Privacy Policy

Dealing with personal data is governed by the legal order of the Czech Republic and directly applicable regulations of the European Union, more particularly Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as the "Regulation"), Act no. 110/2019 Sb., on processing of personal data, and Act no. 480/2004 Sb. on certain legal aspects of information society services and on amendments of some laws, as amended.

Personal data means any information relating to an identified or identifiable natural person. Personal data is particularly (but not exclusively):

• Identification data, such as the name and surname, registration number, TAX ID, sex, date of birth;
• Contact data, such as the address of residence or address of registered office, phone number, e-mail address;
• Other data, such as information collected via cookies, IP address (network identifier) including the type of web browser, device, and operating system, duration and number of accesses to the mobile application and corresponding information.

You provide us with your personal data particularly by completing your purchase order or by filling a contact form. Please inform us if there is any change to your personal data.

Some personal data can be collected and saved via cookies during the visit on the website. You can read more about cookies in Article 5 of the Policy.

• We can collect and process personal data insert while you are inquiring (particularly by filling a contact form) or ordering our products without your explicit consent solely for the purpose of contract conclusion and performance, which means for the purpose of providing our products (esp. software and/or software as a service). We can further process the data in order to comply with our other obligations imposed by the law (particularly record-keeping obligations, archiving of invoices, etc.) and for the purpose of protection of our legal claims.
• We can collect and process information you provide by filling a contact form without your explicit consent solely for the purpose of contract conclusion and performance, which means in order to provide you with an answer.
• We are entitled to use your e-mail address without your explicit consent for the purpose of sending commercial communications regarding our products similar to those we have provided to you. You can refuse sending of these commercial communications at any time.
• After your consent via confirmation on the website, we can process your personal data insert while ordering our products in order to send the commercial communications and direct marketing, eventually for additional reasons to which you have explicitly consented.
• If cookies are used to process personal data, we process these personal data collected via cookies on the basis of your consent which you give us in applicable settings of your Internet browser or on the basis of our legitimate interest or for the purpose of contract conclusion and performance (especially applies to first-party cookies), in particular for the purpose of user support, improving our services, including analysis of user's behavior and marketing.

We will ask for your consent before using data for a purpose other than those that are set out above.

We use the personal data you provide by ordering our products or filling a contact form on the website solely for the time necessary to fulfill the contract and obligations imposed by the law, respectively for protection of our legal claims.

If you give us explicit consent to process personal data or if we use your e-mail address for commercial communications according to the previous paragraph, the data will be used for the time our website, in which we provide our products similar to those we have provided to you, is functioning, eventually for the time stated in the consent.

If we process your personal data solely based on your consent (i.e. without any other legal purpose), you can decide to withdraw your consent at any time. The withdrawal of consent to processing of personal data is possible at any time:

• by sending an e-mail to our contact e-mail address;
• by calling our phone number;
• in writing by letter sent to our delivery address;
• in case of commercial communications - in a way which is indicated in every e-mail containing commercial communications (by clicking on a deregistering link or by another way).

Withdrawal of consent does not affect the legality of the personal data processing done before the withdrawal.

You have the right to be informed about the processing of your data and eventually to access your personal data, in particular, to get the following information:

• purpose of the processing;
• category of personal data being processed;
• recipient or category of recipients to whom the personal data will be accessible;
• time for which the personal data will be saved.

We will provide you with a copy of your personal data at your request. For further copies, we may request reasonable compensation not exceeding the necessary costs for providing information about the processing of your personal data.

You have the right to request an imminent rectification of your incorrect or inaccurate data, i.e., rectification of incorrect data or/and complement of inaccurate data.

You have the right to object to the processing of your personal data at any time if we process these data for the purpose of direct marketing including any automatic processing of your personal data. After the objection, we will stop processing your personal data for these purposes.

You have the right to request the erasure of your personal data if:

• the personal data are no longer needed for purposes for which the data were collected or processed;
• you decided to withdraw your consent to processing;
• you objected to the processing of the personal data;
• the personal data were processed illegally.

If there are no legal reasons for the refusal of erasure, we must comply with your request.

You have the right to request the restriction of processing of your personal data if:

• the accuracy of the data is contested;
• the processing is illegal, and you request the restriction of personal data instead of erasure;
• we no longer need your personal data for the purpose of processing, but you request these data for determining, execution or protection of your legal rights;
• you object to processing.

When the processing is restricted, we are only entitled to save your personal data; further processing is possible solely with your consent or for legal purposes.

If the processing of personal data is restricted for the reason of your objection to processing, the restriction lasts for the time necessary to find out whether we are obliged to comply with the objection.

If the processing of personal data is restricted for the reason of accuracy contestation of your personal data, the restriction lasts for the time of verification of the data accuracy.

