datok

Privacy Policy (GDPR)

General Data Protection Regulation (GDPR) Privacy Policy

The company OmNexis s.r.o., Company ID: 02800888, registered seat: Pražská 69/17, 273 43 Buštěhrad, Czech Republic, registered in the Commercial Register kept by the Municipal Court in Prague, Section C, File 223765, email: info@omnexis.com (hereinafter "Controller"), processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR) and Czech Act No. 110/2019 Coll., on Personal Data Processing.

1. Categories of Processed Personal Data

We only process categories of personal data strictly necessary to provision the service safely: name, email address, country of residence, subscription metadata and transaction references from our payment provider (Paddle), IP addresses, connection and access logs, and necessary security and technical cookies. We never receive or store your full card details — you enter them directly with our payment provider, Paddle.

2. Purposes and Legal Bases for Processing

Personal data is processed for the following purposes:

  • Performance of Contract (Art. 6(1)(b) GDPR): Registering and maintaining your user account, delivering web application features, processing recurrent billing transactions through our payment provider (Paddle), and verifying subscription status. Email is a contractual requirement; without it, account creation is impossible.
  • Compliance with Legal Obligations (Art. 6(1)(c) GDPR): Fulfilling tax, bookkeeping, and invoice requirements under applicable laws of the Czech Republic.
  • Legitimate Interests (Art. 6(1)(f) GDPR): Ensuring system security and integrity, troubleshooting bugs, preventing fraud, and delivering customer support.
3. Data Retention Period

Personal data is retained for the active duration of the contract (the active user account). Upon account deletion, records are kept for the period required by statutory accounting, archiving, and tax rules of the Czech Republic (typically 10 years following the end of the tax year).

4. Recipients and Third Country Transfers

We do not sell your data or disclose it to unauthorised parties. Payment processing, invoicing and VAT remittance are handled by Paddle.com Market Ltd (United Kingdom) acting as Merchant of Record — the reseller of record toward you and an independent data controller for payment purposes. Transfers of personal data to the United Kingdom rely on the European Commission's UK adequacy decision; Paddle's onward sub-processors are covered by Standard Contractual Clauses (SCCs). See Paddle's privacy notice at paddle.com for details.

5. Rights of Data Subjects

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access by the data subject (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure / Right to be forgotten (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to object to processing (Art. 21 GDPR)

You can exercise these rights by email to info@omnexis.com. If you believe your personal data is processed unlawfully, you have the right to lodge a complaint with the Office for Personal Data Protection (seat: Pplk. Sochora 27, 170 00 Prague 7, Czech Republic, website: https://www.uoou.cz).

Terms of Service Privacy Policy Cancellation & Refund Pricing ← Back to Datok