01Controller & contact

The controller of personal data within the meaning of Regulation (EU) 2016/679 (the "GDPR") is:

• Company: [COMPANY LEGAL NAME]
• Registered office: [REGISTERED ADDRESS]
• Company ID (IČO): [IČO]
• VAT ID: [IČ DPH]
• Email: [CONTACT EMAIL]

The Controller has not appointed a Data Protection Officer; this is not a statutory obligation in the Controller's case. All data-protection requests are handled by the contact above.

02Categories of data & purposes

The Controller processes the following categories of personal data, for the purposes set out in section 03:

03Legal bases (Art. 6 GDPR)

Processing of personal data is based on the following legal grounds:

• Performance of a contract (Art. 6(1)(b) GDPR) — processing of account, billing and usage data necessary to provide the Service.
• Compliance with a legal obligation (Art. 6(1)(c) GDPR) — accounting and tax records, statutory archiving periods, response to lawful requests of public authorities.
• Legitimate interests (Art. 6(1)(f) GDPR) — security and integrity of the Service, fraud and abuse prevention, defence of legal claims, basic measurement of website traffic, B2B direct marketing to the Controller's existing customers regarding similar services (with the right to opt out at any time).
• Consent (Art. 6(1)(a) GDPR) — non-essential cookies and tracking, newsletter subscription for non-customers, B2B prospect outreach where required. Consent may be withdrawn at any time without affecting the lawfulness of prior processing.

04Sources of personal data

The Controller obtains personal data: (i) directly from the data subject (forms, demo requests, account creation, support tickets), (ii) automatically when the data subject visits the website or uses the Service (logs, cookies), and (iii) in limited cases from publicly available business registers and from the data subject's employer in the context of a B2B Order.

05Recipients & sub-processors

Personal data may be disclosed only to recipients who need them to fulfil the Controller's obligations or to recipients where disclosure is required by law. The current list of sub-processors includes:

The list above is illustrative; the up-to-date list is maintained by the Controller and provided on request to [CONTACT EMAIL].

06International transfers

The Controller stores personal data within the EU/EEA. Where a sub-processor (e.g. for advertising and measurement) processes personal data outside the EU/EEA, such transfers take place on the basis of the EU–US Data Privacy Framework and/or the Standard Contractual Clauses adopted by the European Commission, supplemented by appropriate technical and organisational measures.

07Retention periods

08Your rights as a data subject

Under the GDPR you have the right to:

• Access — to obtain confirmation as to whether personal data concerning you are being processed and a copy of such data (Art. 15);
• Rectification — to have inaccurate data corrected without undue delay (Art. 16);
• Erasure ("right to be forgotten") — to have personal data erased where one of the grounds in Art. 17 applies;
• Restriction of processing in the cases set out in Art. 18;
• Data portability — to receive personal data in a structured, machine-readable format and to transmit them to another controller (Art. 20);
• Object to processing based on legitimate interests, including profiling (Art. 21); the right to object applies in particular to direct marketing;
• Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3));
• Lodge a complaint with a supervisory authority — see section 15.

Requests are sent to [CONTACT EMAIL]. The Controller responds within one month of receipt and the response is free of charge unless the request is manifestly unfounded or excessive.

09Cookies & similar technologies

The website uses cookies and similar technologies. Strictly necessary cookies are set without consent on the basis of Art. 6(1)(f) GDPR (legitimate interests). All other cookies — including analytics, advertising and retargeting cookies — are set only after the data subject's prior consent, expressed via the cookie consent banner.

Categories of cookies used:

• Strictly necessary — session, security, language preference;
• Analytics — Google Analytics (anonymised IP, aggregated reports);
• Advertising & retargeting — Google Ads, DV360, Meta Pixel, LinkedIn Insight Tag.

Consent can be reviewed and withdrawn at any time via the cookie banner control or in the data subject's browser settings.

10Marketing communications

Where lawful, the Controller may send the data subject information about its services that are similar to those already used (B2B direct marketing on the basis of legitimate interests), with the right to object at any time. The newsletter is sent only on the basis of an explicit consent that can be withdrawn via the unsubscribe link in every message.

11Automated decision-making

The Controller does not subject data subjects to decisions based solely on automated processing, including profiling, that produce legal effects concerning them or similarly significantly affect them within the meaning of Art. 22 GDPR.

12Security

The Controller takes appropriate technical and organisational measures to protect personal data against unauthorised access, alteration, loss or destruction, including encrypted transmission (TLS), encryption at rest where applicable, role-based access control, regular back-ups, logging and personnel confidentiality undertakings.

13Children

The Service is intended exclusively for business customers. The Controller does not knowingly process personal data of persons under 16. If you believe such data have been provided to us, please contact [CONTACT EMAIL].

14Changes to this Policy

The Controller may update this Privacy Policy. The current version is always available on this URL. Material changes will be notified to data subjects in advance by appropriate means (e.g. email or in-product notice).

15Complaints

You have the right to lodge a complaint with the supervisory authority. The competent authority for the Slovak Republic is: