Privacy Policy

1. IDENTIFICATION DATA

The personal data controller is Opium.systems s. r. o., with registered office at Jeruzalemská 16/A,
917 01 Trnava, Slovak Republic, ID number: 52 744 779, registered in the Commercial Register of the District
District Court Trnava, division: Sro, file number: 45582/T (hereinafter referred to as the „operator“).
Operator contact details:
email: ahoj@opiumsystems.sk
tel.: +421 911 209 609
In case of questions regarding the protection of personal data, the data subject may contact
operator at the email address: ahoj@opiumsystems.sk.

2. PROCESSING OF PERSONAL DATA

Personal data is processed for the purpose of communicating with the client, handling inquiries, and providing
services and the performance of rights and obligations arising from a pre-contractual or contractual relationship between
the data subject and Opium.systems s. r. o.
This primarily concerns the following personal data: first name and surname, email address, telephone number, name
companies and the content of the message or inquiry sent via the contact form or
any form of communication.
The legal basis for the processing of personal data is:

• fulfillment of pre-contractual relations and, if applicable, fulfillment of the contract according to Article 6 Paragraph 1 Letter b
  GDPR, and the fulfillment of the controller's rights and obligations under Article 6(1)(c) of the GDPR,
• consent of the data subject pursuant to Article 6(1)(a) GDPR, in particular for the purpose of contacting and
  communications,
• the operator's legitimate interest pursuant to Art. 6(1)(f) GDPR, in particular for the purpose of
  direct marketing and improving services provided.
  The processing of personal data is necessary, in particular, for the purpose of responding to inquiries and providing
  information about services and building business relationships.
  The operator does not engage in automated individual decision-making, including
  profiling within the meaning of Article 22 of the GDPR.
  The operator will not use personal data for sending unsolicited commercial communications.
  (spam) without the prior consent of the data subject, unless permitted by applicable law
  regulations.
  The operator processes personal data only to the extent necessary for the given purpose and observes the principle
  data minimization.
  The controller ensures that personal data are processed lawfully, fairly and transparently.
  transparently in accordance with the principles of GDPR.

3. PERSONAL DATA STORAGE PERIOD

Personal data is processed for the period necessary to fulfill the purpose for which it was obtained, in particular for
handling the inquiry, communicating with the client, and potentially establishing a contractual relationship, namely
usually for a maximum of 2 years from the last contact.
If a contractual relationship is established, personal data may be processed for the duration of that
relationship and then for the period necessary for the performance of rights and obligations arising from the contract or
from the relevant legal regulations.
Personal data processed based on consent are kept until consent is withdrawn.
The data subject may withdraw their consent at any time, electronically via email
ahoj@opiumsystems.sk or by any other suitable means.
The data subject also has the right to request the erasure of their personal data by sending
requests to the email address: ahoj@opiumsystems.sk.

4. RECIPIENTS OF PERSONAL DATA

The recipients of personal data may include individuals and entities that ensure technical operation and
services related to the operator's activity, in particular:

• IT service providers, hosting providers, and cloud solution providers who ensure operations
  website, email communications, and internal systems,
• providers of software tools and systems (e.g., CRM, Microsoft 365, or others)
  platforms that the operator uses for customer communication and management,
• potential external collaborators or contractors providing services related to
  by the operator, to the extent necessary to fulfill the purpose of processing.
  All recipients of personal data are obliged to maintain confidentiality and process personal data
  exclusively in accordance with the operator's instructions and applicable legal regulations.
  The operator ensures that all processors have data processing agreements in place.
  personal data in accordance with Article 28 GDPR.

5. DATA SUBJECT RIGHTS

Under the conditions set out in the GDPR, the data subject has the following rights:

• Right to access personal data,
• The right to rectify inaccurate or incomplete personal data,
• right to restrict processing of personal data,
• right to erasure of personal data („right to be forgotten“),
• right to data portability,
• right to object to the processing of personal data.
  The data subject also has the right to withdraw their consent to the processing of personal data at any time.
  information, electronically via email to ahoj@opiumsystems.sk or by other suitable means.
  In the event that the data subject believes that their rights to protection have been violated
  personal data, has the right to lodge a complaint with the competent supervisory authority, which is the Office for the Protection
  personal data of the Slovak Republic.

6. SECURITY OF PERSONAL DATA

The operator undertakes to adopt and maintain appropriate technical and organizational measures to
ensuring the protection of personal data, particularly to prevent unauthorized access to
personal data, their modification, loss, destruction, or unauthorized access.
The operator also ensures that only authorized individuals have access to personal data.
persons who are bound by a duty of confidentiality and have been informed about the principles of personal data protection
data.
The operator has taken appropriate technical measures to secure electronic storage and
information systems, as well as organizational measures for the protection of personal data processed in
in list form.

7. COOKIES AND ANALYTICS

The operator's website may use cookies and similar technologies for the purpose of
security for its proper functioning, analytics, and improvement of the user experience.
Cookies are small text files stored on a user's device when visiting a website.
The operator may use:

• technical cookies essential for the functioning of the website,
• analytical cookies to obtain statistical data on website usage,
• marketing cookies (if used).
  The user has the option to set or reject cookies through their browser
  or cookie banners.
  The user can grant or revoke consent for the use of cookies through the cookie banner
  available on the website.

8. FINAL PROVISIONS

Personal data may be transferred to third countries outside the European Union in justified cases.
unions, especially when using cloud services from global providers (e.g., Microsoft).
The operator ensures that such a transfer takes place exclusively in accordance with GDPR, and that it
by using appropriate safeguards, such as standard contractual clauses or
appropriateness decisions.

9. SOURCE OF PERSONAL DATA

Personal data is obtained directly from the data subject through the contact form, email
communications or other communication channels.

9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

By submitting the contact form or by other means of communication, you confirm that you have
You have been informed of the personal data protection conditions and acknowledge them.
The operator reserves the right to amend these privacy policy terms at any time
primerane meniť alebo aktualizovať. Aktuálna verzia týchto podmienok je vždy zverejnená na
operator's website. This document takes effect on the date of its publication.