:access to the approximate location of the User's device.Users may withdraw their consent at any time through their device settings or by any other method described in this Privacy Policy. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.10. User ConsentWhere the processing of Personal Data is based on the User's consent, such consent is given voluntarily, specifically, informed, and unambiguously.Consent is not a condition for creating a User account unless it is strictly necessary for providing a particular feature of the Application.In the first public version of DEYKOD, consent is primarily requested for:access to the approximate location of the User's device;any future features that require the User's explicit consent under applicable law.Users may withdraw their consent at any time through their device settings or by contacting the Operator. Withdrawal of consent does not affect the lawfulness of any processing carried out before such withdrawal.11. Location DataSubject to the User granting the appropriate permission, the DEYKOD Application may process the approximate location of the User's device. Location information is processed primarily for the following purposes:displaying geographically relevant offers;improving the overall user experience;enabling future location-based filtering features.The first public version of DEYKOD does not continuously track Users' locations. The Operator does not collect or store precise GPS location history and does not create movement profiles based on Users' location data.Location permissions may be revoked at any time through the operating system settings of the User's device.12. Storage and Security of Personal DataThe Operator implements appropriate technical and organizational measures designed to protect Personal Data against:unauthorized access;accidental or unlawful destruction;loss;alteration;misuse;unauthorized disclosure.Security measures are regularly reviewed with regard to:the scope of processed Personal Data;the nature of the services provided;current technological standards;known cybersecurity risks.Access to Personal Data is limited to individuals who require such access in order to perform their professional duties. All persons with access to Personal Data are subject to appropriate confidentiality obligations.12.1 Data StoragePersonal Data are stored on infrastructure provided by Amazon Web Services (AWS) in data centers located in Frankfurt am Main, Germany. The Operator aims to ensure that Personal Data are processed within the European Union whenever reasonably possible.12.2 EncryptionThe Operator uses appropriate technical safeguards to secure communication between the Application and its server infrastructure. Sensitive information is stored using industry-standard security measures. User passwords are never stored in plain text.12.3 Service AvailabilityAlthough the Operator strives to maintain a highly available and reliable Service, uninterrupted availability of the Application cannot be guaranteed. Temporary interruptions may occur due to maintenance, security measures, infrastructure upgrades, or unforeseen technical issues.13. Data ProcessorsThe Controller may use carefully selected third-party service providers ("Processors") to assist in providing the DEYKOD Service. Each Processor is contractually required to provide appropriate safeguards for the protection of Personal Data and may process Personal Data only in accordance with the Controller's documented instructions.In the first public version of the Application, the primary Processor is:Amazon Web Services (AWS) – cloud hosting infrastructure.Should additional Processors be engaged in the future, this Privacy Policy will be updated accordingly.14. Disclosure of Personal DataThe Operator does not sell, rent, or otherwise disclose Personal Data to third parties for their own marketing purposes. Personal Data may only be disclosed to:authorized Data Processors acting on behalf of the Controller;public authorities where disclosure is required by applicable law or a legally binding decision;other recipients where disclosure is required by law or based on the User's explicit consent.The first public version of DEYKOD does not use third-party advertising networks, analytics platforms, or marketing services for processing Users' Personal Data.15. Data RetentionPersonal Data are retained only for as long as necessary to fulfill the purposes for which they were collected or as required by applicable law. In general:User account information is retained for the lifetime of the account;information relating to verified Discount Code Providers is retained for as long as necessary to provide the Service and comply with legal obligations;email correspondence is retained for the period necessary to resolve the relevant request or dispute;technical and security logs are retained only for the period reasonably necessary to protect the Application and prevent misuse.Once the applicable retention period expires, Personal Data will be securely deleted or irreversibly anonymized.16. How We Protect Your DataThe security of Personal Data is one of our highest priorities. We use appropriate technical and organizational safeguards, including:encrypted communication using HTTPS/TLS;secure AWS cloud infrastructure located in Frankfurt, Germany;role-based access control;regular security updates;protection against unauthorized access;monitoring of security incidents.Although we employ modern security measures, no method of electronic transmission or storage can be guaranteed to be completely secure. Accordingly, absolute security cannot be guaranteed.17. Your Rights Under the GDPRSubject to applicable law, you have the following rights regarding your Personal Data:the right to obtain confirmation as to whether we process your Personal Data;the right to access your Personal Data;the right to request correction of inaccurate or incomplete Personal Data;the right to request the deletion of your Personal Data ("Right to be Forgotten");the right to request restriction of processing;the right to object to certain processing activities;the right to receive your Personal Data in a structured, commonly used, and machine-readable format (data portability);the right to withdraw your consent at any time where processing is based on consent.You may exercise any of these rights by contacting us at: info@deykod.comIf you believe that the processing of your Personal Data violates applicable data protection laws, you also have the right to lodge a complaint with the competent supervisory authority.18. International Transfers of Personal DataIn the first public version of the DEYKOD Application, Personal Data are stored on Amazon Web Services (AWS) servers located in Germany. As a general rule, the Operator does not transfer Personal Data outside the European Economic Area (EEA).Should it become necessary in the future to engage service providers located outside the EEA, any transfer of Personal Data will be carried out only in compliance with the GDPR and applicable data protection laws, including the implementation of appropriate safeguards such as the European Commission's Standard Contractual Clauses or other legally recognized transfer mechanisms.19. Children's PrivacyThe DEYKOD Application is intended for individuals who are at least 15 years of age. The Operator does not knowingly collect or process Personal Data relating to children under the age of 15.If we become aware that Personal Data relating to a child under 15 have been collected without an appropriate legal basis, we will take reasonable steps to delete such information without undue delay.20. Changes to this Privacy PolicyThe Operator may update this Privacy Policy from time to time, including as a result of:changes in applicable laws or regulations;expansion or modification of Application features;implementation of new technologies;improvements to security measures.The most current version of this Privacy Policy will always be published within the DEYKOD Application and on the official DEYKOD website. The effective date of each revised version will be clearly indicated at the beginning of this document.Continued use of the Application after the effective date of an updated Privacy Policy constitutes acknowledgment of the revised version.21. Contact InformationData ControllerMavateo s.r.o.Registered Office:Ohnišťovice 29345 22 PoběžoviceCzech RepublicCompany ID (IČO): 23498536Email: info@deykod.comWebsite: www.deykod.comIf you have any questions regarding this Privacy Policy, the processing of your Personal Data, or if you wish to exercise your rights under the GDPR, please contact us using the details provided above.We will respond to all requests without undue delay and within the time limits required by applicable law.Document InformationDocument Version: Privacy Policy v1.0Effective Date: To be completed prior to the official launch of the DEYKOD Application.Last Updated: This date will be updated whenever this Privacy Policy is revised due to changes in Application features, legal requirements, or data processing practices.