Privacy Policy

This Privacy Policy contains information about the processing of personal data of data subjects by the company com.Hub s. r. o., with its registered office at Rajčurská 5 917 05 Trnava, Company ID: com.Hub s. r. o., registered in the Commercial Register of the District Court Okresný súd Trnava, file no. 36404/T (hereinafter referred to as the “Controller”), on the website or on the company’s social media profile (hereinafter referred to as the “Website”). All personal data are processed in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation, hereinafter the “GDPR”) and in accordance with Act No. 18/2018 Coll. on Personal Data Protection and on Amendments and Supplements to Certain Acts (hereinafter the “Act”), as well as other applicable data protection regulations. The purpose of this Privacy Policy is to provide you with answers to why your personal data are processed, how they are processed, and what your rights and obligations are in relation to the processing of personal data. These Policies also provide other relevant information about the processing of your personal data and thus represent the fulfillment of the Controller’s information obligation pursuant to Article 13 as well as Article 14 GDPR regarding the processing of personal data on the Website. Conditions of processing of personal data outside of the Website are governed by the Controller’s general privacy policies and other internal data protection regulations.

Identification Data of the Controller

Your personal data are processed by the company com.Hub s. r. o., with its registered office at Rajčurská 5 917 05 Trnava, Company ID: com.Hub s. r. o., registered in the Commercial Register of the District Court Okresný súd Trnava, file no. 36404/T.

Contact Details of the Data Protection Officer:

Name: Karol Vido E-mail: vidok@com-hub.sk Phone: +421 902 111 033

I. Principles of Personal Data Processing

Your personal data are processed solely for a defined purpose, in a defined manner, and by defined means, only for the duration necessary given the purpose of the processing. We carry out the processing of your personal data in a way that prevents unauthorized access, unauthorized transfer, loss, destruction, or other unauthorized processing. We apply technical and organizational measures to ensure the highest level of security given all possible risks. All persons authorized to process your personal data are bound by confidentiality.

II. What Personal Data We Process

The Controller always processes your personal data in accordance with the principle of data minimization. We only collect data necessary to fulfill contractual and legal obligations, process data where there is a legitimate interest, or process data when you grant consent. This means that the Controller does not require personal data that are not necessary for the specific purpose. The Controller processes common categories of personal data such as: first name, last name, phone number, e-mail, contact address, online identifiers (IP address, website activity), and other data you provide.

III. Purpose and Legal Basis of Processing

We process your personal data under Article 6(1)(b) GDPR – processing is necessary for the performance of a contract or to take steps prior to entering into a contract at your request. For example, this includes handling service orders made through contact forms, emails, social media messages, or by phone. Data retention: at least 3 years after the end of the contractual relationship. We also process your personal data under Article 6(1)(a) GDPR – based on your consent. This applies, for example, when contacting us through the contact form or via social networks. Data retention: 3 months or until the request is handled. Consent is also required for website analytics and targeted advertising via cookies. Data retention: until consent withdrawal, max. 2 years. We also process data under Article 6(1)(c) GDPR – processing necessary to comply with legal obligations, e.g., handling requests or exercising data subject rights. Retention: until the request is handled.

IV. Who Has Access to Your Personal Data

In some cases, we are required to provide your data to public authorities, such as courts or law enforcement. Other recipients include social network operators (e.g., Facebook Inc.) if you contact us via social media, and Google LLC for Google Analytics. We also cooperate with processors (hosting, accounting services, cloud storage). Contracts with processors include data protection clauses in line with GDPR and the Act.

V. Data Transfers to Third Countries

Your personal data may be transferred to third countries (e.g., USA) if you consent to analytics cookies (Google Analytics) or if you contact us via social media (Facebook). Transfers are secured by standard contractual clauses.

VI. How We Protect Your Personal Data

We apply technical and organizational measures, including antivirus, firewalls, and monitoring systems. In the event of a breach or suspected data leak, we will notify you and the Slovak supervisory authority (Office for Personal Data Protection) within 72 hours.

VII. Your Rights as a Data Subject

You have the following rights: a) Right of access – you may request confirmation of whether your data are processed and obtain a copy. b) Right to rectification – if your data are inaccurate or incomplete. c) Right to erasure – under conditions set by GDPR (not absolute; e.g., if data are required for legal obligations, they cannot be erased). d) Right to restriction – e.g., when contesting accuracy of data or if processing is unlawful. e) Right to object – to processing based on legitimate interest. f) Right to data portability – to request transfer to another controller, where technically feasible.

VIII. Complaints

If you are dissatisfied with the way we process your personal data, you can contact us at vidok@com-hub.sk. You may also file a complaint with the Slovak Data Protection Authority: Hraničná 12, 820 07 Bratislava 27; website: dataprotection.gov.sk; phone: +421 2 3231 3214; e-mail: statny.dozor@pdp.gov.sk.

IX. Profiling and Automated Decision-Making

The Controller does not use profiling or automated individual decision-making when processing your personal data.

X. The Controller as a Processor on Behalf of Clients

When providing services to its clients, the Controller may process personal data on behalf of clients in the position of a processor under Article 4(8) GDPR. In such cases, the client is the controller who determines the purpose and means of processing. We conclude data processing agreements with clients regulating conditions, security, and confidentiality.

XI. Final Provisions

These updated Privacy Policies are valid and effective as of 16.06.2021. The Controller reserves the right to amend and update this Privacy Policy in the future. Any updates will be communicated in an appropriate manner.