Controller of personal data: Cosmic Latte s.r.o., established in accordance with the laws of the Czech Republic, with its registered office at Rohanské nábřeží 678/23, Karlín, 186 00 Prague 8, Czech Republic, ID no. 050 66 891, entered in the Commercial Register at the Municipal Court in Prague, Section C, Insert 257791.
Personal data processed: We process data necessary for proper functioning of the Surge Gay App, i.e. all data that you enter into your profile (such as your name or date of birth). We also collect information about your use of our services, such as location, access log, activity and information from Facebook or Instagram (for registering via these social networks), that are necessary for the proper functioning of the Surge Gay App and performance of our contract.
You have a right to delete or modify data provided to the Surge Gay App or delete your account at any time.
Purposes of personal data processing: We are processing your data mainly for providing our services and for the right functioning of the Surge Gay App and performance of our contract with you.
Legal basis for processing: We are processing your data mainly with respect to performance of a contract with you, further based on legitimate interests, for complying with applicable laws and based on your consent (if you provide it to us).
Our legitimate interests: The main reasons for collecting data based on legitimate interests are improvement of our service, the safety of our users and enforcement of our rights.
Categories of recipients of the personal data: We provide information that we process, including personal data, only in the necessary scope to third parties that provide us with services, in particular, cloud data centers, services for automatic evaluation of the content of photographs, communication, data hosting and maintenance providers, services for payment process, security operations, analytics suppliers, application developers and customer care center service.
Transfer of personal data: Your personal data might be transferred to other countries. In this process, we pay attention to the highest possible data protection in compliance with the General Data Protection Regulation (GDPR).
Storage period: Your personal data are stored only as long as we need it for legitimate reasons and as it is required by applicable law. In most cases, we will delete your data within 6 months of receiving your request for their deletion or after you deleted your account in the application.
Your rights: You have the right to request us to change, delete or update (correct) your personal data. You also have the right to limit their processing, to object to the processing of personal data or/and to receive a copy of your data.
Right to lodge a complaint: You also have the right to lodge a complaint with respective supervisory authority.
Cosmic Latte s.r.o., established in accordance with the laws of the Czech Republic, with its registered office at Rohanské nábřeží 678/23, Karlín, 186 00 Prague 8, Czech Republic, ID no. 050 66 891, entered in the Commercial Register at the Municipal Court in Prague, Section C, Insert 257791 (“we” or the “Cosmic Latte”) is controller of personal data and operator of the Surge application (“Surge application”, “Surge Gay App” or “Application”), a dating app for gay men.
When you use the Surge application and websites (“Services”) you entrust your data to us, including your personal data.
This privacy policy will inform you of the data we collect, why we collect the data, how long we store the data, and what we do with the data.
If you want to use the Surge application, please thoroughly acquaint yourself with the content of this privacy policy. By signing up you agree with the privacy policy and you acknowledge the processing of personal data by the company Cosmic Latte as the controller of the personal data.
The Surge Gay App collects and processes personal data (such as your name or date of birth) and other types of data. We need this data for providing our Services, we cannot ovide the correct connections and our Application cannot work right without the data about you and some information about your preferences. We also collect information about your use of our Services, such as location, access log, activity and information from Facebook or Instagram, that are necessary for the proper functioning of the Application and performance of our contract.
When registering on the Application, you may use the registration form or register through Facebook.
When registering with the registration form, you provide the following information (if your profile is complete): your name, e-mail address, date of birth, sexual orientation, gender, relationship status, preferences (alcohol consumption, smoking, interests), appearance (eyes colour, hair colour, body size, tattoo, piercing) and photos.
When registering through your Facebook account, you provide information from your public profile on Facebook (in accordance with your privacy settings on Facebook), such as your name, profile photo, sex, age, and your Facebook ID (user number). In addition, you can provide the following information to the Application: your e-mail address, date of birth, photograph, and your interests (“likes” on Facebook).
When you subscribe to a paid service, you provide to our payment service provider (Apple, Google) payment information (card number and other payment information) in accordance with the Privacy Policy of these providers.
When you contact our support team, we collect the information provided in this communication.
The Application also allows you to set personal preferences when searching for suitable connections, such as age and distance.
