{"id":1009,"date":"2026-03-17T20:31:54","date_gmt":"2026-03-17T20:31:54","guid":{"rendered":"https:\/\/heymaya.eu\/?page_id=1009"},"modified":"2026-10-19T09:21:11","modified_gmt":"2026-10-19T09:21:11","slug":"datenschutzrichtlinie","status":"publish","type":"page","link":"https:\/\/heymaya.eu\/index.php\/de\/datenschutzrichtlinie\/","title":{"rendered":"Datenschutzerkl\u00e4rung (EN)"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"1009\" class=\"elementor elementor-1009\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-b416d1f elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"b416d1f\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-8f8f9f3\" data-id=\"8f8f9f3\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-de7e898 elementor-widget elementor-widget-heading\" data-id=\"de7e898\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.0 - 29-03-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\"><br>Privacy policy<br><\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f7864db elementor-widget elementor-widget-text-editor\" data-id=\"f7864db\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.0 - 29-03-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\tEffective from 1 December 2026<ol>\n \t<li><strong> Data controller<\/strong><\/li>\n<\/ol>\n<ol>\n \t<li style=\"list-style-type: none;\">The controller of personal data is\n<strong>Dariusz Rys<\/strong>, 62-510 Konin, ul. Chopina 10\/3, e-mail: <strong>maya@heymaya.eu<\/strong>. You can write to this address about any matter concerning personal data.<\/li>\n<\/ol>\n<ol start=\"2\">\n \t<li><strong> In short<\/strong><\/li>\n<\/ol>\n<ul>\n \t<li>Apiary data are stored <strong>on the phone<\/strong>. They reach the server only when you use the cloud backup or team work.<\/li>\n \t<li><strong>Your voice never leaves the phone.<\/strong> Speech recognition runs on the device, without the internet. Recordings of dictated notes are stored only on the phone and deleted after 7 days.<\/li>\n \t<li>The app <strong>contains no ads<\/strong> and no analytics tools, and does not track you.<\/li>\n \t<li>Data are not sold or used for profiling.<\/li>\n<\/ul>\n<ol start=\"3\">\n \t<li><strong> What data, for what purpose and on what legal basis<\/strong><\/li>\n<\/ol>\n<ol>\n \t<li><strong>Account and activation<\/strong> \u2013 e-mail address, activation code, device name and type (e.g. the phone name given by its owner), app version, language, activation date, device token. Purpose: creating the Account, sending the activation code, recognising the device, notifying about new app versions. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/li>\n \t<li><strong>Cloud backup<\/strong> \u2013 data entered into the app: apiaries (with the location entered by the user), hives, inspections, frames, queens, feeding, treatments, harvests, notes, purchases, sales, photos, custom hive types. Purpose: storing the backup and restoring it. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/li>\n \t<li><strong>Team work<\/strong> \u2013 e-mail addresses of the Database owner and Workers, invitation status, assigned apiaries and permissions, data entered by a Worker in the owner\u2019s database. We send the invited person an invitation e-mail containing the owner\u2019s e-mail address, and send the owner a notice that the invitation was accepted. Purpose: providing team work. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).<\/li>\n \t<li><strong>Subscription<\/strong> \u2013 the Account identifier in the payment system (in the form \u201chb_\u201d plus the Account number), Subscription status, its end date, the Store and product name, information about cancellation or a payment problem. We do not receive card details or any other payment data \u2013 they are handled by the Store. Purpose: granting access to paid features, handling complaints. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and, for accounting, a legal obligation (Art. 6(1)(c) GDPR).<\/li>\n \t<li><strong>Security<\/strong> \u2013 IP address and the number of failed attempts to enter a code or to send a code e-mail in the last hour; server logs kept by the hosting provider. Purpose: protection against abuse and intrusion. Legal basis: the controller\u2019s legitimate interest (Art. 6(1)(f) GDPR).