Privacy notice
Updated:
Controller and contact
Piotr Kaminski – Kamilunavo
Sole proprietorship · Otto-Braun-Straße 14 · 40595 Düsseldorf · Germany
Account, sign-in and security
We process your name, email address, profile information and chosen sign-in method for your account. Passwords are processed as hashes. Google or Apple sign-in provides the identifier and permitted basic profile/email information needed for sign-in; Apple may provide a relay address. Social sign-in is optional. For passkeys we process the public key; biometric checks take place on your device.
Necessary session data, browser/device information, connection data and security events support sign-in, abuse prevention and session management. Security links expire; verification and password-reset links are valid for no more than one hour. The language preference selected on a localized home page is stored for up to one year. We do not use our own advertising or analytics trackers.
Account functionality you request is processed under Article 6(1)(b) GDPR; security and operational measures under Article 6(1)(f). Required sign-in data is necessary to use an account; additional profile details are voluntary.
Collections, sharing and public content
We store collections, items, images, documents, values, notes, comments and other information you enter to provide the management, search, import/export and community features you choose. Files may contain metadata. Only upload information you are entitled to process and share.
Registering does not itself make private content public. Invited collaborators and share recipients receive the access you grant. Public profiles and explicitly public content can be read and copied without an account. Including eligible public content in our search-engine sitemaps requires a separate setting that is off by default. Withdrawal cannot immediately remove copies or search-engine caches already held by others.
Notifications, reports, moderation decisions and change history support collaboration, accountability and abuse prevention. Requested account features rely on Article 6(1)(b), security/moderation interests on (f), and separate search-engine consent on (a) GDPR. You can withdraw that consent in profile settings.
Hosting, account email and transfers
Sammlerraum runs on our server infrastructure at Hetzner Online GmbH, processing necessary connection, operational and stored application data. Domain and DNS administration use one.com.
Account-verification and password-reset emails use Resend (Plus Five Five, Inc., USA). It receives the recipient address, message content including the relevant account link, and delivery information, not collection images or private documents. Transport is encrypted and uses a separate sending credential. Resend's processing addendum includes subprocessors and EU standard contractual clauses for applicable third-country transfers.
Optional Google/Apple sign-in uses their own authentication services. Providers may process data outside the EEA. Their linked notices describe their processing and transfer mechanisms. Contact us above for information about our particular service-provider arrangements.
Optional external features
Optional OpenAI image analysis is not enabled. Collection images are not automatically sent to OpenAI for this feature.
Stripe payment processing is not enabled. This privacy notice does not start a purchase or subscription.
External market-price queries are not enabled. Private collection content is not automatically sent to market providers for this feature.
Retention and erasure requests
Accounts and collection content are retained to provide the management you use. Moving an entry to trash/soft-deleting it does not permanently erase all related data. Necessary security, dispute and statutory records may be retained longer according to their purpose and applicable duties. Backups are separate and access-controlled; confirmed erasure requests must be respected when restoring them.
You can request access, export or erasure, including account closure, at contact@kamilunavo.com. We check account ownership and affected data and handle requests under the applicable legal requirements.
Your rights
Subject to the applicable legal conditions, you have rights of access, rectification, erasure, restriction, portability and objection to processing based on legitimate interests. You can withdraw consent for the future. You may complain to a data-protection supervisory authority, including the authority for North Rhine-Westphalia.
Sammlerraum does not make solely automated decisions producing legal or similarly significant effects about you. Optional image recognition provides suggestions for you to review.