The purpose of this Personal Data Processing Policy is to provide information about what personal data the Company processes about data subjects when delivering and providing services, selling goods, visiting websites and using the Buildo application operated by the Company. Furthermore, contacts with existing and potential customers, for what purposes and for how long the company processes this personal data in accordance with applicable law, to whom and for what reason the company may pass it on. Also to inform about what rights belong to data subjects in connection with the processing of their personal data. This is always done only to the extent determined by the specific service or purpose of the processing.
The Personal Data Processing Policy has been issued by Buildo s.r.o., Company ID: 54693918, Tax ID: 2121759277 with registered office at Horná Trnovská 438/94 010 01 01 Žilina (hereinafter also referred to as the Company) pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of the European Union (hereinafter also referred to as the Regulation). The Company is the controller of personal data pursuant to Article 4 point 7 of Regulation (EU) 2016/679 of the European Parliament and of the Council.
This Policy is issued in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as the Regulation or GDPR).
This document will be updated regularly. The current version can always be found at https://buildoapp.com/privacy_policy_en/, previous versions are available on request from the Company at the contacts listed in this Policy.
Personal data is any information relating to an identifiable private person. Personal data may be processed by the Company in connection with the provision of services and the sale of goods. However, we only process such data to enable us to provide you with a professional service and to enable us to fulfill our contractual obligation in relation to you and to comply with our legal obligations and protect our legitimate interests. Depending on the nature of the situation, we process data about, for example, representatives, including members of statutory bodies and employees.
Such data is necessary for the conclusion and performance of the contract. In particular:
Among the technical data, we include your IP address among the identification data.
The data is necessary for contacting the data subject. This includes:
This data arises in the course of communication related to the provision of services between the company. This includes records of face-to-face communications with the customer, written and electronic communications with the customer. This data also includes data from the use of our website and app. Your preferences enable the company to improve its services and offer you products that are tailored to you (personalisation).
In connection with the provision of electronic services, our systems process data related to the provision of the services themselves. Without them, it would not be possible to provide the services. This data is also processed to resolve any disputes arising from the provision of the services.
The scope of the data processed depends on the purpose of the processing. For some purposes, data may be processed directly on the basis of a contract, legitimate interest or law (without consent), for others only on the basis of consent.
In order for us to enter into a contract with you and provide our services, we need to know your basic information. Providing the personal data necessary for the performance of the contract, the fulfilment of legal obligations and the protection of legitimate interests is thus essential. Without the provision of personal data for these purposes, it would not be possible to provide the services. Processing for the performance of a contract and the fulfilment of legal obligations cannot therefore be refused.
In order for you to operate your personal account in Buildo, we manage your access data - in particular login names and passwords, which are used to securely authenticate the person you are logging in to.
As part of the simplification and functionality of the Buildo app, the company allows you to enter into any contract within the app using a biometric signature.
In particular, the following key sub-purposes:
Personal data for these activities are processed to the extent necessary for the fulfilment of these activities and for the period necessary to achieve them or for the period directly provided for by law.
We only keep your data for as long as is strictly necessary. We keep it for 10 years for the purpose of fulfilling our legal obligations, for the duty of prudence and due professional care, in particular with regard to the statutory limitation periods, and for a further 10 years thereafter. The long-term nature of some claims, such as the long-term duration of a licence, extends the need for the length of processing for at least the duration of copyright protection.
According to the VAT Act, the company is obliged to keep tax documents and records with detailed data relating to the selected services provided for 10 years from the end of the tax period in which the supply took place.
In addition to the above archiving rules, the Company retains most data for longer periods of time in light of the Company's obligations of prudence and professional care, particularly in the event that it is necessary to submit evidence in legal proceedings.
In connection with your use of products and services, the Company may use your contact information to send you information regarding those products and services you use. This is primarily to create a suitable offer of the Company's products and services.
If the subject has cookies enabled in his/her web browser, we process behavioural records about him/her from cookies placed on websites operated by the company, for the purpose of ensuring better internet traffic and for the purpose of the company's internet advertising.