<\/li>\n \t<li><strong>Contact<\/strong> \u2013 data from e-mail correspondence. Purpose: answering questions and complaints. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).<\/li>\n \t<li><b>Service messages<\/b> \u2013 Account e-mail address, language. Purpose: informing about changes to the Terms and this policy, to the price and scope of the services, about the end of the free period and about Account security. Legal basis: performance of the contract (Art. 6(1)(b) GDPR).<\/li>\n \t<li><b>News about the app (newsletter)<\/b> \u2013 Account e-mail address, language, date and method of giving consent. Purpose: sending information about new features and offers. Legal basis: consent (Art. 6(1)(a) GDPR and Art. 398 of the Polish Electronic Communications Law). Consent may be withdrawn at any time; withdrawal does not affect the lawfulness of messages sent before it.<\/li>\n<\/ol>\n<ol>Providing an e-mail address is voluntary, but the app cannot be activated without it. Other data are provided at your discretion \u2013 the app works without the cloud backup and without team work.<\/ol>\n<ol start=\"4\">\n \t<li><strong> Data stored only on the phone<\/strong><\/li>\n<\/ol>\n<ol>Without sending anything to the server, the app stores: recordings of dictated notes (7 days), settings, and all apiary data until a cloud backup is made. The app asks only for the permissions it needs:<\/ol>\n<ul>\n \t<li><strong>microphone<\/strong> \u2013 voice control and dictating notes (speech recognised on the device);<\/li>\n \t<li><strong>camera and photos<\/strong> \u2013 attaching photos to hives;<\/li>\n \t<li><strong>NFC<\/strong> \u2013 reading NFC tags on hives;<\/li>\n \t<li><strong>notifications<\/strong> \u2013 reminders set by the user (created on the phone, without a push notification server).<\/li>\n<\/ul>\n<ol>The app does not read the phone\u2019s location (GPS). The user enters the apiary location or picks it on the map.<\/ol>\n<ol start=\"5\">\n \t<li><strong> Recipients of data<\/strong><\/li>\n<\/ol>\n<ol>\n \t<li><strong>Hosting provider<\/strong> of the server and e-mail: cyber_Folks S.A \u2013 stores Account data and cloud backups and sends e-mails, under a data processing agreement.<\/li>\n \t<li><strong>RevenueCat, Inc.<\/strong> (USA) \u2013 Subscription handling: Account identifier, purchase history from the Store, device identifiers assigned by the Store, IP address. The transfer to the USA is based on the standard contractual clauses approved by the European Commission.<\/li>\n \t<li><strong>Apple<\/strong> and <strong>Google<\/strong> \u2013 as Stores, they process data related to downloading the app and payments as independent controllers, under their own privacy policies.<\/li>\n \t<li><strong>OpenWeather Ltd<\/strong> (United Kingdom) \u2013 weather forecast: we send the town name or the coordinates of the apiary and \u2013 as with any connection \u2013 the IP address. The United Kingdom is covered by a European Commission adequacy decision.<\/li>\n \t<li><strong>OpenStreetMap Foundation<\/strong> (United Kingdom) \u2013 map tiles when the apiary map is displayed: IP address and the map area viewed.<\/li>\n \t<li><strong>Alpha Cephei<\/strong> (alphacephei.com) \u2013 one-time download of the speech recognition model: IP address. No voice is sent there.<\/li>\n \t<li>In team work, a Worker\u2019s data (e-mail address, entries made) are visible to the Database owner, and the owner\u2019s database is visible to the Worker within the permissions granted.<\/li>\n \t<li>Public authorities \u2013 only where required by law.<\/li>\n<\/ol>\n<ol start=\"6\">\n \t<li><strong> How long we keep data<\/strong><\/li>\n<\/ol>\n<ul>\n \t<li>Account data \u2013 until the Account is deleted.<\/li>\n \t<li>Consent to news about the app \u2013 until it is withdrawn or the Account is deleted; proof of giving and withdrawing consent \u2013 until the limitation period for possible claims expires.<\/li>\n \t<li>Cloud backup \u2013 until the user deletes it in the app (\u201cDeleting cloud backup\u201d in Settings \u2192 Data management) or until the Account is deleted.