Your data: access, export, deletion

Who is responsible

The controller of personal data in the Chakloon services is Haydamax OÜ, registry code 17351554, Narva mnt 5, 10117 Tallinn, Estonia. What we collect, why and for how long is described in the Privacy Policy. This page explains how to use your rights under the General Data Protection Regulation (GDPR).

All Chakloon services use one account, Chakloon Passport. A request about your account therefore covers every service you use with it, unless you tell us that it concerns only one service.

Your rights

• Access: to know whether we process your data and to receive a copy of it (Article 15 GDPR).
• Correction: to have inaccurate data corrected and incomplete data completed (Article 16).
• Deletion: to have your data erased when there is no longer a reason to keep it (Article 17).
• Restriction: to have the use of your data paused, for example while its accuracy is checked (Article 18).
• Portability: to receive the data you gave us in a structured, machine-readable format, or to have it sent to another provider where this is technically possible (Article 20).
• Objection: to object to processing based on our legitimate interests (Article 21).
• Withdrawal of consent: where we process data on the basis of your consent, to withdraw it at any time (Article 7(3)).
• No solely automated decisions: not to be subject to a decision based solely on automated processing that has legal or similarly significant effects on you (Article 22). We do not take such decisions.

Using these rights is free of charge. We may refuse, or charge a reasonable fee, only where a request is manifestly unfounded or excessive, in particular because it is repetitive, and we explain why.

Access and a copy of your data

You can see most of your data yourself: your profile, posts and settings in the social network Chakloon, your conversations in Chakloon Chat, your handle in Chakloon NIC, your links in Chak. You can download a full copy of the data of your Chakloon Passport account in your account at pass.chakloon.com where this is available; otherwise write to privacy@chakloon.com from the e-mail address of your account and we send you the copy. In Zori, the Download my data button under My data gives you your profile, forecasts, marks and the people you added as a JSON file.

The copy contains the personal data we hold about you, the purposes, the recipients, the storage periods and the source of data we did not receive from you. It does not contain the personal data of other people, except where they are part of your own conversations, or information we may not disclose by law.

Correction

Most data can be corrected in the profile and settings of the service. If you cannot change something yourself, for example a date of birth entered wrongly, write to privacy@chakloon.com and say what is wrong and what is correct. We may ask for proof where the correction affects your age or your identity.

Deletion

• Chakloon Chat: open the side menu and choose Delete account. This deletes your Chakloon Chat account.
• Chakloon Passport, everywhere: delete the account in all services at once in your account at pass.chakloon.com where this is available, or write to privacy@chakloon.com from the e-mail address of your account and say that you want the account deleted everywhere.
• Zori and Chacki: in Zori, My data lets you delete all your Zori data at once; in Chacki the delete button hides a conversation from you, while its complete erasure is done on request to privacy@chakloon.com or with the deletion of your account, see Chacki AI Terms.
• Single items: posts, comments, messages, links and files can be deleted in the service where you created them.

Messages you already sent to others stay in their conversations, because they are part of the other person's history too. Some data stays for a limited time even after deletion: server logs are kept for 30 days (technical logs of Chakloon Chat for 14 days), records of reports about content or people for up to 12 months, and payment records for 7 years under accounting law. Data that must be kept for legal claims, or that an authority has ordered us to preserve, is kept as long as required.

Restriction

You can ask us to restrict the use of your data while you dispute its accuracy, if the processing is unlawful but you do not want deletion, if you need the data for a legal claim, or while we consider your objection. Restricted data is stored but not otherwise used without your consent.

Objection

You can object at any time, on grounds relating to your particular situation, to processing based on our legitimate interests, for example the protection of the services against spam and abuse, audience measurement or the search index of Chakloon Net. We stop the processing unless we demonstrate compelling legitimate grounds that override your interests, rights and freedoms, or need the data for a legal claim (Article 21(1) GDPR). A person mentioned on a web page can in this way ask us to remove a result from Chakloon Net; give us the link and the search words concerned.

Portability

On request we send you the data you gave us, such as your profile, posts, messages and settings, in a structured, commonly used, machine-readable format. This right covers data we process on the basis of a contract with you or of your consent. Tell us if you want it sent directly to another provider and give us its address. Your Zori data you can download yourself, as described above.

Withdrawing consent

Where processing is based on consent, you can withdraw it at any time, as easily as you gave it. This concerns Zori, which asks for two separate consents: for saving marks of the health sphere and for taking part in the research study. Both can be withdrawn in Zori under My data, the consent to the study also in the Study section, or by writing to privacy@chakloon.com from the e-mail address of your account. When you withdraw the consent for health marks, all health marks already saved are erased from your diary. When you withdraw the consent to the study, your days no longer go into the common result. Withdrawal does not affect the lawfulness of processing before it. Forecasts, the birth chart and compatibility do not depend on consent; they are part of the service you asked for.

How to make a request

Write to privacy@chakloon.com. Please send the request from the e-mail address of your Chakloon Passport account and tell us:

• which right you want to use;
• your handle (@name) and the services concerned;
• for a correction, what is wrong and what is correct.

You may also send a request by post to Haydamax OÜ, Narva mnt 5, 10117 Tallinn, Estonia. Someone may make a request for you, for example a lawyer or a parent, if they show that they are authorised.

Identity check

We must make sure that we give data only to the person it belongs to. A request from the e-mail address of the account is usually enough. If it comes from another address, or the request concerns sensitive data, we may ask you to confirm it from the account address or while signed in. We ask for identity documents only when there is no other reasonable way, and keep them no longer than the check requires.

How long it takes

We answer within one month of receiving the request. Where the GDPR allows it, because of the complexity or number of requests, the period may be extended by up to two further months, and we tell you within the first month why. If we do not act on a request, we tell you why within one month and how you can complain.

Complaints

If you believe we process your data unlawfully, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), Tatari 39, 10134 Tallinn, aki.ee, or to the data protection authority of the country where you live or work. You can also go to court. We would like to hear from you first, so that we can put things right.

Contact

• Data protection requests: privacy@chakloon.com
• Postal address: Haydamax OÜ, Narva mnt 5, 10117 Tallinn, Estonia