All Articles

Privacy Policy

Personal Data Controller:

Launify s.r.o.

ID No.: 19380038

Registered office: Husova 763/30, 737 01 Český Těšín

Registered in the Commercial Register kept by the Regional Court in Ostrava, Section C, Insert 92723

Information on the processing of personal data of contractual partners

1. Introductory Provisions

This information is intended for all persons who enter into a contractual relationship with Launify s.r.o. (hereinafter referred to as the "controller") within the scope of the Launify service. The service provides an autocomplete and data validator for forms on websites operated by these persons (hereinafter referred to as "partners").

Partners are considered natural persons who enter into a contractual relationship with the controller as users of the Launify service, as well as natural persons who act on behalf of partners – legal entities – within the use of the service.

The controller processes information about partners provided upon entering into the agreement on the use of the service, in particular within the creation of a user account, to the extent necessary for contract performance and communication.

This document provides information on the processing of personal data pursuant to Article 13(1) and (2) of Regulation (EU) 2016/679 of the European Parliament and of the Council (hereinafter referred to as the "GDPR Regulation").

2. Contact Details and Data Protection Officer

Data Protection Officer (DPO): The conditions for mandatory appointment of a Data Protection Officer pursuant to Article 37 of the GDPR Regulation are not met by the controller.

3. Purposes and Legal Bases for Processing

Purposes of personal data processing:
  1. Entering into and performing the contract with the partner
  2. Managing the partner's user account
  3. Communication with partners via email and other electronic communication means
  4. Issuing and archiving accounting documents
Legal basis for processing:
  1. Performance of a contract: under Article 6(1)(b) of the GDPR Regulation – processing is necessary for the performance of a contract to which the data subject is party.
  2. Compliance with a legal obligation: under Article 6(1)(c) of the GDPR Regulation – processing is necessary for compliance with legal obligations (in particular pursuant to Act No. 563/1991 Coll., on Accounting).
  3. Legitimate interest: under Article 6(1)(f) of the GDPR Regulation – processing is necessary for the purposes of the legitimate interests pursued by the controller.

Legitimate interests of the controller:

A legitimate interest is the controller's interest in performing or concluding a contract with an organization on behalf of which the relevant data subject communicates with the controller.

Furthermore, the legitimate interest of the controller includes communicating with partners (natural persons) or their representatives and maintaining records of their contact details.

4. Recipients of Personal Data and Transfers to Third Countries

Personal data of partners may be transferred to employees of the controller who perform activities related to the performance of the contract.

Depending on the nature of the contractual relationship, data may be provided to third parties acting as personal data processors (in particular external providers of server hosting, accounting, or legal services).

Transfer of personal data to third countries: As part of maintaining the user account database, personal data may be transferred to the USA solely for the purpose of storage on the server hosting provider's server (company Hetzner Online GmbH). Transfers are based on standard contractual clauses pursuant to Article 46(2) of the GDPR Regulation.

5. Personal Data Retention Period

The controller retains personal data in full for the duration of the contractual relationship with the partner (in particular for the duration of the user account's existence).

After the termination of the contractual relationship, the controller retains data to the extent and for the period specified by applicable legal regulations (in particular Act No. 563/1991 Coll., on Accounting).

In exercising its legitimate interest, the controller retains documents regarding contract performance for the duration of statutory limitation periods under civil law regulations, or until the purpose of communication is fulfilled.

Upon expiry of the archiving periods, the controller shreds documentation, deletes electronic data from all systems, or performs irreversible anonymization thereof.

6. Rights of the Data Subject

As a data subject, the partner has the following rights vis-à-vis the controller:

  1. Right of access to personal data
  2. Right to explanation and rectification of personal data
  3. Right to erasure of personal data (right to be forgotten)
  4. Right to restriction of processing
  5. Right to object to processing
  6. Right to lodge a complaint with the Office for Personal Data Protection
  7. Right not to be subject to automated decision-making, including profiling

Information on rights that do not apply to the partner:

Since the processing is not based on consent nor carried out by automated means, the right to data portability pursuant to Article 20 of the GDPR Regulation does not apply to the partner. For the same reason, the right to withdraw consent cannot be exercised.

Method of exercising rights:

The partner may exercise their rights in the following ways:

  1. By written request with an officially verified signature delivered to the controller's registered office address
  2. Electronically via the partner's data box
  3. By email sent from the address registered within the Launify service

In the event of exercising rights in another form, the controller is entitled to require additional verification of the applicant's identity in order to protect the provided information.

7. Voluntariness of Data Provision and Automated Decision-Making

Voluntariness of data provision: Entering into a contractual relationship is voluntary for the partner. However, if the partner intends to enter into a contractual relationship, providing personal data to the required extent is a necessary condition for providing the Launify service.

Automated decision-making: The controller does not carry out any automated decision-making or profiling based on the received personal data within the meaning of Article 22(1) and (4) of the GDPR Regulation.