General Data Protection Regulation (GDPR) – Tarot Fans

Introduction Tarot Fans, operated by UNDICI MEDIA, is committed to protecting the personal data of its users and complying with the General Data Protection Regulation (GDPR) applicable in the European Union and internationally.

This section describes: • The types of personal data collected • Their processing and purpose • Your rights as a user

Types of Data Collected

2.1. Personal Data We collect the following data during your registration and use of the platform: • Identity: Full name, date of birth, profile picture (optional), language • Contact Information: Email address, phone number • Login Information: Credentials (email, password), IP address • Usage Data: Consultation history, Wallet transactions, usage preferences • Financial Information: Payment details (managed by the payment provider) • Technical Data: Device type, operating system, browser

2.2. Sensitive Data We do not collect sensitive data (health, ethnic origin, beliefs, etc.), unless you voluntarily provide it as part of your use of the platform.

Legal Bases for Processing

3.1. Performance of a Contract We process your personal data to perform the contract you agree to when registering and using Tarot Fans.

3.2. Consent Some data, particularly for marketing communications, is collected with your explicit consent, which you can withdraw at any time.

3.3. Legal Obligations We may process certain data to comply with legal obligations, such as: • Fraud prevention • Tax and financial regulations

3.4. Legitimate Interests We also process certain data for legitimate reasons, including: • Service improvement and user experience optimization • Platform security • Usage trend analysis

User Rights

You have the following rights regarding your personal data:

4.1. Right of Access You can request a copy of the personal information we hold.

4.2. Right to Rectification You can correct inaccurate or incomplete data.

4.3. Right to Erasure You can request the deletion of your data if it is no longer necessary or if you withdraw your consent.

4.4. Right to Restrict Processing You can restrict the processing of your data if you dispute its accuracy or in case of unlawful use.

4.5. Right to Data Portability You can receive your data in a structured, machine-readable format and transfer it to another provider.

4.6. Right to Object You can object to the processing of your data for legitimate reasons, including in cases of direct marketing.

4.7. Right to Withdraw Consent You can withdraw your consent at any time for data processing based on this basis.

To exercise your rights, contact: privacy@tarot-fans.com

Data Sharing with Third Parties

5.1. Subcontractors We share your data with trusted service providers: • Payment provider and Stripe: Payment management • Amazon Web Services (AWS): Data hosting

These partners are contractually required to respect the confidentiality of your data.

5.2. Legal Compliance We may disclose your data in response to legal or regulatory obligations.

Data Security

6.1. Security Measures We implement advanced protections: • Data encryption during storage and transmission • Restricted access controls to authorized personnel only • Regular security audits to detect and correct vulnerabilities

6.2. Payment Security All financial transactions are processed through the platform's payment provider and Stripe, which are PCI DSS compliant.

Data Retention Period

7.1. Data Retention We retain your data only as long as necessary, depending on the following purposes: • Platform usage: as long as your account is active • Legal obligations: retention period required by law • Potential disputes: until the dispute is resolved

Once this period has expired, the data is deleted or anonymized.

Cookies and Similar Technologies

8.1. Use of Cookies We use cookies to: • Optimize the user experience • Analyze platform traffic • Provide personalized advertisements

8.2. Cookie Management You can adjust your preferences through: • Your browser settings • Cookie settings on Tarot Fans

Disabling cookies may affect some platform features.

GDPR Modifications

9.1. Updates We may update this policy to reflect legal or technical changes.

9.2. Acceptance of Modifications By continuing to use Tarot Fans after an update, you accept the new terms.

We recommend that you check this section regularly.

GDPR-Related Contact Requests

For any questions or to exercise your rights, contact our Data Protection Officer: privacy@tarot-fans.com