No such language.
This Privacy Policy describes how EDITING BG EOOD, UIC/BULSTAT: 208811081, with registered office and address of management: Velingrad, contact email: [email protected], referred to below as “the Provider”, “we”, “us” or “genkiki.com”, collects, uses, stores, protects and shares personal data in connection with the use of the genkiki.com website and the services for generating, processing and managing content through artificial intelligence provided through it.
This Privacy Policy applies to all visitors, registered users, paying users, business customers, people who contact us, people who submit reports or complaints, as well as to other people whose personal data may be processed through the platform.
Using genkiki.com may involve creating an account, entering prompts for artificial intelligence models, uploading files, generating images, video, audio, text or other digital results, buying credits, activating a subscription, using generation history, submitting reports, contacting support and other actions. Personal data may be processed during these actions.
This Privacy Policy has been drawn up in view of the requirements of the General Data Protection Regulation, the Personal Data Protection Act, the Electronic Commerce Act, the cookie rules and the applicable requirements for digital services and artificial intelligence systems.
Art. 1. (1) The controller of the personal data is:
1. Name: EDITING BG EOOD;
2. UIC/BULSTAT: 208811081;
3. Registered office and address of management: Velingrad;
4. Correspondence address: Velingrad;
5. Email for questions about personal data: [email protected];
6. Phone: 088 502 88 31;
7. Website: https://genkiki.com.
(2) The controller determines the purposes and the means of processing the personal data connected with the operation of genkiki.com.
(3) If a data protection officer is appointed for the Provider's activity, their contact details will be published additionally on the site or in this Policy, if that becomes applicable.
Art. 2. (1) For all questions, requests, objections, reports or complaints related to personal data, you can contact us at email: [email protected].
(2) When a request about personal data is submitted, we may ask for additional information needed to confirm your identity, so that we can protect the data from unauthorised access.
Art. 3. (1) This Privacy Policy has been prepared in accordance with the applicable legislation on the protection of personal data, electronic services, electronic commerce, consumer rights and the provision of digital services.
(2) When processing personal data, the Provider complies, to the extent applicable, with the following legal acts:
1. Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, referred to below as the “General Data Protection Regulation”;
2. the Personal Data Protection Act;
3. the Electronic Commerce Act;
4. the Consumer Protection Act, where the processing is related to consumer contracts, payments, subscriptions, orders, complaints, the right of withdrawal or customer service;
5. the Accountancy Act and the applicable tax legislation, where the processing is related to payments, invoices, accounting documents and statutory retention periods;
6. the applicable law of the European Union and the Republic of Bulgaria relating to the protection of personal data, electronic communications, information security, digital services and artificial intelligence systems.
(3) Where genkiki.com uses cookies or similar technologies, the processing is carried out in accordance with this Policy, the Cookie Policy and the applicable rules on electronic services and the protection of personal data.
Art. 4. (1) Where this Policy uses terms such as “personal data”, “processing”, “controller”, “processor”, “data subject”, “consent”, “personal data breach” and other similar terms, they have the meaning given to them in the General Data Protection Regulation.
(2) In the event of a conflict between this Policy and mandatory provisions of the applicable legislation, the mandatory statutory provisions apply.
Art. 5. (1) “Personal data” is any information relating to an identified or identifiable natural person.
(2) “Processing” is any action with personal data, including collection, recording, storage, viewing, use, transfer, restriction, erasure or destruction.
(3) “User” is any person who visits, browses, registers on or uses genkiki.com.
(4) “Account” is a user profile in the platform.
(5) “Model prompt” is a text instruction, description, command, parameter, file, image, video, audio or other input that the User provides in order to generate or process content through an artificial intelligence system.
(6) “Input content” is all prompts, texts, files, images, video, audio, settings, descriptions and other materials that the User enters or uploads in the platform.
(7) “Generated content” is the result created, processed, edited, enhanced or transformed through an artificial intelligence system.
(8) “External provider” is a third party that supplies a technical service, cloud storage, computing processing, payment service, email service, security service, artificial intelligence system or another service necessary for the operation of the platform.
(9) “Cookies” are small files or similar technologies that are stored on the User's device or make it possible to recognise a device, session, preference or action on the site.
