Privacy Policy

Effective as of 26th March 2026

PERSONAL DATA PROTECTION POLICY

I. BASIC INFORMATION

This personal data processing policy applies to visitors of the web interface located on the website available at the internet address www.pixeleast.com (hereinafter also referred to as the "marketplace").

The controller of personal data is:
Lootridge s.r.o., Reg. No. 24477907, Tax ID CZ24477907
with its registered office at Korunní 2569/108, Vinohrady, 101 00 Prague 10
registered with the Municipal Court in Prague, File No. C 441780
(hereinafter also referred to as the "controller").

As this is a marketplace, the controller of personal data may be the seller from whom the data subject purchased goods, a digital product, with the exception of goods that are premium features of the marketplace or other goods offered directly by the above-specified controller. In such a case, the controller under these terms in relation to the personal data processed within the order and on the basis of the performance of the contract shall mean the specific seller identified in the course of placing the order, who has concluded a data processing agreement with Lootridge s.r.o., Reg. No. 24477907, Tax ID CZ24477907, with its registered office at Korunní 2569/108, Vinohrady, 101 00 Prague 10, registered with the Municipal Court in Prague, File No. C 441780, which processes personal data on the seller's behalf. At the same time, in such a case, the company Lootridge s.r.o., Reg. No. 24477907, is itself the controller in relation to the other personal data.

The controller processes the personal data of three groups of users, namely:

  • ordinary visitors to the marketplace (hereinafter also referred to as "visitor"), who browse the content of the marketplace or create a user account on the marketplace;
  • visitors to the marketplace who purchase digital content from a creator through the marketplace, or purchase any digital content from the controller (hereinafter also referred to as "buyer");
  • creators who upload digital content intended for purchase on the marketplace (hereinafter also referred to as "creator")

(the visitor, buyer, and creator are collectively also referred to as the "data subject").

The controller has not appointed a data protection officer.

The controller does not intend to transfer personal data to a third country or an international organisation.

In the event that the controller receives any personal data not from the data subject but from a third party, this personal data protection policy shall also apply to such data.

II. PERSONAL DATA

The controller processes the personal data of the data subject, namely:

  • IP address,
  • date and time of access to the marketplace,
  • information about the internet browser of the data subject and its operating system and language,
  • information about the behaviour of the data subject on the marketplace, e.g. the link to the web page that the data subject first accessed, which pages of the marketplace were visited, how long the data subject stayed on them, and which digital content was viewed.
  • personal data entered when creating a user account and a creator user account and when completing the order form (in particular, username – nickname, profile picture and the so-called banner on the user profile, first name, surname, address, e-mail, telephone, domicile or registered office, links to social networks, etc.),
  • information about the content of the order and data entered in the course of placing the order (information about the purchased goods, quantity, e-mail, first name, surname etc.),
  • information about the payment made (information about the date and amount of payment of the purchase price, including information about the account from which the purchase price was paid. However, the controller does not hold or collect data about the payment card through which the visitor pays the purchase price of the goods.),
  • the content of all electronic communication between the controller and the visitor, including electronic addresses (e.g. the content of e-mail communication regarding the visitor's enquiries about goods, withdrawal from already concluded contracts),
  • the content of electronic communication conducted by the data subject on the marketplace and where such communication contains personal data (for example, reviews, ratings, posts on a discussion forum, if available, etc.),
  • in the case of the use of third-party service integrations (for example, Discord integration), also personal data related to such third-party service that are in any way uploaded to the marketplace or made part thereof (in the case of the Discord service, this includes Discord user ID, Discord username, Discord avatar URL, Discord email, OAuth access token, OAuth refresh token (stored), token expiration timestamp).

