Security and Privacy

The security and protection of your personal data and investments is our top priority. Žltý melón has adopted several above-standard measures to ensure their protection and control.

Our website and system are secured by the highest IT security standards to ensure that all your personal data remains absolutely safe. Our information system is registered with the Office for Personal Data Protection of the Slovak Republic.

Personal data security

All information you provide is processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and with Act No. 18/2018 Coll. on the Protection of Personal Data.

Personal data provided during registration or loan application is used exclusively for predefined purposes. We share your personal data only with recipients required by law or with carefully selected partners necessary to fulfill our obligations to you and to provide full-quality services.

In the system and auctions you appear anonymously, under a username (nickname). Your personal data is safe. No personal data is published in the system. In the auction, no personal data of borrowers is published — only general information about them and their loan. The identity of borrowers can be revealed to investors only in case of repayment delays, in accordance with the General Terms & Conditions of the Žltý melón platform.

Detailed information about how we handle and protect your personal data can be found here.

Secure connection

When connecting to the Žltý melón portal and working with your investments, auctions, loans, and personal data, all transmitted data is encrypted using SSL (Secure Sockets Layer). This ensures that your data is delivered exactly as you send it and cannot be read by anyone else.

Žltý melón uses 256-bit SSL encryption.

A secure connection can be identified by the 'lock' symbol and the 'https' protocol in your browser's URL.

Security of your login details

Online access to your investments, auctions, and loans is possible only after authenticating with your correct username and password. It is important not to reveal your username or password to anyone, and not to use the same password on Žltý melón as on other services (e.g., email, forums, Yahoo, Hotmail, etc.).

After several unsuccessful login attempts, we block online access to your account, which is reactivated after a period of time. Never disclose your password — our operators will never ask for it.

Your password is stored encrypted in our database and transmitted in encrypted form during login. No one except you has access to it. Not even system, database, or infrastructure administrators have access to your password.

If you forget to log out or your computer is inactive during a session, you will be logged out automatically. Pages displayed during a secure connection are not saved in temporary files. However, we recommend always logging out after using the site, especially on public or shared computers.

Security of your data

Your data is stored in a secured database on secure servers located in Amazon Web Services (AWS) data centres, the world’s leading cloud service provider with top-level security and reliability. Only selected employees have access to data on these servers, and their permissions are strictly limited to what is necessary for operating Žltý melón, such as credit analysts. Operating systems are regularly updated with the latest security patches, antivirus software is continuously updated with the latest definitions, and systems are protected by firewalls to prevent unauthorized activity or attacks.

Enhanced security for sensitive transactions

For your protection and financial security, Žltý melón uses a secondary security system based on Validation Codes.

To perform the most sensitive actions — such as sending funds or changing personal data — it is not enough to be logged in with your username and password. These actions must also be confirmed using a Validation Code. Similar systems are used by banks via grid cards.

The system initially generates a list of 100 random validation codes. When performing a sensitive action, you will be asked to enter the correct code corresponding to the specific number. Each code can only be used once. After the list is exhausted, the system generates a new set of 100 random validation codes. If your codes are lost or stolen, contact us — once your identity is verified, we will block the old codes and generate a new list.

For investors: security of your investments

All loan applicants undergo strict identity verification and a comprehensive credit assessment. Only applicants with a clear profile and ability to repay can borrow through Žltý melón and enter the auction system. While investors do not see the exact identity of the borrower in the auction, they are provided with all essential information needed to make an investment decision. All borrower and loan data presented in auctions is verified as part of the comprehensive credit assessment.

Your investment risk is continuously monitored. Žltý melón must not be confused with non-bank lenders providing loans to highly risky clients at excessive interest rates. Borrowers on Žltý melón are similar to standard bank loan clients, and our scoring criteria reflect this. Their motivation to borrow is not easier access to money but better loan terms. Maintaining a low default rate is a key condition for the long-term sustainability of our services.

Maximum loan amounts per borrower are determined individually based on their financial situation and repayment history. A borrower’s total loans on Žltý melón cannot exceed predefined limits. To become an investor on Žltý melón, you only need €25. However, for serious investing, we recommend spreading your investment across at least 30 borrowers. The more borrowers in your portfolio, the more diversified and protected your investment becomes. For this reason, we do not allow a single investor to invest more than €250 — or 25% of the loan amount — in an unsecured loan unless they have already achieved a high level of diversification.