Art. 6. (1) We process personal data lawfully, fairly and transparently.
(2) We collect personal data for specific, explicitly stated and legitimate purposes.
(3) We process only data that is necessary in connection with those purposes.
(4) We make reasonable efforts to keep the data accurate and up to date.
(5) We store the data only for as long as necessary, except where the law requires longer retention.
(6) We apply appropriate technical and organisational measures to protect personal data.
(7) We do not sell personal data to third parties.
(8) We do not provide personal data to third parties for their own independent marketing purposes without a valid legal basis or explicit consent, where such consent is required.
Art. 7. (1) Depending on how you use genkiki.com, we may process different categories of personal data.
(2) Not all categories of data are processed for every User. The processing depends on whether you only visit the site, have an account, use free services, buy credits, activate a subscription, upload files, publish content or contact us.
Art. 8. (1) When the site is visited, we may process technical data, including:
1. internet address of the device;
2. device type;
3. browser type and version;
4. operating system;
5. language settings;
6. date and time of the visit;
7. pages visited;
8. actions on the site;
9. approximate location determined from technical data;
10. referring page, if one is available;
11. data about errors, crashes and technical problems;
12. data for security and prevention of abuse.
Art. 9. (1) When an account is created and used, we may process:
1. email address;
2. name or username, if provided;
3. password in protected form;
4. date of registration;
5. date of last login;
6. account settings;
7. selected language;
8. selected preferences;
9. account status;
10. role or access level;
11. information about the active plan;
12. information about the credit balance;
13. history of actions needed for security, accountability and provision of the service.
(2) When the User logs in with their Google or Facebook profile, we use and store only the name and email address from that profile, obtained from the respective provider. The User's password for these services is not provided to us.
Art. 10. (1) When artificial intelligence services are used, we may process:
1. text prompts for models;
2. descriptions, commands and parameters;
3. selected models and settings;
4. uploaded images;
5. uploaded video files;
6. uploaded audio files;
7. uploaded documents or other files, if such a feature is offered;
8. preliminary images or previews;
9. results of the processing;
10. generated images, video, audio, text or other files;
11. generation history;
12. data about the start and completion time of the task;
13. data about the credits used;
14. technical data about successful and unsuccessful requests;
15. error messages;
16. internal task identifiers;
17. data needed to restore credits in the event of a technical error.
(2) Model prompts, uploaded files and generated results may contain personal data if the User enters such data or uploads content with faces, voices, names, documents, addresses, registration numbers, personal information or other identifying elements.
(3) The User should not enter or upload personal data of third parties unless they have a legal basis, consent or another right to do so.
Art. 11. (1) When credits, subscriptions and payments are used, we may process:
1. selected plan;
2. credit package purchased;
3. price;
4. currency;
5. date and time of the payment;
6. payment status;
7. payment identifier;
8. transaction identifier;
9. data about the payment operator;
10. invoice information;
11. name of an individual or a company, where this is needed for an invoice;
12. billing address;
13. tax or identification number, where this is needed;
14. data about refunds;
15. data about cancelled or disputed payments;
16. data needed to prevent fraud.
(2) Full bank card details are normally processed by the payment operators and not by genkiki.com, unless expressly stated otherwise and this is done in accordance with the applicable security requirements.
Art. 12. (1) When you communicate with us, we may process:
1. name;
2. email address;
3. phone, if provided;
4. content of the message;
5. attached files;
6. history of the communication;
7. date and time of sending;
8. data needed to handle a question, complaint, report or request.
Art. 13. (1) When a report about illegal content, an infringement or abuse is submitted, we may process:
1. data about the sender;
2. data about the affected account or content;
3. description of the report;
4. evidence, including links, identifiers and screenshots;
5. correspondence about the report;
6. decision on the report;
7. data about an objection or a subsequent complaint.
Art. 14. (1) When public features are used, we may process:
1. public name or profile name;
2. publicly shared images, video, text or other results;
3. description of the content;
4. date of publication;
5. public link;
6. visibility data;
7. reactions, if such are offered;
8. reports and moderation actions.
(2) If the User makes content public themselves, it may become visible to other users or visitors according to the feature selected.
