Privacy Policy

• Data Controller: Borislav Radoslavov Nachev
• Address: Sofia, Bulgaria
• Contact Email: borislav.r.nachev@gmail.com

For any questions relating to the processing of personal data or the exercise of rights under the GDPR, Users may contact the Data Controller using the email address provided above.

A. Data Required for Registration and Account Use When creating and using an account within the Application, the following data may be collected Email Address – used solely for technical and administrative purposes, including:

• account registration and login;registration confirmation;password recovery;
• communications related to account security and functionality.

The email address is not publicly visible to other Users.

Username and Display Name – these details are publicly displayed within the Application in connection with content published by the User, including photos, participation in categories, and voting activities.

Country and Time Zone – may be determined automatically through the User’s IP address, language settings, or device settings for the purposes of:

• ensuring the proper functioning of the Application;
• organizing categories and voting activities;
• improving the overall user experience.

B. Uploading Multimedia Content (Photos/Videos)

Users may voluntarily upload photos and other visual content to categories within the Application.

Uploaded content becomes publicly accessible to other Users of the Application and may be viewed, rated, commented on, or otherwise interacted with in accordance with the platform’s functionalities.

The User is solely responsible for the content they publish, including obtaining any necessary rights, permissions, and consents from individuals depicted in photos or videos, or from persons involved in the creation of such content.

Users are strongly advised not to publish sensitive personal data or information that could lead to identification, misuse, or infringement of the rights of third parties. The User who publishes such information bears full responsibility for any consequences arising from its publication.

C. Optional Information Provided by Users

Users may, at their own discretion, add additional contact information to their public profile, including:

• website links;
• telephone numbers;
• additional email addresses;
• social media profiles; or
• other contact details.

Such information is provided voluntarily and becomes publicly visible to other Users of the Application.

By providing such information, the User understands and accepts that it may be used by other Users to establish contact outside the “MyViral” Application.

Users’ personal data is processed on the following legal bases pursuant to Regulation (EU) 2016/679 (GDPR):

• performance of a contract – for the provision of the Application’s functionalities in accordance with the Terms of Use;
• the User’s explicit consent – where the User voluntarily provides additional information or publishes content;
• legitimate interests – for ensuring the security, proper operation, maintenance, and improvement of the Application.

The collected data is used for the following purposes:

• creating and managing user accounts;
• enabling participation in categories, content publication, and voting activities;
• facilitating communication and social interaction between Users;
• maintaining security and preventing abuse, fraud, and unauthorized activities;
• improving the functionality and overall user experience of the Application.

Publicly Available Information

The following information may be publicly visible to other Users of the Application:

• username and display name;
• uploaded photos and published content;
• additional contact information voluntarily provided by the User (such as telephone numbers, website links, email addresses, or social media profiles).

Users are solely responsible for the information they choose to make publicly available through the Application.

Sharing with Third Parties

The Data Controller does not sell, rent, lease, or otherwise disclose personal data to third parties for marketing or advertising purposes.

Personal data may be shared with:

• technical service providers involved in the hosting, storage, maintenance, and operation of the Application;
• competent public authorities where disclosure is required by applicable law.

Any third party processing personal data on behalf of the Data Controller is required to implement appropriate safeguards and maintain the confidentiality and security of such data.

Data Security

The Data Controller implements appropriate technical and organizational measures to protect personal data against:

• unauthorized access;
• loss;
• unlawful disclosure;
• alteration or destruction.

Personal data is stored on secure servers, and access is restricted to individuals who require such access for the performance of their duties.

Users’ personal data is retained only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law.

Active User Accounts

Data associated with a user account (including email address, username, account settings, and uploaded content) is retained for as long as the account remains active.

Uploaded photos and published content remain visible within the Application until:

• they are deleted by the User; or
• the user account is deleted.

Account Deletion

Upon a request to delete an account:

• publicly visible content and photos are removed from the Application’s systems;
• personal data is deleted or anonymized within up to 100 days, unless its retention is necessary:
• * to comply with a legal obligation;
• * to protect the legitimate interests of the Data Controller;
• * to prevent abuse, fraud, or violations of the Terms of Use.

Backups and Technical Archives

Certain data may remain temporarily available in secure backup copies for a limited period necessary to ensure technical security, system recovery, and the prevention of data loss. Access to such backups is strictly restricted.

Right to Erasure

Users have the right, at any time, to request the deletion of their personal data in accordance with applicable law and the provisions of Regulation (EU) 2016/679 (GDPR).

Pursuant to Regulation (EU) 2016/679 (GDPR), Users have the following rights regarding their personal data

Right of Access – to obtain information on whether personal data concerning them is being processed, and to receive a copy of such data;

Right to Rectification – to request the correction of inaccurate or incomplete personal data;

Right to be Forgotten (Right to Erasure) – to request the deletion of their personal data and published content where the conditions under the GDPR are met;

Right to Restriction of Processing – to request the temporary restriction of the processing of their personal data under certain circumstances;

Right to Object – to object to the processing of personal data where such processing is based on legitimate interests;

Right to Data Portability – to receive their personal data in a structured, commonly used, and machine-readable format, where technically feasible;

Right to Withdraw Consent – where processing is based on consent, the User may withdraw such consent at any time, without affecting the lawfulness of processing carried out prior to withdrawal.

Users may exercise their rights:

• through the account settings functionality within the Application; or
• by submitting a request to the Data Controller via the contact email address provided above.

The Data Controller shall review and respond to such requests within the time limits provided under applicable law.

If the User believes that their rights have been infringed, they have the right to lodge a complaint with the competent supervisory authority, namely the Commission for Personal Data Protection, or with the supervisory authority in the EU Member State of their habitual residence, place of work, or place of the alleged infringement.

Users bear full responsibility for any content they publish, upload, or share through the Application, including photos, videos, texts, comments, and contact details.

By publishing content, the User represents and warrants that:

• they hold the necessary rights to use and publish such content; or
• they have obtained the necessary consent from individuals depicted or otherwise affected by it.

It is prohibited to publish content that:

• violates applicable law;infringes the rights of third parties, including privacy rights, copyright, or other intellectual property rights;contains offensive, discriminatory, pornographic, misleading, or unlawful material;contains personal data of third parties without their knowledge or consent.

The Data Controller shall not be held liable for:

• content published by Users;
• the accuracy, quality, or lawfulness of user-generated content;
• interactions and communications between Users, including contacts made through voluntarily shared contact information;
• any damages or adverse consequences arising from user-generated content or interactions between Users.

The Data Controller reserves the right, but not the obligation, to remove content that, in its sole discretion, violates this Privacy Policy, the Terms of Use, or applicable law, as well as to restrict or terminate User access in case of confirmed violations.

For questions, communication, or data deletion requests: support@myviral.com