<\/li>\n \t<li>Team work invitations \u2013 7 days if not accepted; the owner\u2013Worker link \u2013 until either party removes it.<\/li>\n \t<li>Device token \u2013 expires after 365 days of non-use.<\/li>\n \t<li>Subscription status \u2013 until the Account is deleted; data needed for tax purposes \u2013 for the period required by law (usually 5 years from the end of the tax year).<\/li>\n \t<li>Attempt counters with IP addresses \u2013 overwritten every hour; server logs \u2013 under the hosting provider\u2019s rules.<\/li>\n \t<li>Correspondence \u2013 until the matter is closed and then until any claims become time-barred.<\/li>\n<\/ul>\n<ol start=\"7\">\n \t<li><strong> Your rights<\/strong><\/li>\n<\/ol>\n<ol>\n \t<li style=\"list-style-type: none;\">\n<ol>You have the right to access your data, to rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. Just write to<\/ol>\n<\/li>\n<\/ol>\n<strong>maya@heymaya.eu<\/strong>\n<ol>from the Account e-mail address. We reply within one month.<\/ol>\n<strong>Deleting the Account and data:<\/strong>\n<ol>\n \t<li style=\"list-style-type: none;\">\n<ol>you can delete the cloud backup yourself in the app; the whole Account can be deleted with the \u201cDelete account\u201d button in the app (About app \u2192 Delete account) or on request sent to maya@heymaya.eu. The server then permanently deletes the Account, the cloud backup with photos (including earlier archived copies), apiary locations, hive types, team work links, device tokens and the stored Subscription status, and the customer data in RevenueCat. The apiary data on the phone remain. Deleting the Account does not cancel the Subscription in the Store \u2013 it must be cancelled in the Store settings.<\/ol>\n<\/li>\n<\/ol>\nYou have the right to lodge a complaint with the President of the Personal Data Protection Office in Poland (Prezes Urz\u0119du Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl) or with the supervisory authority in your country of residence.\n<ol start=\"8\">\n \t<li><strong> Children<\/strong><\/li>\n<\/ol>\n<ol>The app is not directed at children under 16, and we do not knowingly collect their data.<\/ol>\n<ol start=\"9\">\n \t<li><strong> Security<\/strong><\/li>\n<\/ol>\n<ol>Connections to the server are encrypted (HTTPS). Access to data on the server requires a device token or an activation code, and the number of failed attempts is limited. A Worker has access only to the apiaries and parts of data granted by the owner.<\/ol>\n<ol start=\"10\">\n \t<li><strong> Changes to this policy<\/strong><\/li>\n<\/ol>\n<ol>We will inform you of significant changes to this policy in the app or by e-mail. The current version is always available on heymaya.eu.<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy policy Effective from 1 December 2026 Data controller The controller of personal data is Dariusz Rys, 62-510 Konin, ul. Chopina 10\/3, e-mail: maya@heymaya.eu. You can write to this address about any matter concerning personal data. In short Apiary data are stored on the phone. They reach the server only when you use the cloud &hellip;<\/p>\n<p class=\"read-more\"> <a class=\"\" href=\"https:\/\/heymaya.eu\/index.php\/de\/datenschutzrichtlinie\/\"> <span class=\"screen-reader-text\">Datenschutzerkl\u00e4rung (EN)<\/span> Read More &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"site-sidebar-layout":"no-sidebar","site-content-layout":"page-builder","ast-global-header-display":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"disabled","ast-breadcrumbs-content":"","ast-featured-img":"disabled","footer-sml-layout":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","footnotes":""},"class_list":["post-1009","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/pages\/1009","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/comments?post=1009"}],"version-history":[{"count":25,"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/pages\/1009\/revisions"}],"predecessor-version":[{"id":2130,"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/pages\/1009\/revisions\/2130"}],"wp:attachment":[{"href":"https:\/\/heymaya.eu\/index.php\/wp-json\/wp\/v2\/media?parent=1009"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}