Art. 15. (1) When cookies and similar technologies are used, we may process:
1. session identifier;
2. login settings;
3. language settings;
4. cookie consent choices;
5. data about visits;
6. data about actions on the site;
7. data for measuring usability;
8. data for preventing abuse;
9. marketing and tracking data, only where there is valid consent or another applicable basis.
Art. 16. (1) The User should not upload or enter in genkiki.com personal data of other people, unless they have the right to do so.
(2) Particular care is required with content that includes:
1. faces of real people;
2. voices of real people;
3. names;
4. addresses;
5. phone numbers;
6. email addresses;
7. identity documents;
8. registration numbers;
9. medical information;
10. financial information;
11. data about children;
12. biometric data;
13. sensitive personal data;
14. photos or video from private events;
15. content that may reveal the private life of third parties.
Art. 17. (1) The User must not upload data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data for unique identification, health data or data concerning sex life and sexual orientation, unless there is a clear legal basis and this is necessary for a lawful purpose.
(2) If the User enters or uploads such data without a basis, they bear responsibility for that action.
(3) The Provider may delete, restrict or refuse to process content when it establishes, or has grounds to believe, that it contains sensitive data, illegal content or data of third parties without a basis.
Art. 18. (1) We process personal data in order to create, maintain and manage user accounts.
(2) This includes registration, login, authentication, restoring access, managing settings, showing the credit balance, plans, history and other account features.
Art. 19. (1) We process personal data in order to provide services through artificial intelligence.
(2) This includes accepting model prompts, uploading files, sending requests to artificial intelligence systems, processing results, storing history, showing results and making downloads possible.
Art. 20. (1) We process personal data in order to manage credits, subscriptions and payments.
(2) This includes crediting, reserving, deducting, restoring and tracking credits, processing payments, invoicing, accounting and preventing abuse.
Art. 21. (1) We process personal data in order to support and communicate with Users.
(2) This includes answering enquiries, solving technical problems, handling complaints, sending service messages and providing information about the account or the services.
Art. 22. (1) We process personal data in order to protect the platform, the Users and the Provider.
(2) This includes preventing fraud, abuse, unauthorised access, automated data scraping, malicious actions, spam, technical attacks, breaches of the credit system and other risks.
Art. 23. (1) We process personal data in order to comply with legal obligations.
(2) This includes accounting, tax, legal, consumer, regulatory and other obligations, as well as responses to lawful requests from competent authorities.
Art. 24. (1) We process personal data in order to improve the service.
(2) This may include analysing technical errors, measuring load, improving the interface, optimising speed, detecting problems, planning new features and improving the user experience.
(3) Where possible, we use aggregated or anonymised data for analyses.
Art. 25. (1) We process personal data for marketing only where there is an applicable legal basis.
(2) Marketing messages by email are sent with consent or on another permissible basis, where the law allows this.
(3) The User may opt out of marketing messages at any time.
Art. 26. (1) We process personal data only where there is a legal basis.
(2) Depending on the specific activity, the legal basis may be:
1. performance of a contract;
2. taking steps prior to entering into a contract;
3. a legal obligation;
4. consent;
5. legitimate interest;
6. protection of vital interests, where applicable;
7. performance of a task in the public interest, where applicable.
Art. 27. (1) Performance of a contract is the basis where the processing is necessary for:
1. creating and managing an account;
2. providing services through artificial intelligence;
3. carrying out a generation request;
4. storing and showing results;
5. managing credits;
6. activating a subscription;
7. providing paid features;
8. handling support requests related to the service.
Art. 28. (1) A legal obligation is the basis where the processing is necessary for:
1. accounting;
2. tax reporting;
3. issuing and keeping invoices;
4. responding to lawful requests from authorities;
5. complying with consumer legislation;
6. complying with personal data protection obligations;
7. handling certain complaints and reports, where the law requires it.
Art. 29. (1) Consent is the basis where the User has voluntarily given consent for a specific purpose, for example:
1. optional cookies;
2. marketing messages;
3. certain analytics tools;
4. taking part in surveys;
5. other activities for which we explicitly ask for consent.
