NIGHTY.cz Privacy Policy

Effective from 6 September 2026

1. Data controller

The controller of personal data processed in connection with NIGHTY.cz is MeyDey Foodworks s.r.o.. Email: info@nighty.cz. Company ID: 21986193. VAT ID: CZ21986193. Registered office: Rybná 716/24, Staré Město, 110 00 Praha.

2. Data we may process

Depending on how you use NIGHTY, we may process:

• identification and contact details, such as a name or nickname, email, phone number and username;
• information needed for registration and account security;
• profile information, such as age, location, physical characteristics, descriptions, prices, availability, links and other voluntarily published information;
• photographs, videos and other uploaded content;
• platform usage information, IP addresses, technical logs, device identifiers and security records;
• support communications, content reports and complaints;
• ratings, reviews, comments, reactions and related activity history;
• information needed to verify age, identity or authority to manage a profile when such verification is requested.

NIGHTY does not perform facial recognition or biometric identification unless expressly stated otherwise on the platform.

3. Special categories of data

Some profile content may reveal information about sex life, sexual orientation or other special categories of personal data.

Users publish such information voluntarily. Where explicit consent is required, NIGHTY will request it separately and unambiguously.

Users may withdraw consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

4. Purposes and legal bases

Personal data may be processed for the following purposes:

Account and platform operation — account creation and management, profile publication, login and communication. The legal basis is performance of a contract or steps requested by the user before entering into one.

Publication of voluntarily supplied profiles and sensitive content — based on explicit user consent where required by law.

Security and prevention of misuse — protecting accounts and detecting spam, fraud, technical attacks and rule violations. The legal basis may be the operator's legitimate interest in secure operation and, where applicable, a legal obligation.

Content moderation, reports and legal requests — legal obligations and a legitimate interest in protecting users, third parties and the operator's rights.

Communication and support — answering questions, requests and complaints, based on contract performance, legitimate interests or legal obligations depending on the request.

Analytics and marketing — only within the scope and on the legal basis stated in the cookie banner and Cookie Policy. Non-essential cookies requiring consent do not run before consent is given.

5. Public profiles

Users acknowledge that information marked as public may be accessible to anyone online and indexed by search engines.

Do not publish information you do not want to be publicly available.

6. Recipients and processors

To the extent necessary, personal data may be made available to providers of technical infrastructure, hosting, security, email, analytics or other services needed to operate NIGHTY.

Data may be disclosed to public authorities where required by law or a binding decision.

The specific processors currently used should be recorded internally and, where they significantly affect users, identified in this policy or the relevant information interface.

7. Transfers outside the EEA

If a provider processes data outside the European Economic Area, NIGHTY will use an appropriate legal mechanism required by the GDPR, such as an adequacy decision or standard contractual clauses where relevant.

8. Retention

We retain data only for as long as necessary for its purpose:

• active-account information: for the lifetime of the account;
• public-profile information: while published and subsequently for a limited period needed for technical backups;
• security logs: for a reasonable period needed for security and incident handling;
• communications and complaints: for the time needed to resolve them and protect legal claims;
• data subject to statutory retention: for the period required by the relevant law.

Specific retention periods must correspond to the platform's actual technical settings.

9. Your rights

Subject to the conditions of the GDPR, you have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request erasure;
• request restriction of processing;
• object to processing based on legitimate interests;
• receive data in a portable format where the conditions are met;
• withdraw consent where processing is consent-based;
• complain to the Czech Office for Personal Data Protection.

Send requests to info@nighty.cz.

10. Third-party data

Users must not publish another person's personal data without an appropriate legal basis and necessary authorisation.

An agency, business or other person managing a profile on someone's behalf is responsible for having the necessary permission to use that person's data and content.

11. Security

NIGHTY takes appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse or alteration.

No internet system can be considered absolutely secure.

12. Policy changes

We may update this policy following changes to services, technologies or legal requirements. The current version will always be available on NIGHTY.cz.

Privacy enquiries: info@nighty.cz.