Privacy Policy

This privacy policy informs you about the processing of your personal data and your legal rights in this regard. We reserve the right to update this privacy policy from time to time, in particular due to further development of the platform, changes to our processing activities or service providers, the use of new technologies, or changes in applicable law or legal requirements.

This privacy policy applies to paradisa.com and the related platform services and pages including accounts, waitlists, content access, subscriptions, payments and communications with us. It does not apply to websites or services operated independently by third parties that may be linked from or accessible through the platform. Their processing of personal data is governed by their own privacy information.

The following party is known as the controller under data protection law and therefore responsible for the processing of personal data described in this privacy policy:

SIA YCA

Registration No. 40203533072

Šarlotes iela 18A - 3 LV-1001

Riga, Latvia

legal@paradisa.com

Questions about data protection:

If you have any questions about data protection with regard to our company or our website, you can contact us using the contact details provided under “Controller”.

Under the GDPR and subject to applicable conditions and exceptions, you may have rights to access, correct, delete or restrict the processing of your personal data, and to data portability. Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing before withdrawal.

Some rights may not apply in all circumstances. For example, deletion may not apply to information that we are legally required to retain.

You may exercise your rights by contacting legal@paradisa.com. We may request information necessary to verify your identity and will handle requests in accordance with applicable law.

You may also lodge a complaint with a competent data protection supervisory authority, including the Latvian Data State Inspectorate (Datu valsts inspekcija).

Where we process personal data on the basis of our legitimate interests, you may object to that processing on grounds relating to your particular situation by contacting legal@paradisa.com. We may continue the processing where permitted by applicable law, including where we have compelling legitimate grounds or where processing is necessary to establish, exercise or defend legal claims.

You may object at any time to the processing of your personal data for direct marketing purposes, including by using the unsubscribe method provided in marketing communications or by contacting legal@paradisa.com.

You can visit the publicly accessible parts of the website without creating an account. When you access the website, we and our technical service providers process connection, device and request information, such as IP address, browser and operating-system information, language settings, requested pages, referring pages, access times, response status and data-transfer information.

This processing is necessary to deliver the website, maintain its functionality, investigate technical problems and protect its integrity and security. We process this data on the basis of our legitimate interests in the reliable and secure operation of the website and prevention of misuse. Additional processing associated with particular features is described below. Retention is explained under "Retention of personal data".

When you use the website, cookies and similar technologies may store information on your device or access information already stored there, including through browser storage, authentication technologies and embedded components.

Where required by law, we obtain consent before using such technologies. Consent is not required where the storage or access is necessary to provide a service you have requested or to transmit communications. Where personal data is also processed, the legal bases described in this privacy policy apply.

Technically necessary device information

We use technologies that are necessary to provide features you request, including authentication and secure sessions, account and verification processes, access controls, payments, content delivery, and certain security or abuse-prevention functions.

These technologies are used for as long as needed for their function. Restricting or deleting browser storage may prevent some features from working correctly.

Technically non-essential device information and consent choices

Where we use technologies that require consent to store information on or access information from your device, we will obtain your consent before using them. You may refuse or withdraw consent through the controls made available to you. Refusing or withdrawing consent will not affect features that do not depend on those technologies.

When you contact us, including by email or through another communication channel made available by us, we process the information you provide and related communication information in order to respond to your request, provide support, manage our relationship with you and, where necessary, establish, exercise or defend legal claims.

Depending on the context, this processing is based on steps taken at your request before entering into a contract, performance of our contract with you, our legitimate interests in communicating with users and managing enquiries, or compliance with legal obligations.

Creator waitlist and applications

If you join a creator waitlist or submit an application for creator access, we process the information you provide, such as your contact details, social-media or portfolio links and other information submitted with your application. We may also process relevant information available through profiles, portfolios or other sources you provide or make publicly available.

We use this information to manage creator interest and applications, assess potential access to the platform, communicate with you and protect the application process against misuse. Depending on the circumstances, this processing is based on steps taken at your request before entering into a contract and/or our legitimate interests in managing creator applications and future platform access.

Where information is identified as required for an application, we need that information to process and assess the application. If you do not provide it, we may be unable to consider your application.

User waitlist and access

Where access to the platform is subject to a waitlist, approval process or other staged-access process, we process information relating to your registration, account and access status, together with information you choose to provide, in order to manage access to the platform and communicate with you about it.

This processing is based on steps taken at your request before entering into a contract, performance of our contract with you and, where applicable, our legitimate interests in managing access to and the operation of the platform.

Registration and account

When you register for or use an account, we process information such as your email address, authentication information, username, avatar, account and access status, age confirmation, records relating to acceptance of applicable terms and acknowledgement of privacy policy, technical information such as IP address, and other information you provide through your account.

We use this information to create, authenticate and administer your account, provide the platform and its features, communicate with you about the service, manage access and protect accounts and the platform against misuse.

Processing necessary to provide and administer your account is based on performance of our contract with you or steps taken at your request before entering into a contract. Processing for security, fraud prevention and protection of the platform may also be based on our legitimate interests.

Where information is identified as required for registration, authentication or use of a requested account feature, we need that information to provide the relevant account, access or feature. If you do not provide it, we may be unable to provide the relevant service.