In the case of creators, the controller processes, in addition to the above, also:

  • personal data to the extent of the first name, surname, or business name, tax identification number, registered office, etc., if the creator is an entrepreneur, or other data related to tax obligations,
  • information about the digital content uploaded by the creator to the marketplace,
  • information about the course of the business relationship with the creator and the funds paid to the creator (information about the date and amount of payment, including information about accounts, payment instruments, and all payment data used for the purposes of paying remuneration),
  • the content of all electronic communication between the controller and the creator, including electronic addresses.

Personal data which:

  • are mandatorily required when placing an order on the marketplace (i.e. first name, surname, address, e-mail address)
  • and data mandatorily required when creating a creator account (i.e. personal data to the extent of the first name, surname, or business name, tax identification number, registered office, etc., if the creator is an entrepreneur, or other data related to tax obligations)

are contractually required and must be stated in the contract. If they are not provided, it is not possible to conclude the contract.

In the event that the controller is a seller of certain goods on the marketplace other than Lootridge s.r.o., Reg. No. 24477907, such controller processes only the following personal data:

  • IP address,
  • information about the content of the order and data entered in the course of placing the order (information about the purchased goods, quantity, e-mail, first name, surname, etc.),
  • information about the payment made (information about the date and amount of payment of the purchase price, including information about the account from which the purchase price was paid. However, the controller does not hold or collect data about the payment card through which the visitor pays the purchase price of the goods.).

These personal data are processed for the purpose of processing the order and delivering the goods. The legal basis for processing is the performance of the contract.

III. COOKIES

In addition to the above, the controller processes cookies. Cookies are short text files that the marketplace sends to the browser of the data subject. They enable the marketplace to record information about the visit in order to facilitate subsequent visits by the same data subject. Cookies enable a better and more convenient use of and visit to the marketplace, as user preferences and other settings are stored through them.

The controller may use the following cookies:

  • technical cookies used for the proper functionality of the marketplace, which are processed by the controller on the basis of legitimate interest;
  • session cookies are stored only temporarily during the browsing session and are deleted from the device of the data subject after closing the browser, enabling the optimisation of the data subject's activities on the marketplace, which are processed by the controller on the basis of legitimate interest;
  • persistent cookies, which are stored for a predetermined period and are not deleted after closing the browser. These are used to optimise the activity of the data subject in the case of repeated access to the marketplace. They enable the identification of the data subject's device and the customisation of the marketplace to the data subject's needs.

The data subject may manage the use of cookies through their browser. As a rule, it is possible to delete, block, or completely disable the use of cookies. If the data subject disables or restricts cookies, certain functions of the marketplace may not be available.

Cookies are also used for the personalisation of content and advertisements, the provision of social media features, and the analysis of marketplace traffic. The obtained information is shared by the controller with partners operating in the fields of advertising, analytics, and social media.

More information about cookies is provided in the relevant section of the marketplace.

IV. REASONS FOR COLLECTING AND PROCESSING PERSONAL DATA

The controller processes personal data for the following reasons:

a) fulfilment of the purpose of the marketplace

The controller primarily collects personal data for the purpose of fulfilling the commercial purpose, i.e. for the purpose of facilitating the conclusion of contracts between creators and buyers, and at the same time for the purpose of concluding contracts between creators and the controller. For this purpose, the controller must have data about the other party to the contract that enable the controller to fulfil its legal obligations, among other things.

b) communication with marketplace visitors and creators

The controller also collects and processes personal data when a data subject of the marketplace contacts the controller with an enquiry or comment that the controller is to respond to, or when the controller needs to communicate with the data subject for important reasons.

The controller strives to ensure that most communication between the contracting parties is conducted through the marketplace, while taking care to protect the communication and its content.

