Privacy Policy

BATNER APP PRIVACY POLICY

Version: 1.3 (GDPR compliant)  |  Effective from: 1 March 2026

1. Who we are (data controller)

The controller responsible for your personal data is the operator of the Batner app and platform, as identified in the "Controller details" section at the end of this policy.

We take your privacy seriously. This policy explains how we collect, use and protect your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

2. What personal data we collect and why

To keep the Batner marketplace running safely and properly, we process the following data:

A. Account creation and communication (basic registration)

• What we collect: phone number, email address, username, password (encrypted).
• Why (purpose): to create and manage your user account, send you technical and security notifications, and enable in-app chat.
• Legal basis: performance of a contract (providing the service under the Terms of Use).

B. Payment processing (Stripe Connect)

• What we collect: first name, surname, billing address, transaction history. (Note: we never see or store your payment card numbers or detailed bank details — this data is processed exclusively by our payment partner, Stripe.)
• Why (purpose): to enable the "Buy now" feature, process payments, resolve disputes and meet our tax and reporting obligations.
• Legal basis: performance of a contract and compliance with legal obligations (accounting, the DAC7 Directive).

C. User content and listings

• What we collect: photos, videos, listing text, audio recordings and location data (if you choose to share it to arrange an in-person meetup).
• Why (purpose): to display your listings on the marketplace and to promote the Batner platform.
• Legal basis: legitimate interest (operating the marketplace and marketing).

D. Technical data and analytics

• What we collect: IP address, device type, operating system and in-app activity logs (e.g. clicks and navigation).
• Why (purpose): to keep our network secure, prevent fraud (spam, bots) and fix app errors.
• Legal basis: legitimate interest (app security and stability).

3. Who we share your data with (recipients)

We never sell your personal data to third parties for their own marketing purposes. We only share data with trusted partners that are essential to running the app:

1. Stripe Payments Europe, Ltd. (Ireland) / Stripe, Inc. (USA): our payment gateway and identity verification provider (Stripe Identity). We share data with Stripe to process payments and to prevent money laundering (AML).
2. Cloud service providers (hosting): we use secure servers to run the platform. For users of our European domains, data is hosted exclusively on servers within the European Union. For users accessing the platform via the .com and .ca domains, data is hosted on servers in the USA.
3. Law enforcement and government authorities: if we receive a lawful request (e.g. as part of a fraud investigation), we are legally required to provide your data to law enforcement or tax authorities (e.g. income reporting under the DAC7 Directive).
4. Other users: when a transaction begins, we share the necessary contact details with the other party (e.g. your username in chat) so the deal can be completed.

4. International data transfers (outside the EU)

We take steps to keep your data safe. While European users' data is primarily stored within the European Economic Area (EEA), using the .com/.ca domains or certain third-party services (such as Stripe) may require data to be transferred to the USA. Any such transfer outside the EEA takes place solely on the basis of Standard Contractual Clauses (SCCs) approved by the European Commission or the EU-US Data Privacy Framework, which guarantee a European level of data protection.

5. How long we keep your data

We only keep your data for as long as strictly necessary:

• Active account: we keep your data for as long as your account is active.
• Account deletion: once your account is deleted, we erase most of your personal data. However, we retain transaction history, chat logs and basic identification data for up to 10 years to comply with legal obligations (accounting, tax law) and to protect against legal claims (dispute resolution, fraud prevention).

6. Your rights under the GDPR

As a user, you have extensive rights over your personal data:

• Right of access: you can request a copy of all the personal data we hold about you.
• Right to rectification: if your data is inaccurate, you can correct it in the app or ask us to correct it.
• Right to erasure (right to be forgotten): you can ask us to delete your account and data. We will comply with your request unless a legal obligation prevents us from doing so (e.g. an ongoing transaction or investigation).
• Right to data portability: you can obtain your data in a machine-readable format.
• Right to object: you can object to the processing of your data based on our legitimate interest.

To exercise any of these rights, contact us at: info@batner.com.

7. Right to lodge a complaint

If you believe we are handling your data unlawfully, you have the right to lodge a complaint with your local data protection authority. In the Czech Republic, this is the Office for Personal Data Protection (ÚOOÚ), Pplk. Sochora 27, 170 00 Praha 7 (www.uoou.cz).

8. Changes to this policy

We reserve the right to update this privacy policy. We will let you know about any material changes via an in-app notification or by email.

9. Controller details

• Name: Bc. Tomáš Vass
• Registered address: J. Božana 3135, 738 01 Frýdek-Místek, Czech Republic
• Company ID (IČO): 88656403
• Contact email: info@batner.com