Public profile and interactions

Certain information associated with your use of platform features, such as your username, avatar and comments, may be visible to other users who have access to the relevant part of the platform or content.

We process this information in order to provide the relevant platform features and perform our contract with you.

Platform activity and usage data

We process information about your use of and interactions with the platform, including account activity, feature usage, content access and viewing activity, subscriptions, purchases, tips, access entitlements, transactions, interactions with other users and creators, account or moderation status, and other platform events.

We use this information to operate and secure the service, provide requested features and access, administer transactions and subscriptions, understand how the platform is used, troubleshoot issues and improve our services.

Depending on the purpose, this processing is based on performance of our contract with you or our legitimate interests in operating, securing, analysing and improving the platform.

Payments and fraud prevention

When you make a payment or initiate a paid transaction, we and our payment service providers process payment and transaction information in order to process and authenticate the transaction, manage subscriptions or purchases, prevent fraud and maintain payment security. This may include billing and contact details, payment-method information, transaction records, and information needed for invoicing and tax compliance. Available payment methods may vary and are shown during checkout.

Payment information required during checkout must be provided to the relevant payment provider in order to complete the transaction. If the required information is not provided, the transaction cannot be completed.

We receive information necessary to administer the transaction, such as payment and subscription status and related transaction information.

Processing necessary to complete and administer a payment is based on performance of our contract with you. Processing for fraud prevention and payment security may also be based on our legitimate interests in protecting transactions, users and the platform, and certain information may be processed or retained where required by law.

Third-party sign-in

If you choose to register or sign in using an account provided by a third-party authentication provider, the provider sends us information required to authenticate you and connect the sign-in method to your account. This may include an account identifier, email address, email-verification status and basic profile information made available by the provider.

We process the information needed to provide the sign-in method, create or authenticate your account and protect the login process. This processing is based on steps taken at your request before entering into a contract or performance of our contract with you.

The third-party provider may also process information in connection with your use of its own service in accordance with its applicable privacy information.

We use third parties to support the operation and provision of the platform. Depending on the services used, recipients of personal data may include providers of:

hosting, cloud infrastructure and data storage; software development, maintenance and IT support; content delivery and video processing; authentication and account services; payment processing and fraud prevention; email and communications; security and abuse prevention; analytics and audience measurement; application monitoring and technical diagnostics; and professional, legal, accounting or other support services.

We may also disclose personal data where required by law, regulation, legal process or a competent authority; where necessary to establish, exercise or defend legal claims; or in connection with a corporate transaction such as a merger, acquisition, restructuring or sale of all or part of our business or assets.

Some recipients may process personal data as independent controllers for certain purposes, in which case their processing is governed by their own privacy information.

We process technical, diagnostic and security information where necessary to identify and resolve errors, protect accounts and the platform, detect and prevent bots, spam, fraud and other misuse, investigate incidents and maintain the reliability and security of our services.

Depending on the relevant feature, this information may include IP address, browser or device information, request and error information, security signals, interaction information and account identifiers.

This processing is based on our legitimate interests in maintaining the security, reliability and integrity of the platform and preventing misuse.

Where these functions involve storing information on or accessing information from a user's device, the rules described above under “Device information” apply separately.

We use audience-measurement and analytics tools to understand how the platform is used, measure usage and performance, identify areas for improvement and improve our services.

Where such tools are configured and used in a manner that does not require consent under applicable law, we rely on our legitimate interests in analysing and improving the platform to the extent personal data is processed.

Where an analytics or similar technology requires consent under applicable law, we will obtain that consent before using it.

Where we send marketing or promotional communications, we process the contact information necessary to send and manage those communications.

We send such communications only where permitted by applicable law, including on the basis of consent where consent is required. If we send marketing communications, you may opt out at any time and free of charge using the unsubscribe method provided in the communication or by contacting us.

Service-related communications, such as account, security, transaction or other operational messages, are not marketing communications and may continue where necessary to provide the service or comply with our obligations.

Some of the service providers and other recipients we use may process personal data outside the European Economic Area.

Where personal data is transferred to a country outside the European Economic Area, we use a transfer mechanism permitted by applicable data-protection law, such as an adequacy decision of the European Commission or appropriate safeguards, including standard contractual clauses, where required.

You may contact us for further information about the safeguards applicable to relevant international transfers and, where applicable, how to obtain a copy of them.

We retain personal data for no longer than necessary for the purposes for which it was collected or otherwise processed, including to provide and administer the platform, maintain account and transaction records, protect the platform and users, prevent and investigate fraud or misuse, resolve disputes, establish or defend legal claims and comply with legal obligations.

The applicable retention period depends on factors including the nature of the information, the purpose for which it is processed, the status of any account, registration, waitlist entry, application, transaction or other relationship, applicable limitation periods, security and fraud-prevention requirements and mandatory legal retention periods.

We may retain limited information after an account is closed or deleted where necessary for legal compliance, accounting and tax requirements, fraud and abuse prevention, dispute resolution, enforcement of our agreements or legal claims.

Accounting, invoice and other transaction records are retained for the periods required by applicable law, including generally at least five years for relevant transaction and tax-invoice records, with longer periods applying where required by law.

Where personal data is no longer required, we delete or anonymise it, unless continued retention is required or permitted by law.