Privacy policy

1. Controller

1.1. The controller of personal data is Qintec a.s., Logistická 585/10, 919 26 Zavar, Company ID (IČO) 36 738 964, Tax ID (DIČ) 2022324887, VAT ID (IČ DPH) SK2022324887, registered in the Commercial Register of the District Court Trnava, Section Sa, Insert No. 10643/T.

1.2. Contact: qintec@qintec.sk, +421 2 3240 1217; finance department: +421 33 324 9730.

1.3. Requests concerning rights in the area of personal data protection may be sent to qintec@qintec.sk.

2. Who this information concerns

2.1. This information concerns visitors to qintec.sk, persons who contact Qintec, persons interested in training and training participants, customers and their contact persons, suppliers, business partners and other natural persons whose data Qintec processes in its own name as a controller.

2.2. Where Qintec processes personal data on behalf of a client when providing services, it acts to that extent as a processor and the conditions of the processing are governed by a separate contract or by a clause pursuant to Article 28 of the GDPR.

3. Principles of processing

3.1. Qintec processes personal data lawfully, fairly and transparently, only for specified and legitimate purposes, to an adequate and necessary extent, and for no longer than is necessary.

3.2. In the design of the website and of its processes, Qintec applies the principles of data minimisation and of data protection by design and by default pursuant to Article 25 of the GDPR.

3.3. Qintec adopts appropriate technical and organisational measures corresponding to the risk of the processing.

4. The qintec.sk website

4.1. The ordinary pages of qintec.sk do not contain a contact form. A visitor may contact Qintec in particular by e-mail or by telephone.

4.2. In the technical operation of the website, data necessary for delivering the content, securing the operation and protecting the website may be processed, in particular the IP address, the time of the request, the requested URL and technical or security data recorded by the server. The legal basis is the legitimate interest of Qintec in the secure and stable operation of the website pursuant to Article 6(1)(f) of the GDPR.

4.3. According to its current functional configuration, the website does not use analytical, marketing or profiling tools and does not contain automatically loaded map, video or social media plug-ins of third parties.

4.4. Before deploying any new analytical, marketing, profiling or similar technology, Qintec will assess its legal regime and, where necessary, update the information documents and the consent mechanism.

5. Contact and business communication

5.1. In e-mail or telephone communication, Qintec processes the data provided by the data subject, in particular the name, contact details, details of the company or job position, and the content of the communication.

5.2. Where the communication is directed towards concluding a contract with the data subject, the legal basis is steps taken prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR. In communication with contact persons of legal entities, or in ordinary business and organisational communication, the legal basis may be the legitimate interest of Qintec pursuant to Article 6(1)(f) of the GDPR in conducting business, contractual and organisational communication.

5.3. Data from enquiries are retained for no more than 3 months. Where it is apparent that no contract with a prospective customer will be concluded, the data are erased no later than at the end of the calendar month following the month in which they were obtained, unless another legal ground for their further retention exists.

6. Interest in training and participation in training

6.1. The website contains a form for expressing interest in training. Submitting the form is a non-binding expression of interest and does not in itself constitute an order or the conclusion of a contract.

6.2. After submission, the data entered in the form are transmitted to the web server, which delivers them via the Microsoft 365 service as an e-mail message to skolenia@qintec.sk and at the same time saves them to a file on the server. The data in that file are retained for no longer than the period stated in point 5.3; technical server records are processed in accordance with point 4.2. Once the message has been delivered, Qintec processes the data given in it in order to contact the interested person and to agree on the next steps. Subsequent communication, the conclusion of the contractual relationship and invoicing take place outside the web form.

6.3. The legal basis for processing the data provided at the request of the interested person with a view to negotiating training is steps taken prior to entering into a contract pursuant to Article 6(1)(b) of the GDPR. Where the interested person acts as a contact person of a legal entity, the legal basis may be the legitimate interest of Qintec pursuant to Article 6(1)(f) of the GDPR in communicating with the person interested in training and in preparing the relevant contractual relationship.

6.4. Consent is not used as the legal basis for processing the data necessary to handle the expression of interest and any subsequent conclusion or performance of a contract, where another appropriate legal basis exists.

6.5. Qintec does not maintain a separate long-term record of certificates or confirmations from training beyond the data that must be retained on another legal or contractual ground.

6.6. Data from an expression of interest in training are retained in accordance with point 5.3. Where a training contract is concluded, the data of participants and the related contractual and billing data are retained in accordance with point 7.2.

7. Contracts, orders and invoicing

7.1. Qintec processes identification, contact, contractual, billing and payment data necessary for the preparation, conclusion and performance of the contractual relationship, for invoicing, accounting and the protection of legal claims.

7.2. Depending on the circumstances, the legal basis is Article 6(1)(b), (c) or (f) of the GDPR. The data are retained for the duration of the contractual relationship and subsequently for the periods arising from accounting, tax, archiving and limitation rules.

8. Provision of services to clients

8.1. In service, implementation, support, monitoring or security services, Qintec may process the data of contact persons and other data necessary for the performance of a particular contract.

8.2. Where Qintec processes personal data on behalf of a client in a particular service, the scope, purpose, categories of data, security measures, sub-processors and the client's instructions are governed by Article 28 of the GDPR in the relevant contractual relationship.

9. Recipients of personal data

9.1. Authorised employees of Qintec a.s. have access to personal data to the extent necessary. Personal data may be made available, to the extent necessary, to providers or partners required for the particular process, in particular to providers of web hosting and IT infrastructure, e-mail and cloud services (including Microsoft 365), accounting, legal or security services and, in the case of relevant training, also to the partner GOPAS. Personal data are provided to public authorities where required by law.

9.2. Qintec does not provide personal data to third parties for their own marketing purposes.

10. Transfers outside the European Economic Area

10.1. Where, in connection with the use of service providers, personal data are transferred outside the European Economic Area, such a transfer is carried out in accordance with Chapter V of the GDPR and using the appropriate legal safeguards.

11. Cookies and similar technologies

11.1. According to its current technical configuration, the qintec.sk website does not use analytical, marketing or profiling technologies requiring the user's prior consent.

11.2. Should Qintec in the future deploy a technology whose use requires the user's prior consent, it will put in place the relevant consent mechanism and update the information on the technologies used.

12. Rights of the data subject

12.1. Under the conditions laid down by the GDPR, the data subject has in particular the right of access to personal data, the right to rectification, erasure, restriction of processing and data portability, the right to object to processing based on legitimate interest, and the right to withdraw consent where the particular processing is based on consent.

12.2. The data subject has the right to lodge a motion to commence proceedings with the Office for Personal Data Protection of the Slovak Republic.

12.3. A request may be exercised at qintec@qintec.sk. Qintec may verify the identity of the applicant to an appropriate extent.

13. Automated decision-making

13.1. In the ordinary operation of the website, in business communication and in the process of expressing interest in training, Qintec does not carry out decision-making based solely on automated processing which would produce legal effects concerning the data subject or similarly significantly affect them.

14. Changes to this information

14.1. Qintec updates this information where the manner or purpose of the processing of personal data, the technologies used or the applicable legal requirements change substantially.

14.2. The current version is published at qintec.sk. Previous versions are archived internally.