Privacy Policy
This is a translation provided for information purposes. The Slovak version is legally binding.
1. Who processes the data
|UNl0R & Al s. r. o., Company ID (IČO) 45991961, VAT ID (IČ DPH) SK2023164891, with its registered office at Námestie Slobody 2357/33A, 083 01 Sabinov, registered in the Commercial Register of the District Court of Prešov, Section Sro, Insert No. 23885/P. It provides its services under the Datahorses brand.
We have not designated a data protection officer under Article 37 of the GDPR, as we are not subject to such an obligation. For data protection matters, please contact us via the contact form or in writing at our registered office address.
2. What we process data for
2.1 Contact form
Data: name, email address, company name and the text of your message.
Purpose: to reply to you and to arrange any cooperation.
Legal basis: pre-contractual measures under Article 6(1)(b), or alternatively our legitimate interest in answering your own enquiry under point (f).
Period: 2 years from the last communication, after which we erase the data.
2.2 Order and payment
Data: business name, company ID (IČO), VAT ID (IČ DPH), registered office, contact person, email, payment details.
Purpose: to conclude and perform the contract and to issue an accounting document.
Legal basis: performance of a contract under point (b) and compliance with a legal obligation under point (c).
Period: accounting documents are kept for 10 years under the Slovak Accounting Act. We cannot shorten this period, even on request.
2.2a Consent to testing when ordering
Data: name, position, email and telephone number of the person who gave consent, the test scope (domains and IP addresses), the wording of the consent, the time, and the IP address and browser from which the consent was submitted.
Purpose: to demonstrate that we perform the test with the consent of an authorised person and only within the specified scope.
Legal basis: performance of a contract under point (b) and our legitimate interest in demonstrating that the test is authorised under point (f).
Period: for the duration of the contract and 3 years after it ends.
⛔ Payment card details never reach us. Payments are processed by the payment gateway on its own page.
2.3 Monitoring and security services
For Monitoring, we work with publicly available sources and with published leaks of login credentials. These are mainly the work email addresses of the Customer's employees.
In this case, we act as a processor and the Customer is the controller; we enter into a contract with the Customer under Article 28 of the GDPR and process data only on its instructions. The legal basis on the Customer's side is its legitimate interest in network and information security, which is expressly recognised in Recital 49 of the GDPR.
Period: for the duration of the service and 30 days after it ends.
2.4 Website traffic
Data: page visited, time, device type, browser and country. Not the IP address and not any personal identifier.
Purpose: to know which pages are useful and whether the website works.
Legal basis: legitimate interest under Article 6(1)(f) in operating and improving the website.
Period: the data is aggregated and does not allow any individual to be identified.
We use Umami on our own server. ⛔ It does not store any cookies in your browser, does not track you across websites and does not pass data to third parties. That is why this website has no cookie banner: there is nothing to consent to.
3. Who we share data with
- The payment gateway provider, so that payments can be received.
- The hosting provider on which this website and our systems run.
- The accounting services provider and, to the extent required by law, the tax authority.
- Public authorities, where required by law.
⛔ We do not sell data and do not provide it for third-party marketing.
4. Transfers outside the European Union
Some of our providers are based outside the European Economic Area. In such cases, the transfer is covered by the European Commission's standard contractual clauses or by an adequacy decision.
5. Your rights
You have the right of access to your data, the right to rectification, erasure, restriction of processing, data portability and the right to object to processing based on legitimate interest.
We will deal with your request within one month. Where processing is based on consent, you may withdraw it at any time; this does not affect the lawfulness of processing before the withdrawal.
⚠ The right to erasure is not unlimited. We must keep data on accounting documents for 10 years, even if you request erasure.
If you believe we are processing data incorrectly, you may lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
6. Automated decision-making
We do not carry out automated decision-making or profiling with legal effects for data subjects.
7. Changes
We may update this policy. The current version, together with its effective date, is always available on this page.
Related document: terms and conditions. Effective from 3 October 2026.