GDPR & Your Rights

Effective 3 October 2026 · Version 2026-10

If you are resident in the European Union or United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR protect your personal data. This page explains your rights and how to exercise them with SEELVIE.

Who controls your data

Data Controller: Monryte S.R.L., Str. Baia nr. 10, Sector 1, 013496 București, Romania.

Contact: seelvie@monryte.com (privacy and data-subject rights inquiries).

Monryte S.R.L. decides what personal data we collect and how we use it. We are accountable to you for how we handle your data.

Your GDPR rights

Right of access (Art. 15)

You have the right to request a copy of all personal data we hold about you. We will provide it in a structured, commonly-used, machine-readable format.

How to exercise: email seelvie@monryte.com or use Settings → Download my data in the app.

Right to rectification (Art. 16)

You can correct inaccurate or incomplete personal data. You can edit your profile, preferences, and wardrobe items directly in Settings.

How to exercise: edit your account in-app, or email us with corrections and we will update them.

Right to erasure ("right to be forgotten") (Art. 17)

You can request deletion of your personal data. We will erase your account and all associated data within 30 days.

How to exercise: Settings → Delete my account in the app, or email seelvie@monryte.com.

Limitations: we may retain data when:

  • Required by law (e.g., tax records, legal claims).
  • Necessary to enforce these terms or legal obligations.
  • Data is in backups (deleted within 30 days).

Right to restrict processing (Art. 18)

You can ask us to limit how we use your data (e.g., stop sending it to AI providers, stop processing for recommendations). We will restrict processing while we verify your request.

How to exercise: email seelvie@monryte.com with "I want to restrict processing of my data" and explain how.

Right to data portability (Art. 20)

You can request your data in a portable, machine-readable format. We will provide a JSON file of all your account data, wardrobe, outfits, and usage records.

How to exercise: Settings → Download my data, or email seelvie@monryte.com with "I want to port my data".

Right to object (Art. 21)

You can object to processing of your data for certain purposes (e.g., direct marketing, profiling, or processing for legitimate interests). We will stop the processing unless we have a compelling legal reason to continue.

How to exercise: email seelvie@monryte.com with "I object to" + the specific processing (e.g., "I object to AI recommendations").

Rights related to automated decision-making (Art. 22)

You have the right not to be subject to decisions based solely on automated processing that significantly affect you (e.g., automated filtering or profiling). SEELVIE does not make automated decisions that significantly restrict your rights. Recommendations are generated automatically but you always choose what to wear; moderation decisions involve human review.

Right to withdraw consent (Art. 7)

If we process your data based on your consent (e.g., AI recommendations, optional analytics), you can withdraw consent anytime. We will stop the processing immediately.

How to exercise: Settings → AI sharing (to withdraw AI consent), or email seelvie@monryte.com.

Lodge a complaint with your data-protection authority

If you believe SEELVIE has violated your GDPR rights, you have the right to lodge a complaint with your local Data Protection Authority. You do not need to contact us first, though we encourage you to try resolving the issue directly (email seelvie@monryte.com).

Your DPA by country (EU member states + UK):

  • Austria: Austrian Data Protection Authority (dsb.gv.at)
  • Belgium: Belgian Data Protection Authority (autoriteit-persoonsgegevens.be)
  • Bulgaria: Commission for Personal Data Protection (cpdp.bg)
  • Croatia: Croatian Personal Data Protection Agency (azop.hr)
  • Cyprus: Commissioner for Personal Data Protection (dataprotection.gov.cy)
  • Czech Republic: Office for Personal Data Protection (uoou.cz)
  • Denmark: Danish Data Protection Agency (datatilsynet.dk)
  • Estonia: Estonian Data Protection Inspectorate (aki.ee)
  • Finland: Office of the Data Protection Ombudsman (tietosuoja.fi)
  • France: CNIL (cnil.fr)
  • Germany: BfDI (bfdi.bund.de)
  • Greece: Hellenic Data Protection Authority (aedp.gr)
  • Hungary: National Authority for Data Protection (naih.hu)
  • Ireland: Data Protection Commission (dataprotection.ie)
  • Italy: Garante per la Protezione dei Dati Personali (garanteprivacy.it)
  • Latvia: State Data Inspectorate (dvi.gov.lv)
  • Lithuania: State Data Protection Inspectorate (ada.lt)
  • Luxembourg: National Commission for Data Protection (cnpd.lu)
  • Malta: Information and Data Protection Commissioner (idpc.org.mt)
  • Netherlands: Authority for Data Protection (autoriteitpersoonsgegevens.nl)
  • Poland: President of the Office for Personal Data Protection (uodo.gov.pl)
  • Portugal: CNPD (cnpd.pt)
  • Romania: National Supervisory Authority for Personal Data Processing (autoritatea-dop.ro)
  • Slovakia: Office for Personal Data Protection (nadzornyurady.sk)
  • Slovenia: Information Commissioner (ip-rs.si)
  • Spain: Spanish Data Protection Authority (aepd.es)
  • Sweden: Swedish Authority for Privacy Protection (datainspektionen.se)
  • United Kingdom: Information Commissioner's Office (ico.org.uk)

Response times

We aim to respond to data-subject rights requests within 30 days of receipt. If your request is complex, we may extend this by up to two additional months, and we will notify you of the extension.

We respond to all requests, even if we deny a request in whole or in part. If we deny or delay, we will explain why.

Our legal basis for processing

We process your personal data under these lawful bases:

Contract (Art. 6(1)(b))

To provide the service you asked for: recommendations, weather forecasts, account management, social feed.

Legal obligation (Art. 6(1)(c))

To comply with law: age verification, responding to law-enforcement requests (with a warrant), keeping records for tax/legal purposes.

Legitimate interests (Art. 6(1)(f))

To keep the community safe: abuse prevention, enforcing terms, fraud detection, security. We balance our interests against your rights and always implement privacy-by-design.

Consent (Art. 6(1)(a))

Where required by law or for optional processing: AI recommendations (opt-in at sign-up), optional analytics (future). You can withdraw consent anytime.

Special categories (Art. 9)

Photos with faces: we process photos to display your looks and power recommendations (explicit consent via upload + legitimate interest in community features). We do not run facial recognition (which would require Art. 9 explicit consent for biometrics).

International data transfers

Some of your data is transferred outside the EEA/UK (e.g., to AI providers in the US). We use Standard Contractual Clauses (SCCs) and the UK Addendum to ensure appropriate safeguards. See the Privacy Policy for details on processors and their locations.

Questions or concerns?

Contact us: seelvie@monryte.com

Mailing address: Monryte S.R.L., Str. Baia nr. 10, Sector 1, 013496 București, Romania