Privacy Policy

The purpose of this Privacy Policy is to inform you about how MTS, spol. s r.o. processes your personal data, and about your rights according to the data protection legislation.

1. Who is responsible for the processing of your personal data?

Company: MTS, spol. s r.o.

Comp. ID No.: 36 001 368

Registered office: Krivá 53, 027 55, Slovak Republic

Website: www.mts.sk

E-mail: martin.branicky@mts.sk

Should you have any questions about data protection and our privacy policy, please contact our data protection officer Martin Branicky via e-mail at martin.branicky@mts.sk.

2. What kind of information do we collect?

Website visitors

When you visit our website, information about your access is collected by cookies and other tracking tools. Such data include your IP address, country, city, and time of access, your device, browser, and operating system, its language, the pages or features of our website you accessed (URLs, videos), BTN information, content, and the terms of access. This access data is stored for up to one year and may be assigned to a user account created at a later point.

Registered users

If you sign up or log in with us; we collect the information about your user account, such as your name, e-mail address, password or user ID. When sending you a notification e-mail; we collect the information on the open and click rate. When you opt in for a payment, we also collect other personal information such as first name, surname, telephone number, and your company information, such as your company name, address, city, postcode, country, company ID number, and VAT number.

Software users

When you log in for the first time and download our software; we collect additional information on this action, such as whether you downloaded the software, the download time, and Intercom preferences. When you install our software; we collect the information on your hardware ID, license, and activation key. When you execute the compiler; we collect the information about the version, geographic location, hardware, and exceptions (if and when they occur).

We do not process any special categories of personal data — whenever possible, we only collect anonymized data.

3. How do we use your personal data and what are the processing grounds?

When processing your personal data; we act in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as “GDPR“) and other relevant legislation.

Our primary purpose for collecting the data is to improve the quality of our products and services. We will only use your personal data if we have a lawful basis for doing so. The lawful basis for processing is as follows:

  1. We process your personal data to meet our contractual obligations, or to take steps prior to entering into a contract (Art. 6 (1) (b) of GDPR), i.e. in order to provide you with our products and services.
  2. Processing of personal data might also be necessary for compliance with legal obligations related to our business activity, such as accounting (Art. 6 (1) (b) of GDPR).
  3. We further process your personal data for the purposes of our legitimate interests (Art. 6 (1) (f) GDPR), which particularly include marketing, operation, and improvement of our products and services This may further include security and protection against fraud.

Should we need to process your data for a purpose not listed above, or should the processing diverge from your reasonable expectations as a customer; we will inform you or, where necessary, will ask you for your consent.

4. How and with whom do we share your personal data?

Within our company, only those persons have access to your personal data who need them to carry out their tasks, such as operation, the improvement and provision of our products and services, marketing, or customer support.

In order to meet some of our contractual or legal obligations; we use the services of external service providers. Such providers include:

  1. Hosting and database providers (Websupport, Superkoders)
  2. Google services (Google Tag Manager, Google Analytics, Youtube)
  3. Support, onboarding and e-mail provider (Intercom)
  4. Accounting and payment processing providers (Fakturoid, Stripe)

We might also share personal data when it is necessary to comply with applicable law, or respond to valid legal process, including from law enforcement or other government agencies.

5. What rights do you have regarding your personal data under GDPR?

Upon your request, we will inform you of which whether and what kind of personal data we process, and provide further information on it (Art. 15 of GDPR). You also have the right to rectification (Art. 16 GDPR), the right to erasure (‘right to be forgotten’) (Art. 17 of GDPR), the right to restriction of processing (Art. 18 of GDPR), and the right to data portability (Art. 20 of GDPR). You also have the right to withdraw your consent at any time, if we are processing your personal data based on your consent. Please note, however, that this will not affect the lawfulness of the processing of the past, based on the consent before the withdrawal. It will not affect the processing of the data which GDPR allows us to process without consent.

You have the right to object, on grounds relating to your particular situation, to the processing of your personal data for the purposes of our legitimate interests. We will then no longer process your personal data, unless we demonstrate compelling legitimate grounds for the processing that overrides your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims (Art. 21 (1) of GDPR). Where your personal data are processed for direct marketing purposes; you have the right to object at any time to such processing, and you do not have to provide any reason (Art. 21 (2) of GDPR).

You can contact us at any time for these purposes, or in case you have any questions (see the contact details above). We will take action on your request as soon as possible; in any event, we are obliged to act within the legal deadline (as set out particularly in Art. 12 of GDPR).

You also have the right to lodge a complaint with the supervisory authority of your country, if you believe your rights with respect to your personal data have been breached.

6. How long do we retain your personal data?

We retain your personal data for as long as you have an open account with us, or as otherwise necessary, to provide you with our products or services.

After the end of our contractual obligations, we might still use your personal data to ask for your feedback or to inform you about related products or services (direct marketing). The data, in this case, are retained for as long as this information is relevant to you and you have not objected to such use (as we noted above, you can object to such use at any time).

To improve our products and services; we analyze anonymized data about our customers, products, and marketing.

In some cases, we retain your personal data for a longer period, if doing so is necessary to comply with our legal obligations, resolve disputes, collect fees owed, or is otherwise permitted or required by an applicable law, rule, or regulation. This includes legitimate business purposes and financial record keeping.

7. Will your personal data be transferred to third countries or international organizations?

We do not plan any transfer of your personal data to third countries or international organizations, except for the possible transfer when using the services of the external service providers listed above.

8. Are you obliged to provide your personal data?

Provision of your personal data is based entirely on your decision and your interest in our products and services. We need your personal data to meet our obligations when providing our products and services.

9. Does automated individual decision-making, including profiling, affect me?

We do not use automated individual decision-making, including profiling.