Although we do not intentionally collect or process any sensitive personal data, registration on the Surge application or use of the Surge application could be considered in certain jurisdictions a processing of sensitive personal data (special categories of personal data). As optional data in the Surge application, you may also provide information about whether you are in a relationship or about your sexual identity or other sensitive personal data (special categories of personal data). You agree that you voluntary publish such personal data and grant us consent to their processing so that they may appear in your profile in the Application. You can delete such data from your profile anytime. Our processing of such data results from you providing such data to us and such data will not be used for any other purpose than operation of the Application.
You can delete personal data by adapting your settings or contacting the administrator.
The Surge application allows you to link your account in the Surge application to accounts from other social sites, specifically Facebook, Instagram and Spotify. When linking to other social sites, you have the option of selecting which categories of data or what specific data (etc. photos) from other social sites you provide to the Application.
When linking to an account on Facebook, the Surge application may acquire, in particular, the information specified above in the section “Information you provide” during registration.
When linking to an account on Instagram, Surge acquires your Instagram ID and access to your photographs on Instagram.
You acknowledge that linking to your account on Facebook or Instagram is voluntary and made on the basis of your request when registering with the Application. Such linking is not required for proper operation of the Application in case you provide the necessary information yourself without such linking.
Localization data, i.e. information about your current location, are important for the proper functioning of the Surge application, especially when searching for suitable connections in your vicinity.
Surge application requests that you provide access to the localization data on the mobile device where the Surge application is installed.
If you allow access to your localization data, we are then able to collect and process information on your location. These data can be collected only if you are using the Application.
We delete localization data immediately after they are no longer needed for functioning of the Application.
The Surge application allows you to chat with other users on the Surge application or to send information to us as the operator of the application.
In all of these cases, we may collect and process the content of these messages (chats history).
We collect and process information about how you use the Surge application and what type of devices you use.
This information includes the language setting of your mobile device or information about how you have used our services, time when you joined, time you spend using the Application, the features you use, interaction with other users ( whether you have marked a profile of another user as “Like” or “Dislike”, so that we can connect you when there is mutual agreement), the number of messages, the number of swipes and the number of connections.
We also collect other information about the device you use including information about software and hardware (IP address, device type and ID).
Providing any personal data is completely voluntary. However, if you want to use the Surge application, you must at least provide the minimum scope of information specified in the section “Information you provide” during registration in the Surge application. The minimum required data are marked as “Required”. Providing other information is completely voluntary for the user.
“Information we collect when you use the Surge application” is always collected only when you use the Surge application.
We use the information we collect for operating the Surge application (i.e., for performing the contract that you have with us) and in this connection for improving and developing new services, and for protecting our company, you and other users of the Surge application.
In addition, we use this information for marketing and commercial purposes so that we can offer you relevant products and services from our company. Thus, we can send you a commercial communication (such as an SMS, MMS, e-mail, etc.) using the electronic contact you provided to us. You are entitled at any time, even when sending individual messages, to decline any other commercial communication.
We can use the data we collect for the following purposes, in particular for:
The Surge application displays your profile created in the Surge application, especially your name, photographs, age, and distance, and any other information acquired from your profiles on other social sites that you have given the Surge application access to. When displaying your profile in the Surge application, we respect the privacy settings for your profile and restrictions on displaying certain information. You may restrict the visibility of your profile for other Surge application users.
Our automatized systems analyze your photographs and recognize if there is a face, which is required, for example, in a profile photo. Our systems also analyze the location and profile quality of users based on which we can offer you the right connections with other users near you.
We are able to connect all of the personal data we collect on the Surge application with information (including personal data) from other services associated with the Surge application.
We process your information using the following legal basis:
Your profile in the Surge application is, due to the purpose of this Application, visible to other Surge application users.
When displaying your profile in the Surge application, we respect the privacy settings of your profile and the restrictions on certain information. Therefore, consider providing the data with respect to such publication and adjust your privacy settings based on your preferences.
If you “Like” or “Power Message” another user and this user “Likes” or “Power Message” you, thus making it a “Match”, this other user is informed about this, and you can initiate communication with this user using the chat function in the Surge application.
When authorizing the connection of your profile to other social sites, such as Facebook, Instagram or Spotify, other information is also visible, such as photographs and interests, and also information that you have in common with another user that browses your profile, such as common friends or interests.
If someone submits a report involving you, such as inappropriate behaviour or violation of our Terms & Conditions, we may communicate to the reporting person the actions, if any, we took because of the report.
