Draft, awaiting legal review
This text is a working draft that has not been reviewed by a lawyer and is not binding. The approved wording will replace it before sales open.
Privacy policy (GDPR)
Last updated
This draft describes how we work with personal data. A lawyer will fill in the details in square brackets together with the operator.
Controller
The controller of account users’ personal data is [company name, ID number, registered office]. Contact: podpora@damedoklad.cz.
What data we process
- Account data: name, email, password hash, and two-factor settings if used.
- Company data: name, IČO, DIČ, address, bank details.
- Operational data: sign-in and request records, IP address.
- Data you enter in the app: documents, contacts and, for payroll, employee data. For these we are a processor; see the data processing agreement.
Why, and on what basis
| Purpose | Legal basis |
|---|---|
| Providing the service | Performance of a contract |
| The operator’s invoicing and accounting | Legal obligation |
| Security and abuse prevention | Legitimate interest |
[To add and verify legal bases and retention periods.]
Who we share data with
Subprocessors may process data to run the service. The list will be part of the data processing agreement. [To add: transfers outside the EU, if any.]
Your rights
You have the right to access, rectification, erasure, restriction of processing, portability and objection, and you can file a complaint with the Czech Office for Personal Data Protection. Legal duties to keep accounting records may prevent erasure.