User data protection

User data
According to https://gdpr-info.eu/ EU GDPR we process personal data. List of data is available in our privacy policy. All purposes of usage are also described in in our privacy policy.

User rights
Right to be forgotten. Every user can request 2 different types:

1. Close the account. In this case user data is being marked as deleted and unavailable to other users. Routes created by user and in published state are available for other users. In this case user can request restore the account (email or facebook id is required).
   
2. Full depersonalization. User account is marked as deleted. Persistent user data is being deleted without restore:
   
   1. First name
      
   2. Last name
      
   3. Email
      
   4. Facebook id
      
   5. Facebook token
      
   6. Nickname
      
   7. Description
      
   8. Password
      
   9. Picture
      

All routes recorded by user in app or created by user in web version (https://admin.pinsteps.com, https://web.pinsteps.com) are being marked as deleted. All records in database related to account are being marked as deleted and not available for any other user

In case of option 1 user can request reopen action. If there is no request to reopen account all data will be depersonalized in 90 days