We provide information that we process, including personal data, only in the necessary scope to third parties that provide us with services, in particular, cloud data centers, services for automatic evaluation of the content of photographs, communication, data hosting and maintenance providers, services for payment process, security operations, analytics suppliers, application developers and customer care center service. When choosing third parties, we pay attention to the reputation of these subjects and require their strict adherence to personal data protection requirements, corresponding to the high standards of regulations in the European Union.
We never provide your data to third parties for any marketing or commercial purpose.
We could be required to provide your personal data under law or for fulfilling mandatory duties (e.g. for criminal, court, or administrative proceedings). In this case we are authorized, if necessary, to disclose your personal data in order to protect our rights or the rights of third parties or in order to protect users of the Surge application.
We are authorized, if necessary, to disclose your personal data in order to enforce our agreements with you and to mitigate the liability of the Cosmic Latte.
We prioritize your safety and security. We operate in accordance with the Child Sexual Abuse Regulation, withing the legal bounds allowing derogations from ePrivacy rules to combat child sexual abuse effectively. We are dedicated to child safety and we are cooperating with local law enforcement in cases of child sexual abuse regulation breaches. In exceptional cases, when child sexual abuse is identified and/or reported by law enforcement, authorized personnel processes user data and/or securely shares them to the law enforcement.
We provide you access to your personal data each time you use the Surge application.
You have control over your personal data. You may change, delete or update any of the personal data at any time in the Settings section.
Whilst respecting limits and rules of the applicable regulation, you have the following rights:
In this respect, you may change the settings on your device as access to contacts, photo gallery, location, notifications etc. Please note that if you disable certain accesses, our Service may not be complete and lose functionality or part thereof.
You may also request information or change the settings by sending a request to the e-mail address: help@surgeapp.com or cancel your profile in the Surge application at any time in Settings – Private – Delete Account.
Please note that uninstalling the application from your device, will not delete your Account.
For the purpose of your safety and the safety of other users, we may ask you to provide us with proof of your identity. We may also reject your requests in the case that the request is unlawful, if it may infringe trade secrets or the privacy of other users.
If you request information relating to other users, such as message history, the concerned user must give us his explicit written consent before providing this information.
Your personal data are stored only as long as we need it for legitimate reasons and as it is required by applicable law. We store your personal data for the duration of your profile in the Surge application, unless stated otherwise.
After you delete your profile in the Surge application, some of the data may still be stored by us, for legitimate or technical reasons, in our databases or the databases of our partner(s) for a limited period of time.
We will delete your personal data as follows:
We make every effort to protect you from unauthorized access or unauthorized changes, publication, or deletion of the information we collect.
We disclose personal data only to employees and contractual partners who need to process the data on our behalf. All employees and contractual partners are bound by the duty to uphold confidentiality.
We protect personal data to the maximum extent possible with the help of advanced encryption technologies.
We regularly inspect and update the process of collection, storage, and processing of information in order to prevent unauthorized access to our systems.
However, we are not liable for any unauthorized infringement by third parties, as a result of which these parties obtain unauthorized access to your profiles or personal data and misuse these data or disclose them to third parties, if such infringement took place as a result of circumstances which we are not able to influence.
If, despite all our efforts, an unauthorized leak of personal data will take place, we might need to notify the relevant supervisory authority and follow procedure prescribed by law in this respect.
Your personal data are collected and processed mainly at our headquarters in the Czech Republic.
In view of the fact that we use cloud services for the Surge application and your personal data may be stored in data centres of these providers, your personal data may also be transferred to other EU countries and to the USA or other jurisdictions that have different privacy laws. All processors of personal data with a processing location in the USA are bound under the SCC („Standard contractual clauses for data transfers between EU and non-EU countries“) or another transfer mechanism that the competent authorities consider adequate. All our providers ensure the protection of personal data in compliance with the General Data Protection Regulation (GDPR) applicable in the European Economic Area.
Our privacy policy may be amended from time to time.
The current version of the privacy policy, all changes, and all previous versions will be available on these web pages. If it involves significant changes, we will prepare for you a summary and explanation.
You acknowledge these changes to the privacy policy by continuing to use the Surge application after being notified of the changes and their effective date. If you do not agree to the changes, discontinue your use of the Surge application and delete your profile from the Surge application.
Should you have any questions or comments relating to the privacy policy, please contact us at the following e-mail address: help@surgeapp.com or to the address Cosmic Latte s.r.o., Rohanské nábřeží 678/23, Karlín, 186 00 Prague 8, Czech Republic.
This Privacy Policy was last updated 2nd February 2024