Privacy Policy

Last updated: December 19, 2025

1. Data Controller and Processor

The operator of the PinnyBinny service and the data controller is:

Jiří Horák
Company ID (IČO): 64754103
Place of business: Unhošť, Czech Republic
Contact email: support@pinnybinny.com

Regarding personal data contained in Board Content, PinnyBinny acts as a data processor. The User (e.g. teacher or school) acts as the data controller.

2. Scope of Processed Personal Data

Users

email address,
billing details (for paid plans),
technical login-related data (Magic Link).

Contributors (e.g. students)

IP address (used solely for security and abuse prevention),
technical metadata of posts,
post content (text, images, files).

Contributors are not required to create user accounts and are not asked to provide identifying personal data.

3. Purposes of Processing

operation and functionality of the Service,
security and abuse prevention,
billing and legal compliance.

4. Legal Basis

performance of a contract (Art. 6(1)(b) GDPR),
legal obligations (Art. 6(1)(c) GDPR),
legitimate interests (Art. 6(1)(f) GDPR),
instructions of the Controller for Board Content.

5. Data Retention

Personal data are stored for the duration of the user account or board existence. Boards can be deleted by the User at any time, resulting in immediate deletion of associated content, unless retention is required by law.

6. Subprocessors

The Operator uses only verified subprocessors located in the European Union. All service data is stored in data centres located in the Czech Republic (Prague).

hosting providers,
payment gateways (EU-based payment service provider – Mollie).

7. Data Subject Rights

access,
rectification,
erasure,
restriction,
data portability,
objection,
complaint with a supervisory authority.

Where PinnyBinny acts as a data processor, rights should be exercised via the data controller.

8. Data Security

Appropriate technical and organizational measures are in place to protect personal data.

9. Changes

This Privacy Policy may be amended. Changes take effect upon publication.

10. Cookies

Only essential technical cookies are used. No analytics or marketing cookies are present.