The controller also enables the option of submitting reviews and ratings, which are displayed on the marketplace.

c) ensuring the functionality of user accounts and creator accounts

The controller also collects and processes personal data in order to enable the functionality of user accounts and creator accounts, which are intended to facilitate the use of marketplace services by data subjects, the conclusion of a contract, and the exercise of rights and obligations under the concluded contract. The data subject has the option to modify the data provided within the user account and the creator account, while certain data are not mandatorily required and it is solely up to the data subject whether to provide such data.

d) optimisation of marketplace functionality

The controller also processes and collects personal information for the purpose of optimising the functionality of the entire marketplace. This includes data about the behaviour of the data subject on the marketplace and the content of their orders or transactions. The controller uses this data to offer relevant goods to a specific customer and to facilitate and enhance the user experience on the marketplace.

e) protection of the controller's rights

The controller also collects and processes information for the purpose of protecting its own rights and enforcing claims arising from legal relationships entered into by the controller and data subjects through the marketplace.

The controller may disclose or transfer the personal data of the data subject to third parties only to the extent necessary to ensure the operation of the marketplace, the performance of a contract concluded with the data subject, or the fulfilment of the controller's legal obligations.

Personal data may be transferred in particular to the following categories of recipients:

  • a) providers of IT services and technical infrastructure, in particular providers of hosting services, cloud services, server administration, analytical tools, communication tools, and other suppliers of technical solutions used for the operation of the marketplace;
  • b) providers of payment services and payment institutions that ensure the processing of payments made through the marketplace;
  • c) creators (sellers), to the extent necessary for the performance of a contract concluded between the buyer and the creator through the marketplace;
  • d) providers of accounting, tax, legal, and similar professional services, where necessary for the fulfilment of the controller's obligations or the protection of its rights and legitimate interests;
  • e) providers of third-party services whose services are integrated into the marketplace or through which the data subject uses certain functions of the marketplace (for example, services enabling login or linking of a user account);
  • f) public authorities, where the controller is obliged to disclose personal data pursuant to applicable legal regulations or on the basis of a binding decision of the relevant public authority.

V. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

The controller collects and processes personal data on the basis of:

a) conclusion and performance of a contract

The controller operates the marketplace for the purpose of:

  • concluding sales intermediation agreements with creators (or other similar agreements)
  • and concluding purchase agreements between creators and buyers, whereby the controller subsequently also arranges for the delivery of goods and handles complaints on behalf of and for the account of the creator.

In order for the controller to be able to conclude the above-specified contracts and subsequently fulfil its obligations under the concluded contracts, it is necessary for the controller to have the personal data of the data subjects.

For this reason, the controller collects and processes in particular:

  • first name and surname,
  • address,
  • e-mail address,
  • information about the content of the order,
  • information about the payment made,
  • information about the digital content uploaded by the creator to the website,
  • the content of all electronic communication between the controller and the creator, including electronic addresses, or between the controller and the visitor,
  • the content of all electronic communication between the controller and the buyer, including electronic addresses,
  • personal data to the extent of the tax identification number, registered office, etc., if the creator is an entrepreneur, or other data related to tax obligations,
  • information about the digital content uploaded by the creator to the marketplace,
  • information about the course of the business relationship with the creator and the funds paid to the creator (information about the date and amount of payment, including information about accounts, payment instruments, and all payment data used for the purposes of paying remuneration),
  • personal data entered when creating a user account and a creator user account and when completing the order form,
  • in the case of voluntary use of third-party service integrations by the data subject (for example, Discord integration), also personal data related to such third-party service that are in any way uploaded to the marketplace,
  • images uploaded by the data subject to the user account for the purpose of their publication (so-called profile pictures and user account banners).

b) legitimate interests of the controller

The controller operates the marketplace as part of its business activities, striving to make the marketplace user-friendly for visitors and to offer goods that will be of interest to the visitor.

The controller also collects and processes personal data for accounting and tax purposes, statistical purposes, displaying advertisements, the development and administration of the marketplace, fraud prevention, and ensuring the security of the marketplace and information.

For this reason, the controller collects and processes in particular:

  • IP address,
  • date and time of access to the marketplace,
  • information about the internet browser of the visitor and the creator and its operating system and language
  • information about the behaviour of the visitor on the marketplace,
  • cookies,
  • first name and surname,
  • address,
  • e-mail address,
  • information about the content of the order.