(2) The User may withdraw their consent at any time.
(3) The withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
Art. 30. (1) Legitimate interest is the basis where the processing is necessary for a lawful and justified interest of the Provider or a third party, and that interest is not overridden by the rights and freedoms of the User.
(2) The legitimate interest may include:
1. protecting the security of the platform;
2. preventing fraud and abuse;
3. proving operations;
4. defence against legal claims;
5. improving the service through aggregated technical analyses;
6. maintaining system logs;
7. limiting harmful or illegal content;
8. protecting the credit and payment system;
9. protecting other users.
Art. 31. (1) genkiki.com provides services through artificial intelligence systems, which may be developed in-house, be an external service or a combination of several technical providers.
(2) In order to carry out a request, it may be necessary for the input content to be processed by an external provider.
(3) This may include sending model prompts, files, images, video, audio, parameters, technical identifiers and other data needed to carry out the specific generation.
Art. 32. (1) External providers may process data as processors on our behalf or as independent controllers, depending on the nature of the service and their applicable terms.
(2) We use external providers only where this is necessary for providing the service, support, security, payments, storage, communication or legal compliance.
(3) Where necessary, we conclude contracts or apply other appropriate safeguards for the protection of personal data.
Art. 33. (1) Some external providers may be located outside the Republic of Bulgaria or outside the European Economic Area.
(2) Where personal data is transferred outside the European Economic Area, we apply appropriate safeguards under the applicable rules, where such safeguards are required.
(3) Such safeguards may include an adequacy decision, standard contractual clauses, contractual measures, technical measures or other permissible mechanisms.
Art. 34. (1) The Provider does not use Users' personal data to train its own artificial intelligence systems without a valid legal basis and without providing the necessary information.
(2) If, in the future, data is to be used for training, fine-tuning, evaluating or improving models in a way that requires consent or additional information, Users will be notified and the relevant consent will be requested, where the law requires it.
(3) External providers may have their own technical rules for storing and processing requests. Where this is applicable, the Provider chooses settings and providers that are compatible with the provision of the service and the protection of data.
Art. 35. (1) Personal data may be provided to the following categories of recipients, where this is necessary:
1. cloud infrastructure providers;
2. file storage providers;
3. computing processing providers;
4. providers of artificial intelligence systems;
5. payment operators;
6. banks and financial intermediaries;
7. email providers;
8. providers of messaging and notification services;
9. providers of security tools;
10. providers of analytics tools;
11. providers of cookie and consent management;
12. accountants;
13. lawyers;
14. technical subcontractors;
15. partners under referral or resale programmes, where applicable;
16. competent state authorities, where this is required by law.
(2) We do not provide more data than is necessary for the respective purpose.
(3) Where possible, we use aggregated, limited or anonymised data.
Art. 36. (1) When a payment is made, part of the data is processed by a payment operator.
(2) The payment operator may process data about the card, the payment method, the transaction identifier, the payment status, the risk of fraud and other data needed to carry out the payment.
(3) genkiki.com normally does not receive the full bank card details.
(4) We may receive limited information, for example the last digits of a card, the type of payment method, the payment status, the date, the amount, the currency and the transaction identifier, where this is necessary for accounting, support, proof of payment or access management.
Art. 37. (1) In the event of a disputed payment, a chargeback, a declined payment, a suspicion of fraud or a contested transaction, we may process additional data needed to clarify the case.
(2) This may include order history, credits used, login data, technical records, communication with the User, information from a payment operator and other data related to the case.
Art. 38. (1) genkiki.com uses cookies and similar technologies for the operation of the site, account login, security, saving settings, analysing use, improving the service and, where applicable, marketing.
(2) The types of cookies, their purposes, their lifetimes and the way consent is managed are described in detail in the Cookie Policy.
Art. 39. (1) Strictly necessary cookies are used without separate consent, because they are needed for the operation of the site, security, account login, session management, payments and basic features.
(2) Analytics cookies, marketing cookies and tracking cookies are used only where there is valid consent or another permissible legal basis.
(3) The User may change their choice about optional cookies through the cookie settings on the site.
Art. 40. (1) We may send service messages related to the account and the service.