You have the right to collect the personal data you have provided us with in the structured, commonly used, and machine-readable format, and to transmit these data to another personal data controller.

You can exercise your rights in relation to personal data via our contact details. You will be provided with all the information and actions to be taken without undue delay.

When protecting your personal data, we will accommodate your needs as much as we can. However, if you are not satisfied with the arrangement, you have the right to contact relevant authorities, particularly The Office for Personal Data Protection (in Czech: Úřad pro ochranu osobních údajů; http://www.uoou.cz) which conducts supervision of personal data protection. This provision does not affect your right to contact The Office for Personal Data Protection directly.

If particularly your residence, the place of work, or the place of an alleged infringement of personal data protection is located outside the Czech Republic in another state of the European Union, you can contact relevant authorities in this member state.

We are the controller of the personal data in the meaning of the Regulation.

When necessary for the contract performance or to comply with our obligations, we can transfer your personal data to another subject, for example, other users of the application, persons involved in the performance of the contract, or in compliance with our obligations. We can delegate also other processors and recipients of personal data. At your request, we will inform you about the concrete processor of your data.

Your personal data will not be transferred to a state outside of the European Union unless it is necessary for the performance of the contract or for another reason which is in compliance with rules stipulated by the Regulation.

Personal and other collected data are highly protected against any misuse. Personal data will be processed electronically in an automated manner or printed in a non-automated manner.

The cookie files or so-called "cookies" are text files saved in a computer or another electronic device of every visitor of the website, which allow analyzing the manner of using the website.

Not all cookies collect your personal data; some of them only enable the correct operation of the website. You can refuse using cookies in applicable Settings of your Internet browser.

When refusing cookies, it might happen that you will not be able to fully use all the functions of the website.

The website uses relational (temporary) cookies which are automatically erased after you leave the website. Furthermore, it uses permanent cookies, which remain in your device until they expire or you delete it. The website uses the following:

• first party cookies - these cookies are assigned to the domain of our website; these are necessary cookies and performance cookies, which we use even before conclusion of the contract for the purpose of performance of the contract, on the basis of our legitimate interests or on the basis of your consent. They can be temporary or permanent.
  • session cookies - allow navigation on the website and the use of basic functions; these cookies do not collect personal data, i.e., they usually do not identify you;
  • analytical cookies - serve for analysis of the way of using website (the number of visits, duration of time spent on the website, etc.), the data collected by these cookies are usually anonymous;
• third party cookies - these cookies are assigned to the domain other than our website's domain even when you are still on our website; with your consent, these cookies allow us to analyze our website and display an advertisement tailored for you; they can be functional or targeted and advertising;
  • functional cookies - serve to personalize the content via storing of logging data; geolocation etc.; it is possible to collect and process personal data via these cookies;
  • targeted and advertising cookies - serve to display targeted advertisement on the website and outside the website; it is possible to collect and process personal data via these cookies. We can share information about how you use our website with our partners in the field of social networks, advertising and analysis.

The website uses service of Google Analytics and, when necessary, other services provided by Google, Inc (hereinafter referred to as "Google") and service Facebook Pixel provided by Facebook Inc. These services operate with data collected via cookies.

Service of Google Analytics is used to collect statistics about your use of the web interface. Cookies obtained by this service will expire depending on your browser settings, at most after 2 years or until they are manually deleted by you.

Service of Google Ads is used to identify you within the Google advertising network and re-target your ad (retargeting and remarketing). Cookies obtained by this service will expire depending on your browser settings, at most after 18 months or until they are manually deleted by you.

If you are interested in how Google uses data collected by us and how to regulate or prohibit processing, you can find this information by clicking on the following link: how Google uses data when you use websites or apps of our partners.

Instructions on how to set up and manage the processing of cookies in your Internet browser can be found here:

• Google Chrome - https://support.google.com/accounts/answer/61416?hl=en
• Internet Explorer - https://support.microsoft.com/en-gb/help/17442/windows-internet-explorer-delete-manage-cookies
• Microsoft Edge - https://support.microsoft.com/en-gb/help/4468242/microsoft-edge-browsing-data-and-privacy-microsoft-privacy
• Mozilla Firefox - https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
• Opera - https://help.opera.com/en/latest/web-preferences/#cookies
• Safari - https://support.apple.com/en-gb/guide/safari/sfri11471/mac

Dealing with personal data is governed by the legal order of the Czech Republic and directly applicable regulations of the European Union, more particularly Regulation (EU) no. 2016/679 of the European Parliament and of the Council of 27 April, 2016, on the protection of natural persons with regard to the processing of personal data and the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation; hereinafter referred to as the "Regulation"), Act no. 110/2019 Sb., on processing of personal data, and Act no. 480/2004 Sb. on certain legal aspects of information society services and on amendments of some laws, as amended.

