1. Controller
The controller of personal data is the seller stated above. We process personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll.
2. Data we process
Name, e-mail, phone, billing address, company details (name, registration number, tax ID, VAT ID), Supremo account e-mail, order contents and payment information (without card details).
3. Purpose and legal basis
Performance of a contract – processing orders, delivering licences and support (Art. 6(1)(b) GDPR).
Compliance with legal obligations – issuing and archiving tax and accounting documents (Art. 6(1)(c) GDPR).
4. Recipients
Stripe Payments Europe, Ltd. (payment processing), Nanosystems S.r.l. (licence registration and activation), our accounting service provider and our hosting and e-mail providers. We do not share data with third parties for marketing purposes.
5. Retention period
We keep order data for the duration of the contract and then for 10 years due to obligations under accounting and VAT legislation.
6. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and the right to object. Send your request to us by e-mail. You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic.
7. Cookies
We only use strictly necessary cookies required for the shop to work (session, cart, form protection). We do not use analytics or advertising cookies.