If you are our customer, a newsletter subscriber or a website visitor, you entrust us with your personal data. We are responsible for protecting and securing it. Please familiarise yourself with this policy and your rights under the GDPR.
Who is the controller?
The controller is BOIT Cyber Security s.r.o., Company ID 17614261, with its registered office at Korunní 2569/108, Praha 10 – Vinohrady, 101 00, Czech Republic. We determine how personal data is processed, for what purpose, for how long and which other processors may assist us with processing.
Contact details
If you wish to contact us during the processing of your data, please use the details on the page Contact.
Our declaration
As the controller of your personal data, we fulfil the legal obligations required by applicable legislation, in particular the Czech Personal Data Protection Act and the GDPR.
- We process personal data only on a valid legal basis, in particular legitimate interest, performance of a contract, a legal obligation or consent granted.
- We fulfil our duty to provide information under Article 13 of the GDPR before starting to process personal data.
- We will enable you to exercise your rights and support you in doing so.
Scope of personal data and purposes of processing
We process personal data that you provide to us, primarily for the following purposes:
- Providing services and performing the contract: we need your email address and phone number to perform the contract.
- Accounting: we need billing details to issue and maintain records of tax documents.
- Marketing and newsletters: we use your email address, name and email engagement data to send commercial communications. We send these to customers on the basis of legitimate interest for 5 years after their last order; to others, only on the basis of consent, for 5 years after it is granted.
- Advanced marketing: only with consent may we send third-party offers or use your email address for remarketing and targeted advertising.
- Photographic documentation: from in-person events, such as training sessions and conferences.
We retain personal data for the duration of statutory limitation periods, unless the law requires a longer period or otherwise stated in a specific case.
Security and protection of personal data
We protect personal data using modern technology appropriate to the current state of technological development. We have adopted and maintain technical and organisational measures intended to prevent its misuse, damage or destruction.
Disclosure of personal data to third parties
Our employees and associates have access to your personal data. For operations we cannot perform ourselves, we use specialist platform and service providers for project management, direct marketing and accounting.
When selecting other processors, we require at least the same standards of security and processing quality as we require of ourselves.
Data transfers outside the European Union
We process data within the European Union or in countries that ensure an adequate level of protection under a European Commission decision.
Your rights in relation to personal data protection
To exercise any of your rights, contact us through the page Contact.
- Right to information and access: you can ask us to demonstrate what data we process and why.
- Right to completion and rectification: you can request that incomplete or inaccurate data be updated.
- Right to restriction of processing: you can limit the scope of data or the purpose of its processing.
- Right to data portability: we will provide your data in a machine-readable format.
- Right to erasure: unless a legal obligation prevents it, we will erase your personal data from our systems and the systems of our subprocessors.
- Right to lodge a complaint: you can contact the Czech Office for Personal Data Protection.
Unsubscribing from newsletters and commercial communications
You can unsubscribe at any time using the unsubscribe link in each email we send.
Confidentiality
Our employees and associates are required to maintain confidentiality regarding personal data and security measures whose disclosure could compromise data security. Confidentiality continues after the contractual relationship ends. Without your consent, personal data will not be disclosed to any other third party, unless otherwise required by law.
This personal data processing policy has been effective since 10 August 2020.