GDPR Notice

Last updated: 16 June 2026

This Notice supplements our Privacy Policy and explains how Regulation (EU) 2016/679 (the General Data Protection Regulation, "GDPR") applies to your use of AppDock, operated by Intelligent Matrix s.r.o., Prague, Czech Republic.

1. Data controller and DPO

Controller: Intelligent Matrix s.r.o., Prague, Czech Republic.
Data Protection Officer: dpo@appdock.market.

2. Lawful bases summary

Art. 6(1)(b) — Contract: creating your account, fulfilling listings and escrow, providing support.
Art. 6(1)(c) — Legal obligation: tax, accounting, AML/CTF, KYC, sanctions screening.
Art. 6(1)(f) — Legitimate interest: security, fraud prevention, product analytics, service improvement. Balancing tests are documented and available on request.
Art. 6(1)(a) — Consent: marketing emails, non-essential cookies, optional AI training participation.

3. Your rights as a data subject

Right of access (Art. 15) — obtain a copy of your personal data.
Right to rectification (Art. 16) — correct inaccurate data.
Right to erasure / "right to be forgotten" (Art. 17) — request deletion where no overriding legal obligation applies.
Right to restriction of processing (Art. 18).
Right to data portability (Art. 20) — receive your data in machine-readable JSON.
Right to object (Art. 21) — including objecting to direct marketing at any time.
Right not to be subject to solely automated decision-making (Art. 22) — request human review of the AppDock Score or any other automated output.
Right to withdraw consent (Art. 7) — at any time, without affecting prior lawful processing.
Right to lodge a complaint (Art. 77) with the Czech Office for Personal Data Protection (ÚOOÚ) or your local supervisory authority.

4. How to exercise your rights

Send a request from your registered email to dpo@appdock.market. We may ask for proof of identity. We will respond within one month (extendable by two months for complex requests, with notice). Exercise of rights is free of charge unless requests are manifestly unfounded or excessive.

5. Self-service in the dashboard

Export all your data: Dashboard → Preferences → Export my data.
Delete your account: Dashboard → Preferences → Delete account.
Manage marketing consent: Dashboard → Preferences → Notifications.
Manage cookie consent: cookie banner → Preferences.

6. International transfers

Where personal data is transferred outside the EEA (e.g. to AI inference providers in the United States), we use the European Commission's Standard Contractual Clauses (Decision 2021/914) and supplementary technical measures (encryption in transit and at rest, strict access controls).

7. Sub-processors

An up-to-date list of sub-processors is maintained at dpo@appdock.market upon request. Material changes will be notified 30 days in advance.

8. Data breaches

In the event of a personal data breach that is likely to result in a risk to your rights, we will notify the competent supervisory authority within 72 hours and, where required, notify affected users without undue delay.

8a. Tax Reporting Under DAC7

Under Council Directive (EU) 2021/514 (DAC7), AppDock reports seller income annually to Czech authorities (Art. 6(1)(c) — legal obligation). Sellers cannot opt out of this reporting. Data retained 5 years.

9. Children

The Platform is not directed to persons under 18; we do not knowingly process data from minors.

10. Contact

Intelligent Matrix s.r.o. · Prague, Czech Republic · dpo@appdock.market