(2) Service messages may include:
1. confirmation of registration;
2. password recovery;
3. security changes;
4. payment information;
5. subscription information;
6. information about credits;
7. messages about technical problems;
8. changes to the Terms and Conditions or the Privacy Policy;
9. important notices about the service;
10. replies to enquiries and complaints.
(3) Service messages are not marketing and are necessary for providing the service.
Art. 41. (1) We send marketing messages only where there is consent or another permissible legal basis.
(2) The User may unsubscribe from marketing messages at any time through an opt-out link, the account settings or by contacting us.
(3) Opting out of marketing messages does not stop the service messages that are necessary for the account and the service.
Art. 42. (1) If genkiki.com offers a public gallery, a content feed, a profile, a public link, a page with examples or another public feature, the User may choose to make certain content visible to other people.
(2) When content is shared publicly, the following may be visible:
1. the generated content;
2. the chosen public name;
3. the description;
4. the date of publication;
5. the public link;
6. additional information that the User has chosen to publish.
(3) The User must not publish personal data of other people without a basis.
(4) The User may request the removal or restriction of public content, to the extent that this is technically and legally possible.
Art. 43. (1) Public content may be viewed, copied, saved or shared by third parties beyond the Provider's control.
(2) For that reason, the User should consider carefully whether to publish content containing faces, voices, personal data, sensitive information, images from private life or content that they do not want to be accessible to other people.
Art. 44. (1) When uploading files and entering model prompts, the User may include data of third parties.
(2) In such cases, the User is responsible for having a legal basis to provide that data in the platform.
(3) This is particularly important with photos, video, audio, documents, voice recordings, images of faces, data about children, data from identity documents, medical documents, contracts, client files and other materials containing personal data.
Art. 45. (1) If a person believes that their personal data has been uploaded, used, generated or published through genkiki.com without a basis, they can contact us at email: [email protected].
(2) In such a case, we may ask for information needed to identify the content and verify the request.
(3) After verification, we may remove, restrict, erase or take another appropriate measure, where this is necessary and justified.
Art. 46. (1) We store personal data only for as long as is necessary for the purposes for which it is processed, unless the law requires a longer period.
(2) When determining the period, we take into account:
1. the type of data;
2. the purpose of the processing;
3. the existence of an active account;
4. the chosen plan;
5. statutory periods;
6. accounting requirements;
7. tax requirements;
8. limitation periods;
9. security needs;
10. prevention of abuse;
11. the existence of a dispute, complaint or inspection;
12. technical capabilities and limitations.
Art. 47. (1) The indicative retention periods are as follows:
1. Account data is stored while the account is active and for a reasonable period after it is closed, where this is necessary to protect rights, for security, to prove operations or for a legal obligation;
2. Data about payments, invoices and accounting documents is stored for the periods required by the applicable accounting and tax legislation;
3. Data about credit operations is stored for as long as it is needed for the balance, history, accountability, disputes and protection against abuse;
4. Model prompts, input files and generated results are stored according to the platform settings, the chosen plan, the account history, the technical limitations and the applicable periods;
5. Temporary files may be deleted automatically after the processing is completed or after a certain technical period;
6. System security logs are stored for a limited period needed to protect the platform, prevent abuse and investigate incidents;
7. Communication with support is stored for a period needed to handle the enquiry and to provide protection against possible claims;
8. Consent data is stored for as long as we need to prove that consent was given, refused or withdrawn;
9. Data about reports and moderation actions is stored for a period needed to handle the report, protect rights, prevent abuse and comply with legal obligations.
Art. 48. (1) The User is responsible for downloading and keeping the results that are important to them.
(2) The Provider does not guarantee unlimited storage of files, model prompts, history or generated results, unless this is expressly included in a specific plan or contract.
(3) When an account is closed, a plan is terminated, a period expires, there is an infringement, a technical necessity or a legal requirement, part of the data may be deleted, restricted or archived.
Art. 49. (1) We apply technical and organisational measures to protect personal data against unauthorised access, loss, destruction, alteration, disclosure or misuse.
