Privacy Policy

3. Name of the register

Customer register of the company

4. Legal basis and purpose of processing personal data

The legal basis for processing personal data under the EU General Data Protection Regulation is the consent of the data subject.

Personal data is processed for customer communications, maintaining customer relationships, marketing and providing the service.

The data is not used for automated decision-making.

5. Data stored in the register

The register may contain the person’s name, company or organisation name and Business ID, contact details (telephone number, email address and address), information about ordered services and changes to them, invoicing details, and other information related to the customer relationship and ordered services.

Data is retained for the duration of the customer relationship.

Website visitors’ IP addresses and cookies necessary for the operation of the service are processed on the basis of legitimate interest, including to ensure information security and compile website visitor statistics where such data may be considered personal data.

6. Regular sources of data

Data stored in the register is obtained from customers through messages submitted via website forms, email, telephone, social media services, agreements, customer meetings and other situations in which customers provide their information.

Contact details for representatives of companies and other organisations may also be collected from public sources such as websites, directory services and other companies.

7. Regular disclosures and transfers outside the EU or EEA

Data is not regularly disclosed to other parties. Data may be published to the extent agreed with the customer.

The data controller may transfer data outside the EU or EEA.

Personal data (name, address, telephone number and email address) may be disclosed to partner organisations where necessary to provide the service.

8. Principles of protecting the register

The register is handled with due care, and data processed using information systems is appropriately protected. When register data is stored on internet servers, the physical and digital security of the equipment is managed appropriately. The data controller ensures that stored data, server access rights and other information critical to personal data security are handled confidentially and only by employees whose duties require such access.

9. Right of access and right to request rectification

Every person or company in the register has the right to inspect their stored data and request the correction of inaccurate information or completion of incomplete information. Requests to inspect or rectify data must be submitted to the data controller in writing. The data controller may ask the requester to verify their identity. The data controller will respond within the period prescribed by the EU General Data Protection Regulation, normally within one month.

10. Other rights relating to the processing of personal data

A person in the register has the right to request deletion of their personal data (the “right to be forgotten”). Data subjects also have other rights under the EU General Data Protection Regulation, including the right to restrict processing in certain circumstances. Requests must be submitted to the data controller in writing. The data controller may ask the requester to verify their identity. The data controller will respond within the period prescribed by the EU General Data Protection Regulation, normally within one month.