Privacy policy

Data controller: [Full company / sole proprietor name]
Tax ID (NIF): [NIF]
Address: [full address]
Contact email: privacy@floata.sk
We have not appointed a Data Protection Officer.

01Data we collect

• Account data: email, name (optional), password (hashed).
• User content: tasks, lists, comments, files and collaboration metadata.
• Payment data: processed exclusively by Polar.sh (we do not store bank or card data).
• Technical data: IP, device, browser, cookies (see Cookie policy).

02Purposes and legal bases GDPR ART. 6

Purpose	Legal basis
Service provision and collaboration	Contract performance
Subscription management (Polar.sh)	Contract performance
Product improvement and analytics	Legitimate interest
Security and fraud prevention	Legitimate interest
Marketing (only with consent)	Consent

03Data in collaborative lists

When you invite other users to your lists, you share personal data with them. In these cases:

• You act as data controller for the data you share.
• Floatask acts as data processor (or joint controller in certain cases).
• Each collaborator is responsible for their own actions on the shared data.

04Recipients and processors

• Polar.sh (Merchant of Record — payments and invoicing).
• Infrastructure providers (hosting, email, analytics) under data processing agreements (DPA).
• Collaborators you invite (you control access).

DPA availability: for business customers (B2B) we can provide a Data Processing Agreement (DPA) on request.

05International transfers

When required, we carry out transfers with appropriate safeguards (Standard Contractual Clauses approved by the European Commission or other equivalent mechanisms).

06Retention period

• Active account: for the duration of the contractual relationship.
• After cancellation: we delete personal data within a maximum of 30 days, except where retention is required by law (invoicing, etc.).

07Your GDPR rights

You can exercise your rights of access, rectification, erasure, objection, restriction and portability at any time by emailing privacy@floata.sk. You can also file a complaint with the Spanish Data Protection Agency (AEPD).

08Security

We apply appropriate technical and organizational measures (in-transit and at-rest encryption, access control, backups, etc.).

09Minors

The Platform is not directed at users under 16.