This privacy notice, describes how and why we might collect, store, use, and/or share ("process") your information when you use our services, such as when you:

• Visit our website at kolumbus.app, or any website under kolumbus domain
• Engage with us in other related ways, including any sales, marketing, or events

Questions or concerns? Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you still have any questions or concerns, please contact us at 55fozer55@gmail.com.

TABLE OF CONTENTS

1. GENERAL INFORMATION

This policy applies to the website operating at the url address: kolumbus.app
The website operator and personal data administrator is: Paweł Knot
Operator's e-mail contact address: 55fozer55@gmail.com
The Operator is the Administrator of your personal data in relation to the data providedvoluntarily on the Website.

The website uses personal data for the following purposes:

• To enable user-to-user communications
• To present your profile to other users
• To display user announcements
• To request feedback
• To identify usage trends
• To run an internet forum
• To support for inquiries via the form
• To present an offer or information
• To deliver targeted advertising to you
• To determine the effectiveness of our marketing and promotional campaigns

The website performs the functions of obtaining information about users and their behavior in the following way:

• Through data entered voluntarily in the forms, which are entered into the Operator's systems
• By saving cookie files in end devices

2. DATA PROTECTION METHODS

The places of logging in and entering personal data are protected in the transmission layer (SSL certificate). Thanks to this, personal data and login details entered on the website areencrypted on the user's computer and can only be read on the target server .

User passwords are stored hashed. The hash function works in one direction - it is not possible to reverse its operation, which is now the modern standard for storing user passwords.

3. THIRD-PARTY LOGINS PROTECTION METHODS

Our Services offer you the ability to register and log in using your third-party account details (like your Google or Apple logins). Where you choose to do this, we will receive certain profile information about you from your social media provider. The profile information we receive may vary depending on the social media provider concerned, but will often include your name, email address, friends list, and profile picture, as well as other information you choose to make public.

We will use the information we receiveonly for the purposes that are described in this privacy notice or that are otherwise made clear to you on the relevant Services. Please note that we do not control, and are not responsible for, other uses of your personal information by your third-party social media provider. We recommend that you review their privacy notice to understand how they collect, use, and share your personal information, and how you can set your privacy preferences on their sites and apps.

4. HOSTING

The website is hosted (technically maintained) on our homemade server.

5. YOUR RIGHTS AND HOW THE DATA IS USED

In some situations, the Administrator has the right to transfer your personal data to other recipients, if it is necessary to perform the contract concluded with you or to fulfill the obligations incumbent on the Administrator. This applies to such groups of recipients:

• Authorized employees and associates who use the data to achieve the purpose of the website
• Companies that provide marketing services to the Administrator

We will only keep your personal information for as long as it is necessary for the purposes set out in this privacy notice, unless a longer retention period is required or permitted by law (such as tax, accounting, or other legal requirements). With regard to marketing data, the data will not be processed for more than 3 years . You have the right to request from the Administrator:

• Access to personal data concerning you
• Rectifying them
• Deletion
• Processing restrictions
• Data transfer

You have the right to object to the processing of personal data in order to perform legally justified interests pursued by the Administrator, including profiling, however, the right to object will not be exercised if there are valid legitimate grounds for processing, interests, rights and freedoms superior to you, in particular establishing, pursuing or defending claims.

Providing personal data is voluntary, but necessary to operate the Website.

We may need to share your personal information in the following situations:

• Business Transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
• When we use Google Maps Platform APIs. We may share your information with certain Google Maps Platform APIs (e.g., Google Maps API, Places API). To find out more about Google's Privacy Policy, please refer to this link. We use certain Google Maps Platform APIs to retrieve certain information when you make location-specific requests.This includes: Location; and other similar information. We obtain and store on your device ("cache") your location. You may revoke your consent anytime by contacting us at the contact details provided at the end of this document. The Google Maps Platform APIs that we use store and access cookies and other information on your devices.
• Business Partners. We may share your information with our business partners to offer you certain products, services, or promotions.
• Other Users. When you share personal information (for example, by posting comments, contributions, or other content to the Services) or otherwise interact with public areas of the Services, such personal information may be viewed by all users and may be publicly made available outside the Services in perpetuity.

Actions may be taken in relation to you consisting in automated decision making, including profiling in order to provide services under the concluded contract and for the Administrator to conduct direct marketing.

Personal data is not transferred from third countries within the meaning of the provisions on the protection of personal data. This means that we do not send them outside the European Union.

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (e.g., consent) to use your personal information for a specific purpose. You can withdraw your consent at any time. Clickhere to learn more.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services
  • Develop and display personalized and relevant advertising content for our users
  • Analyze how our Services are used so we can improve them to engage and retain users
  • Support our marketing activities
  • Diagnose problems and/or prevent fraudulent activities
  • Understand how our users use our products and services so we can improve user experience
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.
• Vital Interests. We may process your information where we believe it is necessary to protect your vital interests or the vital interests of a third party, such as situations involving potential threats to the safety of any person.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (e.g., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (e.g. , implied consent). You can withdraw your consent at any time. Click here to learn more.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations

Withdrawing your consent

If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the email provided in GENERAL INFORMATION.

6. PRIVACY RIGHTS SPECIFIC FOR CALIFORNIA

California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us using the contact providedhere and include the email address associated with your account and a statement that you reside in California.

If you are under 18 years of age, reside in California, and have a registered account with Services, you have the right to request removal of unwanted data that you publicly post on the Services. To request removal of such data, please contact us using the contact providedhere and include the email address associated with your account and a statement that you reside in California. We will make sure the data is not publicly displayed on the Services, but please be aware that the data may not be completely or comprehensively removed from all our systems (e.g. backups, etc.).