Personal data means any information relating to an identified or identifiable natural person. Personal data is particularly (but not exclusively):

• Identification data, such as the name and surname, registration number, TAX ID, sex, date of birth;
• Contact data, such as the address of residence or address of registered office, phone number, e-mail address;
• Other data, such as economic and financial information, or information collected via cookies, IP address (network identifier) including the type of web browser, the device, and operating system, duration and number of accesses to the mobile application and corresponding information, and all the other data provided.

You provide us with your own personal data particularly by completing your purchase order or by filling a contact form. Please inform us if there is any change to your personal data.

We process your personal data as the controller in accordance with the Privacy Policy and the Regulation. Please, get acquainted with the Privacy Policy which contains important information regarding the usage of your personal data, and related rights and obligations. This Agreement is without prejudice to rights and obligations set by the Privacy Policy.

This Agreement is concluded in order to set the conditions of personal data processing of your employers, job applicants, members of the body, business partners, customers, shop visitors, webpage visitors, fair visitors, registered users, members of the loyalty program, or other persons whose data you are providing to us via the SaaS (hereinafter referred to as the "Data Subject").

This Agreement is concluded between you, as the controller of personal data of the Data Subject, and us as the processor of personal data of the Data Subject, in accordance with Article 28 of Regulation.

We shall process for you all personal data (incl. possible identification data, contact data, and other data) of the Data Subject which we shall receive in relation to the use of the SaaS and other related services, under the following conditions.

The purpose and means of the personal data processing are determined by you, mainly through purchasing and usage of the SaaS in accordance with the SaaS Terms and this Agreement.

The purpose of the processing of the personal data of the Data Subject is to provide you with the SaaS and all its functionalities.

We process the personal data of the Data Subject mainly by collection, recording, organization, structuring, and storage of them in an electronic way by automated means via the SaaS.

You as the controller declare that personal data we received and process under conditions of this Agreement are provided to us in accordance with the Regulation.

You further declare that you are entitled to use us as the processor for personal data in the scope, for the purpose and length set out in the Agreement.

We shall process the personal data for the time necessary to fulfill the contract concluded under the SaaS Terms and for the time necessary to provide you with the SaaS and all its functionalities. We delete all the personal data of the Data Subject after the termination of the contract concluded under the SaaS Terms within one month after the termination becomes effective.

We undertake:

• to process personal data in accordance with the purpose, nature and means of the processing mentioned above and in accordance with other instructions given by you; if we process personal data in accordance with the relevant law, we are obligated to inform you before we start doing so;
• to inform you in case we are of the opinion that a certain instruction of yours infringes law concerning personal data;
• to ensure that persons who are authorized to process personal data (e.g. employees) have undertaken to confidentiality;
• not to transfer personal data to third persons (except another processor as stated below);
• to take technical and organizational measures in order to ensure the required level of security of personal data processing, particularly to ensure the access to saved personal data is protected with access passwords, and to establish internal rules for personal data processing;
• to assist you in ensuring compliance with the obligations to react to the application's exercise of rights of the Data Subject through appropriate technical and organizational measures, if possible;
• to assist you with complying with the Regulation concerning security of personal data of the Data Subject, with reporting infringements of the security, with impact assessment and previous consultations with the supervisory authority;
• to report any breach of personal data security which comes to our notice;
• to delete or return all the personal data to you after the termination of the Agreement at your choice, and to delete existing copies unless the law requires the storage of the personal data;
• to provide you with all information necessary to demonstrate compliance with the obligations laid down in the Regulation and allow for and contribute by our cooperation to audits, including inspections, conducted by you or another auditor mandated by you;
• to fulfill the obligation concerning processing records and cooperation with the supervisory authority records, as stated in the Regulation.

You undertake:

• to fulfill all the obligations arising from the law concerning personal data security;
• to inform us about every fact which could influence our obligations under the Agreement and our legal obligations, without undue delay.

You are giving us general authorization to use another processor hereby. We undertake to inform you about the use of every new processor beforehand, and you are entitled to submit an objection to such use.

The other processors that we are using are stated on the website. We shall inform you about the replacement of another processors or about the addition of the new processor via the website.

The personal data of the Data Subject will not be transferred to a state outside of the European Union unless it is necessary for the performance of the contract or for another reason which is in compliance with rules stipulated by the Regulation.

The personal data of the Data Subject shall be transferred to a state outside of the European Union especially if you are using the SaaS from the state outside of the European Union and if providers of our systems, which are necessary for the operation of the SaaS (e.g. servers), are located at the state outside of the European Union which is closer to you than our other providers of these systems from the member states of the European union.

Our relation is governed by the Regulation and Czech law, particularly by the law concerning personal data security.

The Agreement is concluded by electronic means. You express the consent and the acquaintance with the Agreement by sending a purchase order for the SaaS on the website, thereby concluding the Agreement.