Personal data is processed both manually and by automated means.

For the avoidance of doubt, the controller states that it processes profile pictures and user account banners on the basis of an agreement with the user, whereby the user is entitled, but not obliged, to upload these types of images to the user account. If the user does so, the user does so freely and without any coercion. The controller recommends in the terms of use that such images should not contain any personal data. In case of doubt, the data subject provides consent in relation to the processing of this type of personal data.

VI. PERSONAL DATA RETENTION PERIOD

The controller processes personal data for the period strictly necessary to ensure the rights and obligations arising from the legal relationship, i.e. at least for the duration of the fulfilment of obligations under the concluded purchase contract.

The controller retains the personal data of the data subject for a maximum period of 10 years from the moment of conclusion of the contract, in the case of a one-off contract, from the moment of its termination, in the case of a contract concluded for a definite or indefinite period, or from the moment when the visitor left the marketplace without concluding a contract or creating a user account.

In the event that the visitor creates a user account, the personal data shall be retained until the cancellation of the user account, which the visitor is entitled to carry out at any time. In such a case, personal data shall be retained for a maximum period of 10 years from the cancellation of the user account.

If the controller is obliged to retain certain data for a period exceeding 10 years, where such obligation arises from generally binding regulations, the controller is entitled to use the personal data for such longer period.

VII. RIGHTS OF MARKETPLACE VISITORS

A visitor to the marketplace, as a data subject, has the following rights:

a) the right of the data subject to access personal data

Upon request of the data subject, the controller shall issue the visitor a confirmation as to whether or not personal data relating to the data subject are being processed. In the case of processing, the data subject also has the right to the information specified in Article 15 of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter also referred to as "GDPR"). The controller shall provide the information to the data subject without undue delay. In such a case, the controller is entitled to reasonable compensation that shall not exceed the necessary costs of providing the information.

b) the right to rectification

The data subject has the right to have the controller rectify without undue delay inaccurate personal data concerning him or her. Taking into account the purposes of processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.

c) the right to erasure

The data subject has the right to have the controller erase personal data concerning the data subject without undue delay, and the controller is obliged to erase the personal data without undue delay. Erasure is possible where the personal data are no longer necessary for the purposes for which they were processed, there are no legitimate grounds for processing, or the personal data have been unlawfully processed. The precise scope of the right to erasure is set out in Article 17 of the GDPR.

d) the right to restriction of processing

The data subject has the right to have the controller restrict the processing of personal data in the cases specified in Article 18 of the GDPR.

e) the right to data portability

The data subject has the right to receive personal data concerning him or her, which he or she has provided to the controller, in a structured, commonly used, and machine-readable format, and the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.

f) the right to object to the processing of personal data

The data subject has the right to object at any time to the processing of personal data which are processed for the purposes of protecting the legitimate interests of the controller. The controller shall no longer process the personal data unless it demonstrates compelling legitimate grounds for processing which override the interests or rights and freedoms of the data subject, or for the establishment, exercise, or defence of legal claims.

g) the right to request an explanation

The data subject has the right to request an explanation from the controller regarding the processing of personal data if the data subject believes that personal data are being processed in breach of legal regulations.

h) the right to lodge a complaint with the Office for Personal Data Protection

If the data subject has doubts as to whether the controller is fulfilling its obligations arising from the applicable legal regulations concerning the protection of personal data, the data subject has the right to lodge a complaint with the Office for Personal Data Protection.

All rights (except the right to lodge a complaint with the Office for Personal Data Protection) may be exercised via e-mail [email protected].

This personal data protection policy is effective as of 26th March 2026.

Questions About Your Privacy?

If you have any questions about this Privacy Policy, how we handle your data, or would like to exercise your privacy rights, please don't hesitate to contact us through our support system.

Our support team is trained to handle privacy-related inquiries and will respond to your requests within 24 hours during business days.

Contact Support