CCPA Privacy Notice

The California Code of Regulations defines a "resident" as:

• every individual who is in the State of California for other than a temporary or transitory purpose and
• every individual who is domiciled in the State of California who is outside the State of California for a temporary or transitory purpose

All other individuals are defined as "non-residents."

If this definition of "resident" applies to you, we must adhere to certain rights and obligations regarding your personal information.

We have collected the following categories of personal information in the past twelve (12) months:

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels
• Participation in customer surveys or contests and
• Facilitation in the delivery of our Services and to respond to your inquiries

We may disclose your personal information with our service providers pursuant to a written contract between us and each service provider. Each service provider is a for-profit entity that processes the information on our behalf.

We may use your personal information for our own business purposes, such as for undertaking internal research for technological development and demonstration.

You can designate an authorized agent to make a request under the CCPA on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with the CCPA.

7. YOUR RIGHTS TO YOUR PERSONAL DATA

Right to request deletion of the data — Request to delete

You can ask for the deletion of your personal information. If you ask us to delete your personal information, we will respect your request and delete your personal information, subject to certain exceptions provided by law, such as (but not limited to) the exercise by another consumer of his or her right to free speech, our compliance requirements resulting from a legal obligation, or any processing that may be required to protect against illegal activities.

Right to be informed — Request to know

Depending on the circumstances, you have a right to know:

• Whether we collect and use your personal information
• The purposes for which the collected personal information is used
• Whether we sell your personal information to third parties
• In accordance with applicable law, we are not obligated to provide or delete consumer information that is de-identified in response to a consumer request or to re-identify individual data to verify a consumer request.

Right to Non-Discrimination for the Exercise of a Consumer's Privacy Rights

We will not discriminate against you if you exercise your privacy rights.

Verification process

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. These verification efforts require us to ask you to provide information so that we can match it with information you have previously provided us. For instance, depending on the type of request you submit, we may ask you to provide certain information so that we can match the information you provide with the information we already have on file, or we may contact you through a communication method (e.g. email) that you have previously provided to us. We may also use other verification methods as the circumstances dictate.

We will only use personal information provided in your request to verify your identity or authority to make the request. To the extent possible, we will avoid requesting additional information from you for the purposes of verification. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes. We will delete such additionally provided information as soon as we finish verifying you.

To exercise these rights, you can contact us by email at 55fozer55@gmail.com. If you have a complaint about how we handle your data, we would like to hear from you.

If you are using an authorized agent to exercise your right to opt out we may deny a request if the authorized agent does not submit proof that they have been validly authorized to act on your behalf.

8. INFORMATION IN FORMS

The website collects information provided voluntarily by the user, including personal data, if provided.

The website may save information about connection parameters (time stamp, IP address).

The data provided in the form is processed for the purpose resulting from the function of a specific form, e.g. to process a service request or registration, etc. Each time, the context and description of the form clearly informs what it is for.

9. ADMINISTRATOR LOGS

Information about the behavior of users on the website may be subject to logging. These data are used to administer the website.

10. ESSENTIAL MARKETING TECHNIQUES

The operator uses statistical analysis of website traffic through Google Analytics (Google Inc. based in the USA). The operator does not provide the operator of this service with personal data, but only anonymized information. The service is based on the use of cookies on the user's end device. In terms of information about user preferences collected by the Google advertising network, the user can view and edit information resulting from cookies using the tool: https://www.google.com/ads/preferences/

The operator uses a solution that examines the behavior of users by creating heat maps and recording behavior on the website. This information is anonymized before it is sent to the service operator so that he does not know which person it concerns. In particular, entered passwords and other personal data are not recorded.

11. INFORMATION ABOUT COOKIE FILES

The website uses cookies.

Cookie files are IT data, in particular text files, which are stored in the User's end deviceand are intended for using the Kolumbus websites. Cookies usually contain the name of the website they come from, their storage time on the end device and a unique number.

The entity placing cookies on the User's end device and accessing them is the Website operator.

Cookies are used for the following purposes:

• Maintaining the Website user's session (after logging in), thanks to which the user does not have to re-enter the login and password on each subpage of the Website
• to achieve the goals set out above in theESSENTIAL MARKETING TECHNIQUES

The Website uses two basic types of cookies: session cookies andpersistent cookies. Session cookies are temporary files that are stored on the User's end device until logging out, leaving the website or turning off web browser. Persistent cookies are stored on the User's end device for the time specified in the cookie file parameters or until they are deleted by the User.

The web browser usually allows cookies to be stored on the User's end device by default. The web browser allows you to delete cookies. It is also possible to automatically block cookies, detailed information on this subject can be found in the help or documentation of the web browser.

Restrictions on the use of cookies may affect some of the functionalities available on the Website.

Cookie files placed on the User's end device may also be used byentities cooperating with the Website operator, in particular the following companies: Google (Google Inc. based in the USA), Twitter (Twitter Inc. based in the USA).

12. MANAGING COOKIES

If you do not want to receive cookies, you can change your browser settings. We reserve that disabling cookies necessary for authentication processes, security, maintaining user preferences may make it difficult, and in extreme cases may prevent the use of websites.

In order to manage cookie settings, select the web browser you use from the list below and follow the instructions:

• Chrome
• Firefox
• Safari
• Opera
• Edge

Mobile devices:

• Android
• Safari (iOS)
• Windows phone