We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (the “Regulation”) and Act No. 18/2018 Coll. on the Protection of Personal Data (the “Data Protection Act”). The security and lawful processing of personal data are our top priorities. Below, you will find information about how we process your personal data and how we ensure its protection.
1. OUR DETAILS
Who are we?
Personal data is processed by:
Company name: Zooza s. r. o.
Registration: Commercial Register of the District Court Trenčín, Section: Sro, Insert No. 44567/R
Registered office: Horská 1311/12, Partizánske 958 06, Slovakia
Company ID (IČO): 55 083 218
Contact email: support@zooza.online
(hereinafter referred to as the “Controller”).
2. CATEGORIES OF PERSONAL DATA, PURPOSE, LEGAL BASIS AND RETENTION PERIOD
What personal data do we process, for what purpose, on what legal basis, and for how long?
We only process personal data that is necessary to achieve a specific purpose.
We process personal data for the following purposes:
a) Contract for the use of the Zooza application and provision of services
We process the personal data of clients, their employees, statutory representatives, cooperating persons, and other contact persons to the extent of name, surname, address, organization affiliation, billing information (Company ID, VAT ID, IBAN), payment details, phone number, and email. We also process the personal data of users and other data subjects (including children) where such processing is necessary for the performance of a contract. This includes title, name and surname, address, date of birth, payment details, email address, and phone number. The legal basis for this processing is the performance of the contract. We retain the data for the duration of the contractual relationship and for 5 years thereafter in case of legal claims. Communication during pre-contractual negotiations is retained for 6 months.
b) Contact form
We process the personal data of enquirers to the extent of name, surname, phone number, email address, and the content of the message for the purpose of handling your inquiry. The legal basis is the performance of a contract or pre-contractual relations. We retain this data for 6 months.
c) Accounting records
We process personal data of clients, customers, their employees, statutory representatives, and other relevant persons to the extent of name, surname, address, and billing information (Company ID, VAT ID, IBAN) for accounting purposes in accordance with Act No. 431/2002 Coll. on Accounting and related regulations. The legal basis is the fulfilment of legal obligations. Accounting documents are kept for 10 years.
d) Marketing
We process personal data of customers (name, surname, phone number, email) for direct marketing purposes to inform you about our offers and news. If you are our customer, the legal basis is our legitimate interest, and we operate a contact database for this purpose. If you are not our customer, we process your data based on your consent only. We retain this data for three years or until you withdraw consent or object to processing.
e) Cookies
For all the above purposes, we may use cookies or similar tools. If cookies are not processed based on one of the above legal grounds (contract, legitimate interest), they are processed based on your consent, which can be provided via our website functionality or by ticking the relevant box in a sign-up form. Cookie retention period is 15 months.
3. RECIPIENTS
To whom do we disclose your personal data?
Personal data is accessible only to authorized employees, members of the controller’s bodies, and authorized cooperating persons or processors’ employees, and only to the extent necessary for processing.
In addition, we only provide personal data to third parties when required by law or necessary for contract fulfilment. This mainly includes public authorities and other authorized entities.
We also share data with processors who provide us with professional and specialized services. All processors are bound by a data processing agreement and confidentiality obligation. We have engaged the following processors:
- Accounting service provider
- Payment service provider
- Email marketing system provider
- Invoicing system provider
- SMS system provider
4. THIRD COUNTRIES
Do we transfer your personal data abroad?
We do not transfer your personal data to any third country.
5. COMPLAINTS
Are you dissatisfied?
If you are not satisfied with how we process your personal data, you can contact us at support@zooza.online. You also have the right to file a complaint with the Data Protection Authority if you believe your personal data is being processed unlawfully.
Data Protection Authority
Hraničná 12, 820 07 Bratislava
Email: statny.dozor@pdp.gov.sk
6. HOW WE PROCESS YOUR DATA
We process personal data in both electronic and paper form, using automated and manual methods. We do not use automated individual decision-making or profiling.
We maintain records of all processing activities and have implemented necessary technical and organizational security measures, including antivirus software, strong password policies, and encryption. Personal data is regularly backed up to ensure recovery in case of accidental loss or damage. All persons involved in processing have been instructed and bound by confidentiality. We carefully select our processors and ensure they provide adequate safeguards for your data.
7. RIGHTS OF DATA SUBJECTS
What rights do you have?
The Regulation grants you certain rights regarding your personal data. Not all rights may apply in all circumstances, depending on the legal basis for processing.
a) Right of access
You have the right to know whether we process your personal data. If we do, you may request access to it. Upon request, we will provide confirmation and a copy of your data.
b) Right to rectification
You have the right to have inaccurate or outdated personal data corrected or completed without undue delay.
c) Right to erasure
In certain cases, you have the right to have your personal data erased, especially if:
- The data is no longer necessary for the purpose it was collected.
- You withdraw your consent (if processing was based on consent).
- You object to processing.
- The data was processed unlawfully.
- Erasure is necessary to comply with legal obligations.
- You are a child or a parent of a child who consented to data processing online.
d) Right to restriction of processing
You may request restriction of processing if:
- You contest the accuracy of the data (until verified).
- Processing is unlawful, but you object to erasure.
- We no longer need the data, but you require it for legal claims.
- You object to processing, and verification is pending.
e) Right to data portability
If we process your data based on your consent or a contract and by automated means, you may request that we provide it to you or a third party. We cannot fulfil this request if it affects the rights of others.
f) Right to object
If we process your data based on legitimate interest or public interest, you have the right to object. Unless we demonstrate compelling legitimate grounds, we will stop processing.
g) Right to withdraw consent
If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of prior processing. You can withdraw consent by emailing support@zooza.online or via your user account (if available).
Requests to exercise your rights can be sent by email or post to the contact details provided. We will handle your request and inform you of the outcome using the same communication method.
8. FINAL PROVISIONS
If we have doubts about your identity, we may request additional information to verify it.
In the case of repeated, manifestly unfounded, or excessive requests to exercise rights, we may charge a reasonable fee or refuse to act.
These privacy principles are effective from the date of publication. We reserve the right to amend them if our data processing practices change.
Issued in Pezinok on 1 February 2023
Zooza s. r. o.
