How we handle personal data

The Users acknowledge that the Operator processes the personal data provided by them for the purpose of operating the Platform in accordance with the legal provisions relating to the processing and protection of personal data, in particular, but not exclusively, Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data and repealing Directive 95/46/EC (General Data Protection Regulation) (hereinafter referred to as "GDPR"), Act No. 110/2019 Coll., on the Processing of Personal Data, as amended, and any judicial or administrative interpretation of legislation relating to the processing and protection of personal data, any guidelines, codes of conduct or approved certification mechanisms issued by the Data Protection Authority.

Act No. 110/2019 Coll., on the Processing of Personal Data ↗

Details regarding the processing of Users' personal data by the Operator are set out on the Platform.

Personal data means any information about an identified or identifiable natural person, in particular a User or their contact person.

An identifiable natural person is a natural person who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, a network identifier or one or more specific elements of the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

The User acknowledges and agrees that the Operator will process the personal data provided to the following extent:

1. first and last name,
2. email address,
3. telephone number,
4. other identification and address data provided by the User.

The Operator only processes personal data provided by the User.

The processing of personal data by the Operator is lawful, as at least one of the following conditions is always fulfilled:

1. the User has given consent to the processing of personal data, or has secured the consent of other relevant persons;
2. the processing of personal data is necessary for compliance with a legal obligation to which the Operator is subject;
3. the processing of personal data is necessary for the purposes of the legitimate interests of the Operator.

The Operator processes personal data for the following purposes:

1. For the purpose of providing services and fulfilling the Operator's contractual obligations, the Operator may process personal data provided by the User or provided in the future when using its services. This processing is necessary for the performance of the contract.
2. The Operator may process personal data necessary to assert possible claims and to protect the Operator's rights. Such processing constitutes a legitimate interest of the Operator.

The Operator stores personal data for the period necessary to provide services and fulfil contractual obligations.

Personal data processed in order to protect the Operator's rights and assert its claims are retained for as long as the relevant legitimate interest lasts.

The Operator retains the personal data provided by the User only for the period necessary to exercise the rights and obligations arising from the legal relationship between the parties, or until consent to the processing of personal data is withdrawn, where such withdrawal implies an obligation for the Operator to delete the personal data.

After this period, the personal data are deleted by the Operator.

The personal data provided by the User may be transferred by the Operator to other processors who supply consulting, marketing, technical or other related services to the Operator, always in accordance with the purposes of processing set out above.

Based on the rules set out in the GDPR, the data subject has in particular the right to:

1. access their personal data;
2. rectification of personal data or, where appropriate, restriction of their processing;
3. erasure of personal data;
4. object to the processing of personal data;
5. portability of their personal data;
6. withdraw consent to the processing of personal data.

In order to exercise any of these rights, the User may contact the Operator by email: info@impactso.com

The Operator will provide Users with assistance in exercising their rights.

The Operator declares that it has taken appropriate technical and organizational measures to secure the personal data provided by the User. The Operator further declares that only authorized persons have access to the personal data provided.

The use and transfer of information received through Google APIs to other applications will comply with the Google API Services User Data Policy, including the Limited Use requirements.