GDPR & Your Rights
Cloomba is designed from the ground up with EU data protection law in mind. This page explains your rights under the General Data Protection Regulation (GDPR) and how to use them.
Who is the data controller?
WhiteTown s.r.o., Narcisova 38, 821 01 Bratislava, Slovak Republic is the data controller for all personal data processed through Cloomba. This means we are responsible for how your data is used and protected.
Your rights at a glance
Right of access
You can request a copy of all personal data we hold about you. We will provide it within 30 days in a clear, readable format.
Right to rectification
If any data we hold is inaccurate or incomplete, you can ask us to correct it. You can update most profile data directly in your account settings.
Right to erasure ("right to be forgotten")
You can ask us to delete your personal data. We will do so unless we are required to keep it for a legal obligation (for example, financial records we must retain for tax purposes).
Right to restriction of processing
You can ask us to pause processing your data — for example while you dispute its accuracy or the lawfulness of our processing.
Right to data portability
You can request your data in a structured, commonly used, machine-readable format (JSON) so you can transfer it to another service.
Right to object
Where we process your data on the basis of legitimate interests, you can object. We will stop unless we have compelling grounds that override your interests.
Right to withdraw consent
Where processing is based on your consent (such as push notifications), you can withdraw it at any time — this will not affect the lawfulness of processing before withdrawal. You can manage consent in your account settings.
Rights related to automated decision-making
Cloomba does not make any decisions about you based solely on automated processing.
How to exercise your rights
Email us at contact us with the subject line "Data rights request". Include your account email address so we can identify you. We will respond within 30 days. For complex requests we may extend this to 60 days — we will let you know if that is the case.
We do not charge a fee for reasonable requests.
Right to complain
If you are not satisfied with how we handle your data or your request, you have the right to lodge a complaint with the Slovak supervisory authority:
Úrad na ochranu osobných údajov Slovenskej republiky
Hraničná 12, 820 07 Bratislava
dataprotection.gov.sk
If you are based in another EU country, you may also contact your local data protection authority.
Data we hold and why
For a full breakdown of what data we collect, why, and how long we keep it, see our Privacy Policy.
Infrastructure and transfers
Cloomba's servers run on Railway infrastructure in EU West (Amsterdam, Netherlands). Authentication is handled by Firebase (Google). Payment processing is handled by Stripe.
Where data is processed by sub-processors outside the EEA (such as Google and Stripe in the US), it is protected by Standard Contractual Clauses approved by the European Commission.
Contact
WhiteTown s.r.o.
Narcisova 38, 821 01 Bratislava, Slovak Republic
[email protected]