Privacy Policy
This is a translation provided for information purposes. The Slovak version is legally binding.
1. Who processes the data
|UNl0R & Al s. r. o., Company ID (IČO) 45991961, VAT ID (IČ DPH) SK2023164891, Námestie Slobody 2357/33A, 083 01 Sabinov, Commercial Register of the District Court of Prešov, Section Sro, Insert No. 23885/P, brand Datahorses. Contact: juraj@datahorses.com, form or our registered office address. We have not designated a data protection officer under Article 37 of the GDPR, as it is not mandatory for us.
2. What, why and for how long
| When | Data and purpose | Legal basis and period |
|---|---|---|
| Contact form | name, email, company, message; to reply to you | Art. 6(1)(b), or alternatively (f); 2 years from the last message |
| Order and payment | company, Company ID, VAT ID, registered office, contact person, email, list of guarded services and payment details; contract and accounting document | points (b) and (c); accounting documents 10 years by law |
| Website traffic | page, time, device, browser, country, no IP address and no cookies (Umami on our own server); so that the website works | point (f); aggregated only, identifies no one |
You provide the order data. It is a contractual requirement: without it we cannot conclude the contract or start guarding. Payment card details never reach us.
We do not send passwords or documents to artificial intelligence models.
3. Leaked company addresses in the Guarding service
Guarding (outside guarding) monitors the company as a whole from public sources (DNS, certificates, email headers, publicly visible parts of the website and indexes). In addition, it alerts to company email addresses on the customer's domain that appear in publicly known breaches.
| Data | only the email address, name of the breach, date of the breach and the source. We never store or display passwords or their hashes. |
| Data subjects | employees and other users of addresses on the customer's domain, including former ones |
| Purpose | protecting the customer's accounts so that it can change passwords and secure the affected accounts in time |
| Roles | the customer is the controller, Datahorses is the processor under Article 28 of the GDPR; the processing agreement is Art. 10 of the terms and conditions and the customer enters into it by ordering the service |
| Period | for the duration of the service and 30 days after it ends, after which we erase the data |
The legal basis is determined by the customer as controller; it is usually its legitimate interest in network and information security (Article 6(1)(f) and Recital 49 of the GDPR). The customer fulfills the duty to inform the affected employees under Articles 13 and 14 of the GDPR; we provide the supporting information. You can exercise your rights regarding this data with your employer or with us; we pass your request on to them and help handle it.
4. Who we share data with
| Recipient | What for, where |
|---|---|
| Railway Corporation, USA | website and database hosting, also as a sub-processor for the Guarding service; USA, standard contractual clauses |
| WebSupport s. r. o., Bratislava | email for confirmations and alerts; Slovakia |
| Stripe Payments Europe, Ltd., Ireland | payment; EU, standard contractual clauses for the USA |
| accountant, tax authority and other authorities | only to the extent required by law; Slovakia |
Transfers outside the EEA are covered by standard contractual clauses (Article 46(2)(c) GDPR) or an adequacy decision; we will send a copy on request. We do not sell data.
5. Your rights
You have the right of access, rectification, erasure, restriction, portability and the right to object to processing based on legitimate interest. We will handle your request within 1 month. We cannot erase accounting documents (10 years) before the retention period expires. You can lodge a complaint with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava.
6. Automated decision-making and changes
We do not carry out automated decision-making or profiling with legal effects. The current version is always available on this page.
Related document: terms and conditions. Version 1.4, effective upon publication.