The company uses Google Analytics to improve and simplify the use of the website and for marketing purposes.
A cookie is a short text file that is sent to your browser by a website you visit. It allows the website to record information about the Data Subject's visit, such as preferred language and other settings. Cookies serve a number of purposes. For example, they are used to store your secure search settings, to select relevant advertisements, to track the number of visitors to the site, to facilitate the registration of new services, to protect your data or for storage. You can find out more about cookies at https://policies.google.com/technologies/types?hl=sk.
Website users may refuse the use of cookies by selecting the appropriate setting in their browser, but if they do so, the Data Subject should be aware that they may not be able to take full advantage of all the features of this website. You can also prevent the collection of data from Google by downloading and installing the browser plug-in software https://tools.google.com/dlpage/gaoptout.
Each user, i.e. also the customer, determines in the settings of their PC or browser whether the browser should allow the website to store cookies on the end device. This setting can be regarded as consent to the processing of personal data. The browser is an instrument for mediating consent.
The Company is entitled to market the Services and services related to the Services (including Value Added Services) on the basis of generally applicable law and the Consent. The Company is entitled to choose the form in which such marketing activities are carried out and is entitled to carry them out through third parties. The Company shall be entitled to contact the Subscriber via postal address, electronic mail address, subscriber number, mobile application, or other similar means to inform about its new Services and products in order to carry out marketing activities.
The Company uses professional and specialised services of other entities in the performance of its obligations and duties under contracts, in particular the recovery of receivables, the activities of experts, lawyers, auditors, the management and solution of IT systems, internet advertising or commercial representation, bookkeeping, information for financial operations for the purpose of making payments, the performance of analytical services. The company will notify the specific recipient, if interested, of the request.
The processors are companies established both in the Slovak Republic and in a Member State of the European Union. The personal data is not further handled in any way, we do not sell or redistribute personal data for any purpose other than as stated in this policy.
The Company, in the performance of its legal obligations, transfers personal data to the administrative authorities and authorities provided for by the applicable legislation, if necessary.
Under the Regulation, the data subject has the following rights if he or she is an identifiable person and identifies himself or herself to the company.
According to Article 15 of the Regulation, the data subject has the right of access to personal data. You have the right to ask the company to confirm whether we process personal data concerning you and to obtain an overview of this data from us. You are also entitled to be informed about the purposes of processing, the categories, the intended storage period, the source of the data and with whom we share it, your rights to rectification, erasure, restriction of processing, the possibility to object to us or lodge a complaint with a supervisory authority. , and about whether automated decision-making and related information occurs.
Under Article 16 of the Regulation, the data subject has the right to rectification of inaccurate personal data. If the personal data concerning you is incorrect or inaccurate, we will, of course, rectify it at your initiative. We may also supplement the data at your request.
According to Article 17 of the Regulation, the data subject has the right to erasure of personal data concerning him or her. In the following cases:
However, we would like to point out that the erasure of data will not and cannot be carried out by the company if the processing of the data is necessary, among other things:
According to Article 18 of the Regulation, the data subject has the right to restrict processing until the complaint is resolved if he or she contests the accuracy of the personal data, the grounds for processing or objects to processing.
According to Article 19 of the Regulation, the data subject has the right, if he so requests, to be notified by the company in the event of rectification, erasure or restriction of the processing of personal data carried out in accordance with Article 16, Article 17(1) and Article 18.
According to Article 20 of the Regulation, the data subject has the right to the portability of data relating to him or her which he or she has provided to the controller in a structured, commonly used and machine-readable format and the right to request the company to transmit those data to another controller.
Pursuant to Article 21 of the Regulation, the data subject has the right to object to the processing of his or her personal data on the grounds of legitimate business interest.
Consent to the processing of personal data for marketing and commercial purposes can be withdrawn at any time. The revocation must be made by an express, intelligible and specific expression of will, with possible identification of the data subject.
The data subject has the right to contact the Office for Personal Data Protection, located at Hraničná 4826/12, 820 07 Bratislava, if you feel that your personal data protection rights have been violated.
This Privacy Policy is issued on 1.1.2024.