Privacy Policy
Privacy Policy Last updated: 18 August 2023
The security and protection of our customers' personal data is our priority. In accordance with applicable legal regulations, particularly Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter referred to as "GDPR"), we hereby inform you about how your personal data is processed in connection with the provision of our services.
1. Personal Data Controller
The controller of personal data is the company with ID No. 07638990, registered in the Commercial Register maintained by the Municipal Court in Prague, Section C, Insert 304555/MSPH (hereinafter the "Controller").
Contact details: email: info@cyberometer.com
Personal data refers to any information about an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, identification number, location data, online identifier, or one or more elements specific to their physical, physiological, genetic, mental, economic, cultural or social identity.
2. Sources and Categories of Personal Data Processed
We process the following personal data based on the legal bases described in Section 3:
-
Identification data (e.g., name and surname of the contact person);
-
Contact data (e.g., telephone number, email address);
-
Communication and interaction data (e.g., records of communication, handling of complaints or service requests).
3. Legal Basis and Purpose of Processing Personal Data
We process the personal data you provide to us in the context of business cooperation based on the following legal grounds and for the following purposes:
-
Performance of a contract and/or implementation of pre-contractual measures;
-
Compliance with legal obligations imposed on us by generally binding legal regulations (in particular Act No. 586/1992 Coll., on Income Taxes, Act No. 563/1991 Coll., on Accounting, Act No. 634/1992 Coll., on Consumer Protection, and Act No. 235/2004 Coll., on Value Added Tax);
-
Our legitimate interest in protecting and enforcing potential claims;
-
Consent for customizing offers and advertising based on your preferences using cookies. For more information, please see our Cookie Policy.
4. Data Retention Period
We apply the principle of data minimization and retain personal data only for as long as necessary. Retention periods follow the applicable legal obligations or our decision to protect legitimate interests. After these periods, your personal data will be deleted.
Your personal data will be processed for 5 years from the date of contract conclusion for the purpose of fulfilling contractual obligations and legitimate interests in protecting and enforcing our claims. Tax documents containing your personal data are archived for 10 years in accordance with the Value Added Tax Act.
5. Recipients of Personal Data (Controller’s Subcontractors)
Personal data processing is performed by the Controller. In connection with the provision of our services, your data may be transferred to authorized entities that perform specific service-related tasks. These entities are authorized to handle your data only for the purpose for which they have been contracted. In such cases, your consent is not required as the processing is permitted by law.
Subcontractors may include:
-
Providers of IT services, including cloud storage and IT security (e.g., Salesforce.com, Microsoft);
-
Providers involved in product/service delivery or payment processing (e.g., Stripe);
-
Providers of e-commerce and related services;
-
Marketing service providers.
All recipients are committed to ensuring a high level of data security. Where data is transferred outside the EU, mechanisms are in place to ensure an adequate and comparable level of protection to that within the EU.
6. Your Rights
Under GDPR, you have the following rights:
-
Right to access your personal data (available primarily via this form here);
-
Right to rectify inaccurate data;
-
Right to erasure (in certain cases);
-
Right to restrict processing;
-
Right to object to processing;
-
Right to data portability.
To exercise these rights or for inquiries related to your personal data, please contact our Data Protection Officer: Lucie Poulová (lucie.poulova@cyberometer.com). If you’ve read this far, send her a message — if you’re the first, we’ll send you a bottle of good wine!
You also have the right to file a complaint with the Czech Data Protection Authority: Pplk. Sochora 27, 170 00 Prague 7 Phone: +420 234 665 111 Website: www.uoou.cz
Providing your personal data is not mandatory. However, without the data necessary to identify you as a contractual party, it is not possible to conclude or fulfill the contract.
7. Personal Data Security Terms
The Controller declares that:
-
It has implemented all appropriate technical and organizational measures to safeguard personal data;
-
Only authorized personnel have access to personal data.
8. Final Provisions
By submitting an order through the online form, you confirm that you have read and fully accept this Privacy Policy.
The Controller reserves the right to change this policy. The updated version will be published on our website.