(2) These measures may include:
1. access control;
2. protected passwords;
3. encryption, where applicable;
4. restricting access on a need-to-know basis;
5. system logs;
6. protection against malicious requests;
7. protection against automated abuse;
8. backups, where applicable;
9. monitoring for technical errors;
10. incident procedures;
11. contractual obligations with subcontractors;
12. periodic reviews of the security measures.
Art. 50. (1) Despite the security measures, no system can guarantee absolute protection.
(2) The User is also responsible for the security of their account, including by using a strong password, keeping their login details safe and restricting access to their device.
(3) If unauthorised access is suspected, the User should contact us immediately.
Art. 51. (1) Access to personal data is granted only to people for whom this is necessary in connection with support, security, payments, legal obligations, technical maintenance, handling reports or providing the service.
(2) Such people may be employees, managers, technical administrators, subcontractors, accountants, lawyers or other authorised persons.
(3) Access is restricted according to the role and the need.
(4) Where applicable, the people with access are bound by confidentiality obligations.
Art. 52. (1) In certain cases, technical support may have access to model prompts, uploaded files, generated results, system logs or other data, if this is necessary for:
1. solving a technical problem;
2. restoring credits;
3. handling a complaint;
4. investigating abuse;
5. fulfilling a legal obligation;
6. protecting the platform and other users.
Art. 53. (1) The platform uses automated technical processes to provide the services.
(2) Such processes may include:
1. login authentication;
2. checking the credit balance;
3. reserving and deducting credits;
4. sending a request to an artificial intelligence system;
5. returning a result;
6. detecting technical errors;
7. protection against abuse;
8. filtering impermissible content;
9. limiting excessive load;
10. analysing security risks.
Art. 54. (1) These processes are not intended to produce legal effects for the User or similarly significant effects within the meaning of the personal data protection rules, unless expressly stated otherwise.
(2) Automated systems may temporarily refuse a request, restrict access, block content or flag a risk, where a technical or protective mechanism applies.
(3) If the User disagrees with such an action, they can contact us for a review of the case.
Art. 55. (1) Under the conditions of the applicable legislation, the User has the following rights:
1. right to information;
2. right of access to the personal data;
3. right to rectification of inaccurate or incomplete data;
4. right to erasure;
5. right to restriction of processing;
6. right to object;
7. right to data portability;
8. right to withdraw consent;
9. right not to be subject to a decision based solely on automated processing, where the statutory conditions are met;
10. right to lodge a complaint with a supervisory authority.
Art. 56. (1) The right of access means that the User may ask for confirmation of whether we process their personal data and for information about that processing.
(2) In certain cases, the User may receive a copy of their personal data.
Art. 57. (1) The right to rectification means that the User may ask for inaccurate data to be corrected or incomplete data to be completed.
(2) Some of the data can be corrected directly through the account, if such an option is available.
Art. 58. (1) The right to erasure means that the User may ask for personal data to be erased under the conditions of the law.
(2) Erasure may be refused or postponed where the data is necessary for:
1. fulfilling a legal obligation;
2. accounting or tax purposes;
3. establishing, exercising or defending legal claims;
4. security and prevention of abuse;
5. handling a dispute, complaint or report;
6. another lawful reason.
Art. 59. (1) The right to restriction means that the User may ask for the processing to be temporarily restricted under the conditions of the law.
Art. 60. (1) The right to object means that the User may object to processing based on legitimate interest, where there are grounds relating to their particular situation.
(2) The User may always object to processing for direct marketing purposes.
Art. 61. (1) The right to portability means that, under certain conditions, the User may receive the data they have provided in a structured, commonly used and machine-readable format.
Art. 62. (1) Where the processing is based on consent, the User may withdraw their consent at any time.
(2) The withdrawal does not affect the lawfulness of the processing before the withdrawal.
Art. 63. (1) The User may exercise their rights by email to: [email protected].
(2) The request should contain enough information for us to establish which account or which data it relates to.
(3) If we cannot identify the person, or if there is a risk of unauthorised access, we may ask for additional information to confirm the identity.
(4) The steps for deleting the account and the data associated with it are described on the page “Data deletion”.
Art. 64. (1) We answer requests within the periods provided for by the applicable legislation.
(2) For complex or numerous requests, the period may be extended where the law allows this, and the User is notified.
