Privacy Policy

1. Data Controller

The data controller for slotsloth.com is:

2. Data We Collect

We collect the following categories of personal data:

3. Legal Basis for Processing

We process your personal data on the following legal bases under GDPR Article 6:

• Performance of a contract — processing your account and booking data to provide the service you requested.
• Legitimate interests — for service security, fraud prevention, and service improvement, where these interests are not overridden by your rights.
• Legal obligation — where required by applicable law.

4. How We Use Your Data

We use the data we collect to:

• Provide, operate, and maintain the slotsloth service.
• Manage your bookings and reservations.
• Send you service-related notifications (e.g., booking confirmations).
• Understand how the service is used and improve its features.
• Detect and prevent fraud, abuse, and security issues.

5. Data Retention

We retain your personal data for as long as your account is active or as necessary to provide the service. During the beta, data may be deleted or reset as part of development. When you request account deletion, we anonymize or erase your personal data. Where certain records must be retained for legal, security, or accounting reasons, we keep only anonymized records that no longer identify you. You may request deletion of your data at any time (see Section 8).

6. Third-Party Processors

We use the following third-party service providers that may process personal data on our behalf. Each acts as a data processor under a data processing agreement or equivalent safeguard:

7. Cookies

slotsloth.com uses strictly necessary cookies only. These are essential for the service to function and do not require your prior consent under EU law. They include:

• Session cookies — to keep you logged in during your visit.
• Preference cookies — to remember your language and UI settings.
• Security cookies — to protect against cross-site request forgery.

We do not use advertising, tracking, or analytics cookies. If this changes in the future, we will update this policy and request your consent before placing any non-essential cookies.

8. Your Rights (GDPR)

Under the GDPR, if you are in the European Economic Area, you have the following rights:

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion or anonymization of your data ('Right to be Forgotten').
• Right to data portability — request your data in a machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to restriction — request that we limit how we use your data.

You can exercise your rights via your account settings (Privacy & Data section) or by emailing support@slotsloth.com. You also have the right to lodge a complaint with a supervisory authority — in Poland, this is the UODO (Urząd Ochrony Danych Osobowych).

9. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include access controls, encrypted connections (HTTPS), and regular backups.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by updating the date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.