PRIVACY POLICY.

I. Who is responsible for your data?

Controller / Obchodné meno

Martin Majtán

Company ID / IČO

55712142

Business address / Miesto podnikania

92041 Leopoldov, Jozefa Murgaša 310/17, Slovenská republika

Register / Vedený v registri

Okresný úrad Trnava

Trade register number / Číslo živnostenského registra

250-56184

Privacy contact

info@gamestreak.monster

This policy covers the registration form on the Gamestreak Monster parking page. Processing is governed by Regulation (EU) 2016/679 (GDPR) and applicable Slovak data protection law, including Act No. 18/2018 Z. z.

II. What we collect and why

• Email address: to send launch announcements and news about Gamestreak Monster. The legal basis is your consent under Article 6(1)(a) GDPR. We do not use this consent for unrelated third-party offers.
• Consent record: a random registration ID, the time as a Unix timestamp and as readable local/UTC dates, time zone, the consent statement, button used, policy version, purpose and form language/source. These document the choice you made. We keep this evidence to meet our accountability obligations under Articles 5(2) and 7(1) GDPR, with Article 6(1)(c) as the legal basis.
• Limited technical request data: the connection IP address, browser User-Agent (up to 256 bytes) and Accept-Language header (up to 96 bytes). We use these for preventing repeated submissions, investigating abuse and diagnosing signup problems. This is based on our legitimate interest in protecting the form under Article 6(1)(f) GDPR. You may object to this processing.
• Administrative fields: retention deadlines and whether email ownership has been verified. This form records a signup request; it does not itself verify ownership of the email address.

Technical headers are supplied by the browser and may be absent, incomplete or inaccurate. An IP address may identify a shared connection or a proxy. We do not derive a precise location, perform device fingerprinting or collect your browsing history, passwords, contacts or advertising identifiers.

The signup is intended for people aged 16 or over. The confirmation includes this declaration; we do not ask for your date of birth. If you believe a younger person has registered, contact us to remove their details.

III. How you give and withdraw consent

Entering an address alone does not save a registration. With JavaScript enabled, the form opens a confirmation window containing a link to this policy. Your registration is submitted only when you click YES MONSTER! in that window. Without JavaScript, you must select the consent checkbox and submit the form.

The consent statement is:

You may decline or close the window and still browse the page. Giving your email is voluntary, but we cannot send you updates without it. There is no purchase or contractual obligation.

To withdraw, send an email from the registered address to info@gamestreak.monster with “Unsubscribe” in the subject, or reply to an update asking to unsubscribe. There is no fee or need to give a reason. We will stop sending updates and remove your active registration without undue delay. Withdrawal does not affect the lawfulness of processing before it was withdrawn.

IV. How long we keep your information

The email address and associated registration and consent record are kept for no more than 365 days from signup, or until you withdraw consent or the purpose ends, whichever happens first. Duplicate submissions do not extend that period.

The IP address, browser header and request-language header are removed from the registration record after 30 days. Retention cleanup runs daily. After expiry, the email is no longer eligible for use, even if cleanup is temporarily delayed.

Correspondence about a privacy request may be kept separately for as long as needed to handle that request and demonstrate compliance. Any exceptional preservation needed for a specific legal claim must be limited to the necessary information and period; it is not a basis for continuing marketing.

V. Access, hosting and recipients

Registration records are stored in a CSV file with public web access blocked. Access is restricted to the controller and authorised persons who need it to operate this service. Hosting and technical service providers may process the data on the controller’s instructions under appropriate data-processing agreements. We do not sell the list.

This form does not send registration data to third-party advertising or analytics platforms. Information about the hosting provider and processing location is available from the privacy contact. If a provider requires a transfer outside the European Economic Area, the controller must use a lawful transfer mechanism, such as an adequacy decision or appropriate contractual safeguards, and provide information about those safeguards on request.

Data may also be disclosed to a competent authority where required by law. Server access/security logs maintained by the hosting provider are separate from this registration CSV and must be limited to the scope and retention necessary to operate and protect the website.

VI. Cookies and automated decisions

The form uses a necessary session cookie named monster_session to protect submissions against forgery and display form results. It expires when the browser session ends; browser session restoration may retain it. It is not used for advertising or tracking across websites.

This page sets no analytics or advertising cookies and loads no third-party fonts or tracking scripts. We do not profile you or make decisions with legal or similarly significant effects based solely on automated processing. Technical rate limiting may temporarily block excessive form submissions.

VII. Your rights

Subject to the conditions in the GDPR, you may request access to your data, correction, erasure, restriction of processing, and portability of data processed by automated means on the basis of consent. You can withdraw consent at any time and object to processing based on legitimate interests. You may always object to direct marketing.

Send your request to info@gamestreak.monster or to the controller’s business address above. We may request proportionate information to verify your identity. We normally respond within one month; if the GDPR permits an extension for a complex request, we will explain it within that month.

VIII. How to make a complaint

You may complain to a supervisory authority, in particular in the EU country where you normally live or work, or where an alleged infringement occurred. The Slovak supervisory authority is:

IX. Changes to this policy

This version is effective from 2026-09-22. Each registration records the version and wording accepted. A change of purpose requiring new consent will not be applied to an existing signup without obtaining that consent.