(3) Requests are normally free of charge.
(4) For manifestly unfounded, excessive or repetitive requests, we may refuse to act or charge a reasonable fee, where the law allows this.
Art. 65. (1) The User has the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data infringes the applicable rules.
(2) In the Republic of Bulgaria, the supervisory authority is the Commission for Personal Data Protection.
(3) Contact details of the Commission for Personal Data Protection:
1. Website: https://www.cpdp.bg;
2. Address: Sofia, 2 Prof. Tsvetan Lazarov Blvd.;
3. Email: [email protected];
4. Phone: +359 2 915 3518.
(4) Before lodging a complaint, you can contact us so that we can try to look into the matter and resolve it.
Art. 66. (1) genkiki.com is not intended for independent use by children under the age required by the applicable legislation for the independent use of such services.
(2) If a person under the required age wishes to use the platform, this should happen only with the knowledge and consent of a parent or legal representative, where the law allows this.
(3) We do not knowingly collect personal data of children without the necessary basis.
(4) If a parent or legal representative believes that a child has provided personal data without a basis, they can contact us at email: [email protected].
Art. 67. (1) Users are not allowed to upload, generate or publish content that unlawfully involves children, personal data of children, sexualised content with children or content that may harm a child.
(2) If such content is established, the Provider may remove it immediately, restrict the account and, where necessary, notify the competent authorities.
Art. 68. (1) When we receive a report that certain content infringes personal data, a person's rights, confidentiality, copyright, private life or the law, we may process the data needed to verify the report.
(2) This may include data about the sender, the affected user, the content, the history of actions, technical records and correspondence.
Art. 69. (1) Where a report is well founded, we may take measures, including:
1. temporarily hiding content;
2. removing content;
3. restricting public visibility;
4. restricting an account;
5. retaining data to prove an infringement;
6. notifying affected people;
7. notifying the competent authorities, where this is required.
Art. 70. (1) Some of the technical, cloud, payment or artificial intelligence systems used may process data in countries outside the European Economic Area.
(2) In such cases, we apply appropriate protection mechanisms, where this is required by the applicable rules.
(3) The User understands that, when certain external artificial intelligence systems are used, the request may technically be processed through infrastructure located in another country.
(4) Where possible, we choose providers and settings that limit unnecessary transfer and storage of personal data.
Art. 71. (1) We may use anonymised or aggregated data for statistics, improving the service, analysing load, evaluating features, business planning and technical optimisation.
(2) Anonymised data does not allow a specific person to be identified.
(3) Where data is genuinely anonymised, it is not considered personal data.
Art. 72. (1) genkiki.com may contain links to external sites, payment pages, provider pages, help materials, social networks or other services.
(2) Those external sites have their own privacy policies.
(3) The Provider is not responsible for the way external sites process personal data when the User visits them outside genkiki.com.
Art. 72a. (1) A Partner who takes part in a reward campaign of the partner program may choose to connect their TikTok or Instagram profile to their generiram.bg account, so that the videos and posts they submit are checked automatically.
(2) Connecting is optional. Without it, submitted videos are checked manually.
(3) The connection is made through the official login of the network (TikTok Login Kit, or Instagram login for professional accounts). Before confirming, the Partner sees on the network which permissions are requested and may refuse.
Art. 72b. (1) With a connected profile we receive and process only:
1. basic profile data: the profile identifier on the network for our app, display name, username, profile picture and, for Instagram, the account type (personal or professional);
2. the profile description (bio) and the number of followers;
3. for the videos and posts the Partner has submitted to a campaign: identifier, title or caption, publication date, duration (where the network provides it), and the number of views, likes, comments and shares (as far as the network provides them);
4. the access keys (tokens) that the network issues to our app to read the data above.
(2) We do not receive the password, private messages, the list of followers, or data about videos and posts the Partner has not submitted to a campaign. We do not publish anything on the Partner's behalf.
(3) For Instagram, to find the submitted post we go through the list of recent posts of the connected profile, but we keep data only for the submitted ones.
