Privacy Policy

1. Introduction

This Privacy Policy explains how Logobaker ("we", "us", or "our"), operating the website https://logobaker.pro (the "Service"), collects, uses, stores, and protects your personal data. It applies to all visitors and users of our Service.

We are committed to protecting your privacy in compliance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the ePrivacy Directive 2002/58/EC, and other applicable data protection laws.

By using our Service, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described herein, please discontinue use of the Service.

2. Data Controller

The data controller responsible for your personal data is Logobaker. For any inquiries regarding data processing, you can reach us at:

3. Legal Basis for Processing

We process personal data only when we have a lawful basis to do so, in accordance with Article 6(1) GDPR:

• Consent (Art. 6(1)(a)): Where you have given explicit consent for a specific purpose (e.g. marketing emails, analytics cookies).
• Contract performance (Art. 6(1)(b)): Where processing is necessary to fulfil a contract with you or to take pre-contractual steps at your request (e.g. creating an account).
• Legitimate interest (Art. 6(1)(f)): Where processing is necessary for our legitimate interests, provided those interests are not overridden by your rights (e.g. fraud prevention, service improvement).
• Legal obligation (Art. 6(1)(c)): Where processing is necessary to comply with a legal obligation to which we are subject.

4. Personal Data We Collect

We may collect and process the following categories of personal data:

4.1 Data you provide directly

• Name and username
• Email address
• Profile information and avatar
• Content you upload (logos, comments, messages)

4.2 Data collected automatically

• IP address
• Browser type and version
• Operating system
• Pages visited, referring URLs, and navigation paths
• Date, time, and duration of your visit
• Device identifiers

4.3 Data from third parties

If you sign in via a third-party provider (e.g. Google), we may receive your name, email address, and profile picture in accordance with the permissions you grant.

5. Purpose of Processing

We use your personal data for the following purposes:

• To provide, operate, and maintain the Service
• To create and manage your user account
• To enable you to upload, comment on, and evaluate content
• To communicate with you regarding your account, support requests, or updates
• To analyse usage patterns and improve the Service (with your consent, where required)
• To detect, prevent, and address fraud or technical issues
• To comply with legal obligations

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies in accordance with the ePrivacy Directive. Cookies are small text files stored on your device when you visit our website.

6.1 Types of cookies we use

• Strictly necessary cookies: Essential for the Service to function (e.g. session management, authentication). These do not require consent.
• Analytics cookies: Help us understand how visitors interact with the Service (e.g. Google Analytics). Placed only with your explicit consent.
• Marketing cookies: Used to deliver relevant advertisements and track campaign effectiveness. Placed only with your explicit consent.

6.2 Managing your preferences

When you first visit our website, a cookie consent banner allows you to accept or reject non-essential cookies. You can change your preferences at any time via the cookie settings accessible in the website footer, or by adjusting your browser settings to block or delete cookies.

7. Data Sharing and Third-Party Processors

We do not sell your personal data. We may share it with trusted third-party service providers who assist us in operating the Service, subject to strict data processing agreements in accordance with Article 28 GDPR. These processors include:

• Hosting and infrastructure providers
• Analytics services (e.g. Google Analytics)
• Email delivery services
• Content delivery networks (CDNs)

These third parties are contractually obligated to process data only on our behalf and in compliance with applicable data protection legislation. They may not use your data for their own purposes.

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA). In such cases, we ensure that appropriate safeguards are in place, such as:

• EU Commission adequacy decisions (Art. 45 GDPR)
• Standard contractual clauses approved by the EU Commission (Art. 46(2)(c) GDPR)
• Other legally recognised transfer mechanisms

9. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account data: Retained for the duration of your account and deleted within 30 days of account closure, unless a longer retention period is required by law.
• Log data: Retained for up to 12 months for security and analytical purposes.
• Cookie consent records: Retained for up to 12 months as proof of consent.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction, in accordance with Article 32 GDPR. These measures include:

• Encryption of data in transit (TLS/SSL)
• Secure storage with access controls
• Regular security assessments and updates
• Employee training on data protection

However, no method of electronic transmission or storage is completely secure. While we strive to protect your data, we cannot guarantee absolute security.

11. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR. You may exercise these rights at any time by contacting us at support@logobaker.pro:

• Right of access (Art. 15): You have the right to request a copy of the personal data we hold about you.
• Right to rectification (Art. 16): You have the right to request correction of inaccurate or incomplete data.
• Right to erasure (Art. 17): You have the right to request deletion of your personal data ("right to be forgotten"), subject to legal exceptions.
• Right to restriction (Art. 18): You have the right to request that we limit processing of your data in certain circumstances.
• Right to data portability (Art. 20): You have the right to receive your data in a structured, commonly used, machine-readable format.
• Right to object (Art. 21): You have the right to object to processing based on legitimate interests or for direct marketing purposes.
• Right to withdraw consent (Art. 7(3)): Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of prior processing.

We will respond to your request within 30 days, as required by Article 12(3) GDPR. If we cannot fulfil your request, we will inform you of the reasons and your right to lodge a complaint with a supervisory authority.

12. Children's Privacy

Our Service is not directed to individuals under the age of 16 (or the applicable age of digital consent in your jurisdiction). We do not knowingly collect personal data from children. If we become aware that a child has provided personal data without appropriate parental consent, we will take steps to delete that data promptly. If you believe a child has submitted personal data to us, please contact us immediately.

13. Links to Third-Party Websites

Our Service may contain links to external websites that are not operated by us. We have no control over the content, privacy policies, or practices of these third-party sites. We strongly advise you to review the privacy policy of every site you visit. We assume no responsibility for the practices of linked websites.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. We will notify you of material changes by posting the updated policy on this page with a revised "Last updated" date. We encourage you to review this page periodically. Continued use of the Service after changes become effective constitutes your acceptance of the updated policy.

15. Supervisory Authority

If you believe that our processing of your personal data infringes data protection laws, you have the right to lodge a complaint with a supervisory authority, in particular in the EU Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

16. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us: