Privacy Policy
Effective date: 13th August 2025
1. Introduction
OWASmooth s. r. o., with its registered office at Narcisová 410/5, 040 11 Košice, Slovakia, registered in the Business Register of the City court Košice, Section: Sro, Insert No.: 62007/V (“OWASmooth”, “we”, or “us”), is committed to protecting the personal data of:
- Customers who are provided with our services,
- Individuals who visit our website at owasmooth.io (“our website”),
- Individuals who contact us via forms or communication channels on our website,
- Individuals who receive marketing communications or newsletters from us,
- Job applicants.
We process personal data in accordance with Regulation (EU) 2016/679 (the “GDPR”) and Act No. 18/2018 Coll. on personal data protection (the “Data Protection Act”).
This Privacy Policy applies to:
- All our Customers who use our services under an Agreement with OWASmooth,
- Visitors to our website,
- Individuals who contact us through our website,
- Job applicants (all of the above are referred to collectively as “you”).
For the purposes of this Privacy Policy, “Services” means any products, software, applications, platforms, or solutions operated or provided by OWASmooth.
2. Data Controller
The controller of your personal data is:
OWASmooth s. r. o.
Email: [email protected]
Address: Narcisová 410/5, 040 11 Košice, Slovakia
3. Categories of Personal Data We Process
Depending on your relationship with us, we may process:
- Customer and business contact data – name, company, position, email address, telephone number, billing and delivery details, contractual information,
- Website visitor data – IP address, browser type, device information, pages visited, time spent on site, and cookie identifiers,
- Enquiry and communication data – messages you send us, contact form submissions, customer support requests,
- Marketing data – subscription preferences, engagement with newsletters and campaigns,
- Recruitment data – CV, cover letter, contact details, education, work history, references.
4. Purpose and Legal Basis of Processing
We process personal data only where we have a valid legal basis under the GDPR. The main purposes for which we process your personal data are:
- Providing and managing our services – We process your personal data to deliver the services you have requested, manage your customer account, and provide technical support. The legal basis for this processing is the performance of a contract to which you are a party, or taking steps at your request before entering into a contract (Article 6(1)(b) GDPR),
- Communicating with you – We may use your contact details to respond to your enquiries, arrange meetings, or otherwise correspond with you. This is based either on our legitimate interest in communicating with our customers and potential customers (Article 6(1)(f) GDPR) or, where required, on your consent (Article 6(1)(a) GDPR),
- Marketing and newsletters – If you have given us your consent, we may send you marketing communications, product updates, or industry news. You may withdraw your consent at any time (Article 6(1)(a) GDPR),
- Operating and securing our website, and analysing its use – We process certain technical data, such as IP addresses and browser information, to ensure our website functions properly, to detect and prevent fraud, and to improve user experience. This is based on our legitimate interest in maintaining the security and performance of our website (Article 6(1)(f) GDPR),
- Recruitment and hiring – When you apply for a position with us, we process your personal data to assess your application, arrange interviews, and make hiring decisions. This is necessary for taking steps prior to entering into an employment contract (Article 6(1)(b) GDPR),
- Complying with legal obligations – In some cases, we may need to process your personal data to comply with applicable laws, such as tax regulations or reporting requirements (Article 6(1)(c) GDPR).
5. Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Ensure proper functioning of the site,
- Improve performance and security,
- Understand visitor behaviour and preferences,
- Provide a better user experience.
Types of cookies we use:
- Essential cookies – required for core site functionality; these cannot be disabled in our systems,
- Performance cookies – collect anonymous statistics about how visitors use our website.
You can control or disable cookies in your browser settings. Please note that disabling certain cookies may affect the functionality of our website.
6. Data Retention
We keep personal data only for as long as necessary to fulfil the purposes for which it was collected or as required by law:
- Contract-related data: up to 10 years after contract termination,
- Marketing data: until you withdraw your consent,
- Recruitment data: typically 6 months unless you agree to a longer retention,
- Website logs and technical data: typically 1 year.
7. Data Sharing
We may share your personal data with:
- Trusted service providers and subcontractors necessary to deliver our services (e.g. hosting, analytics, CRM tools),
- Professional advisers such as solicitors, accountants, and auditors,
- Public authorities, if required by law.
All recipients are bound by confidentiality and data protection obligations.
8. International Data Transfers
If we transfer your personal data outside the European Economic Area (EEA), we will ensure that appropriate safeguards are in place, such as the Standard Contractual Clauses approved by the European Commission.
9. Your Rights
Under the GDPR, you have the right to:
- Access – obtain a copy of your personal data,
- Rectification – correct inaccurate or incomplete data,
- Erasure – request deletion of your personal data (“right to be forgotten”),
- Restriction – request limitation of processing in certain circumstances,
- Data portability – receive your data in a structured, commonly used, machine-readable format,
- Object – object to processing based on legitimate interest or direct marketing,
- Withdraw consent – withdraw consent at any time without affecting prior processing.
To exercise these rights, contact us at: [email protected].
10. Security Measures
We apply technical and organisational measures to protect personal data, including encryption, access controls, regular security assessments, and secure data storage systems.
11. Changes to This Privacy Policy
We may amend this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons. The updated version will always be available on our website with the effective date clearly shown.
12. Contact
OWASmooth s. r. o.
Email: [email protected]
Address: Narcisová 410/5, 040 11 Košice, Slovakia