Art. 72c. (1) The data under Art. 72b is used only to:
1. show the Partner which profile is connected;
2. check the campaign requirements automatically (for example the number of views, text in the video description or in the profile, a minimum number of followers) and that the submitted video was published by the connected profile;
3. prepare the review of the entry. The decision on the reward is made by a person.
(2) The legal basis is the performance of the terms of the partner program and of the campaign the Partner joins at their own request (Art. 6(1)(b) of Regulation (EU) 2016/679), and our legitimate interest in preventing abuse of rewards (Art. 6(1)(f)).
(3) The data is not sold, not used for advertising, and not shared with third parties other than the technical providers under Section 10 that are needed to run the service.
Art. 72d. (1) The access keys are stored encrypted and are used only by the generiram.bg server.
(2) While the profile is connected, the data is refreshed automatically, up to a few times a day, only for entries that are waiting for review or were decided in the last 30 days.
(3) The access keys, the profile data and the numbers from the network in all of the Partner's entries are deleted when:
1. the Partner clicks "Disconnect" in the partner program; for TikTok we then also revoke our app's access on the network;
2. the Partner deletes or closes their generiram.bg account;
3. the Partner removes generiram.bg's access in the network settings or the connection expires; for TikTok the keys are deleted at the first attempt to use them after that, for Instagram as soon as Meta notifies us;
4. the Partner requests deletion of their data through the Instagram settings (data deletion request). We then delete the data immediately and return a code with which the Partner can check the status of the request.
(4) After deletion only the decision on the entry and the amount of the reward remain, kept in accordance with Section 16.
Art. 72e. (1) Data received from the networks is also processed in accordance with the developer terms and policies of TikTok and Meta.
(2) The Partner may at any time see and remove generiram.bg's access in the settings of their profile on the network (on TikTok: apps with access to the profile; on Instagram: Apps and websites).
(3) The Partner's rights under Section 20 also apply to this data and are exercised as described in Section 21.
Art. 73. (1) The Provider may change this Privacy Policy in the event of changes to the service, the legislation, the providers used, the technical infrastructure or the way personal data is processed.
(2) The new version is published on genkiki.com and enters into force on the date stated in it.
(3) In the event of substantial changes, we may notify Users through a message on the site, by email or in another appropriate way.
(4) The User should review the Privacy Policy from time to time.
Art. 74. (1) This Privacy Policy is related to:
1. the Terms and Conditions;
2. the Cookie Policy;
3. the Acceptable Content Rules;
4. the Rules on withdrawal, cancellation and refunds;
5. the Information about content created through artificial intelligence;
6. the Procedure for reports and complaints, if it is a separate document.
(2) If there is a conflict between the documents regarding personal data, this Privacy Policy prevails on matters related to the protection of personal data.
Art. 75. (1) By using genkiki.com, the User confirms that they have been informed about this Privacy Policy.
(2) When registering, purchasing a service, using paid features or uploading files, the User should familiarise themselves with the way the data is processed.
(3) If the User does not agree with this Privacy Policy, they should not use the platform.
Art. 76. (1) This Privacy Policy does not override the rights the User has under the applicable legislation.
(2) If an individual provision is found to be inapplicable, the remaining provisions continue to apply.
Art. 77. (1) For questions about this Privacy Policy, you can contact us at:
1. Name: EDITING BG EOOD;
2. UIC/BULSTAT: 208811081;
3. Correspondence address: Velingrad;
4. Email: [email protected];
5. Phone: 088 502 88 31;
6. Website: https://genkiki.com.
SHORT TEXTS FOR THE INTERFACE
1. On registration:
“By creating an account, I confirm that I have read the Privacy Policy and accept the Terms and Conditions.”
2. On uploading a file:
“I confirm that I have the right to upload this file and that it may be processed through artificial intelligence systems in order to deliver the requested service.”
3. On entering a model prompt:
“Do not enter personal data of other people unless you have the right to use it for this purpose.”
4. On a paid generation:
“In order to carry out the request, the content entered and the files uploaded may be processed by external technical providers.”
5. On marketing messages:
“I want to receive news, offers and information about services from genkiki.com. I can opt out at any time.”
6. On cookies:
“We use strictly necessary cookies for the operation of the site. We use optional cookies only according to your choice.”
