1. Basic Provisions
  2. Purpose and Legal Basis for Processing Personal Data
  3. Storage of Personal Data
  4. User Rights
  5. Cookies
  6. Final Provisions


When using the services of the internet domain and and all its components, personal data is understandably processed. The right to privacy and data protection are important to us. In the following lines, you will read how and for what purpose personal data is processed, who has access to it, how it is protected, and what are the rights of the data subject in relation to the processing of personal data.Operator: The operator of the website, the service provider, and the data controller is the company Civitta Slovakia, a.s., Bottova 2/A, 811 09 Bratislava – Staré Mesto district, Company ID: 36 740 454.Data Protection Officer: The operator has appointed a Data Protection Officer to oversee data protection, who can be contacted via the email address or the correspondence address of the operator provided in these principles.


The collection and processing of personal data concerning the data subject/User are necessary for access to the services of the internet domains and The Operator processes the data based on the contractual relationship between it and the User of the service in accordance with the provisions of Act No. 18/2018 Coll. on Personal Data Protection and with the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of personal data (GDPR).The Operator processes only the personal data provided by the User. The User declares that all personal data provided are true, accurate, current, correct, and complete. The Operator assumes no obligation to verify this information. If any information provided to the Operator is false, inaccurate, outdated, or incomplete, or if the Operator has reasonable suspicion that such information is false, inaccurate, outdated, or incomplete, it has the right to suspend or terminate cooperation and refuse any and all current or future use of the Services (or any part thereof).Scope of processed personal data: The Operator collects such an extent of data as is necessarily required for the operation of the services of the internet domains and and their use by the User, and for communication with the User of the service.The User provides the Operator primarily with the following personal data, which the Operator processes:

  • Name and surname / Company name
  • Delivery address / Company headquarters address
  • Billing address
  • Email / login
  • Telephone
  • Photograph
  • IP address
  • Cookies

Purpose of processed personal data: The Operator collects and processes personal data provided by the User for the following purposes:a) Provision of services and fulfillment of contractual obligations For the purpose of providing services and fulfilling contractual obligations, the Operator may process personal data provided by the User or that the User will provide in the future by using the website or its services. This processing of personal data is necessary for the fulfillment of contractual obligations between the User as the data subject and the Operator.b) Sending newsletters and commercial or other marketing information If the User explicitly subscribes to receive newsletters and commercial or marketing announcements, the Operator is authorized to send these announcements and information to the email address provided by the User. The User can withdraw consent to receive newsletters and commercial or marketing information at any time. The processing of personal data for sending newsletters, commercial, and marketing announcements is necessary for the purpose of the Operator's legitimate interests. For Users registered on the Operator's website, the Operator is authorized to send newsletters to these Users based on the legitimate interest in marketing communication regarding news related to startups and startup business activities organized by the Operator and/or its business partners in this regard. The User has the right to unsubscribe from such emails. If the User does not unsubscribe from receiving such emails, they will be sent for the duration of the legitimate interest of the Operator and/or its business partners in such communication.c) Protection of the Operator's rights The Operator is authorized to process the User's personal data necessary to assert possible claims of the Operator and also for the purpose of protecting its rights. Such processing is a legitimate interest of the Operator.


Retention period of personal data: Personal data is retained for a maximum of 10 years in accordance with applicable legislation, or otherwise for the period necessary to exercise the rights and obligations arising from legal relationships between the Operator and the User, or until the User withdraws consent to the processing of their personal data.Who has access to the data: Access to personal data is restricted to a narrowly defined group of individuals authorized to process the data, primarily system administrators. The processing of personal data is also carried out through a contractually authorized processor. This is a company providing IT support for the operation of electronic services, which also guarantees the security of processed data.The Operator is also authorized to transfer personal data to other processors (subcontractors of the Operator) who provide marketing and other support services, always exclusively in accordance with the above-mentioned purposes. In the case of payment transactions through a payment gateway, personal data is processed directly by a third party ensuring payment transfers. The personal data of the data subjects is not transferred to third countries, nor is profiling conducted.Security of personal data: The Operator has taken appropriate technical, organizational, and security measures to prevent misuse, loss, destruction, or unauthorized access to personal data. Despite these measures, complete security cannot be guaranteed.We advise you to be particularly cautious when sending personal data over the internet. It is not recommended to connect to unverified and public Wi-Fi networks, and it is advised to use devices that are secured, have updated software, and antivirus protection.


User Rights:The User as a data subject has the following rights regarding the processing of their personal data:

  • the right to access their personal data and the right to obtain a copy of their personal data
  • the right to rectify incorrect, incomplete, or outdated personal data
  • the right to request the erasure of personal data when the purpose of processing has already been fulfilled
  • the right to restrict the processing of personal data
  • the right to data portability in cases provided by law
  • the right to object to the processing of personal data by the Operator
  • the right to lodge a complaint with the Office for Personal Data Protection

The User can exercise these rights with the Operator at the address Civitta Slovakia, a.s., Bottova 2/A, 811 09 Bratislava, or via email at


When using the website and possibly our other services, small identification files called cookies may be stored on the computer (by the Operator or with their consent by a third party). These files allow the collection of certain information from the User's device, based on which the Operator can improve the functionality of the Website and its Services. The Operator does not use any of these identification files to identify the User as an individual.The User can allow, disable, or delete cookies already stored on their computer through their web browser settings. If the User has cookies enabled in their web browser and visits the website, they thereby consent to the use of cookies according to these policies.To the extent that cookies contain personal data, their processing is governed by the rules relating to the protection of personal data under these policies.


By checking the consent box through the internet form and/or actively using the website or services, the User confirms that they are familiar with these policies and fully accept them. These policies are governed by the legal regulations in force in the territory of the Slovak Republic.The terms for the collection, processing, and protection of personal data are subject to ongoing changes. All updates to these terms are published on the service provider's / Operator's website. Each update becomes effective on the date of its publication on the service provider's / Operator's website, unless stated otherwise.