Privacy Policy

1. Introduction

dotyourspot ("We", "Us", "Our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and share your information when you use our digital advertising space service in the Mall of Split shopping center.

By using our service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Data We Collect

2.1 Data You Provide Directly

• Registration data: first name, last name, email, password, phone number
• Business data: company name, VAT ID, address, banking details
• Content: ads, images, videos you upload
• Communication: messages you send us through support

2.2 Data We Collect Automatically

• Technical data: IP address, browser type, operating system
• Service usage: pages you visit, time spent on page
• Cookies: small files stored on your device
• Analytics: data about how you use our platform

3. How We Use Your Data

We use your personal data for the following purposes:

• Providing and managing our service
• Processing payments and managing accounts
• Communicating with you about the service
• Improving our platform and developing new features
• Providing customer support
• Detecting and preventing fraud
• Complying with legal obligations
• Marketing (with your consent)

4. Legal Basis for Data Processing

We process your personal data based on the following legal bases:

• Contract performance: for providing the service you ordered
• Legal obligation: for complying with legal requirements
• Legitimate interest: for improving service and preventing fraud
• Consent: for marketing communication and optional features

5. Sharing Data with Third Parties

We may share your personal data with:

• Service providers: hosting, payment, analytics (under strict contracts)
• Legal authorities: when legally required
• Business partners: only with your explicit consent
• Buyers: in case of merger or company acquisition

We never sell your personal data to third parties for marketing purposes.

6. Your Rights (GDPR)

As a user from the EU, you have the following rights:

• Right of access: you can request a copy of your data
• Right to rectification: you can request correction of inaccurate data
• Right to erasure: you can request deletion of your data
• Right to restriction: you can restrict processing of your data
• Right to data portability: you can request data transfer
• Right to object: you can object to processing for marketing
• Right to withdraw consent: you can withdraw consent at any time

To exercise your rights, contact us at dotyourspot@dotyourspot.com

7. Data Security

We apply appropriate technical and organizational measures to protect your data:

• Data encryption in transit and at rest
• Regular security checks and updates
• Limited data access only to authorized persons
• Regular data backups
• Employee education on data protection

8. Data Retention

We keep your data only as long as necessary:

• Account data: while your account is active + 3 years
• Transaction data: 10 years (legal obligation)
• Marketing data: until you withdraw consent
• Analytics data: 2 years in anonymized form

9. Cookies

We use cookies to improve your experience on our site:

• Necessary cookies: for basic site functionality
• Analytics cookies: for understanding how you use the site
• Functional cookies: for remembering your settings
• Marketing cookies: for personalized ads (with consent)

You can manage cookies through your browser settings.

10. Data Transfer Outside EU

If we transfer your data outside the EU, we ensure appropriate protection through:

• European Commission adequacy decisions
• Standard contractual clauses
• Certified transfer mechanisms

11. Changes to This Policy

We may update this Privacy Policy. We will notify you of significant changes via email or platform notification. We recommend that you regularly review this page.

12. Contact and Complaints

For questions about this Privacy Policy or to exercise your rights:

You have the right to file a complaint with the competent data protection authority (Personal Data Protection Agency) if you believe our processing of your data violates GDPR.