Personal data protection

1. What data we process

• name and surname, e-mail address and telephone number,
• chosen term, time zone and place of consultation,
• the type of client, the topic of the consultation, a brief description of the situation and other notes you send,
• invoicing data, in particular title or name, ID number, VAT number or VAT number, billing address and data required for issuing a document,
• data on confirmation, change, cancellation or rescheduling of the reservation,
• technical data necessary for the safe operation of the site and service, such as IP address, request time, browser type and error logs.
• payment data, in particular the amount paid, currency, payment status and transaction identifier; the company does not process the full payment card data,
• record of confirmation of reservation conditions,
• a record of the consumer's explicit request and consent to start providing the service before the expiry of the withdrawal period,
• information about marketing consent, only if the client voluntarily grants it.

Do not enter a social security number, a copy of an identity document, login details or special categories of personal data in the field to describe the situation, unless we explicitly request it from you in a secure way.

2. Purposes and legal basis of processing

3. Is the provision of data mandatory?

We need data marked as mandatory to create and manage a reservation, communicate and issue an accounting document. If you do not provide them, we may not be able to confirm or fulfill the reservation. You may not provide data in optional fields.

4. To whom we provide the data

We make data available only to the extent necessary to fulfill the stated purposes:

• Cal.eu / Cal.com, Inc. as the provider of the reservation platform and related notifications,
• Microsoft 365 and Outlook for calendar synchronization, organizational invitations and email communication,
• Webflow, Inc. as provider of website hosting and embedded booking interface,
• providers of e-mail, accounting, IT and security services who process data according to our instructions or under their own legal responsibility,
• public authorities, if required by law.
• Stripe as a payment service provider integrated in Cal.eu,
• Cal Video to conduct an online consultation, if the client chooses the online form,
• Mailchimp only for clients who have voluntarily granted marketing consent.

Payment is made through the Stripe service integrated in Cal.eu. Full payment card data is entered by the client directly into the secure payment interface of the payment provider and the company does not have access to them.

5. Transfers outside the European Economic Area

Cal.eu states that the European version of the service stores and processes planning data in the European Union. With other providers, processing may occur outside the European Economic Area. We carry out such a transfer only when the conditions of the GDPR are met, for example based on an adequacy decision, standard contractual clauses or another permissible mechanism. The providers' current information is available in their privacy policies and contractual documentation.

6. How long we keep the data

• booking data and related communication, as a rule, for the duration of the relationship and no more than 4 years after its end, if longer retention is not necessary for the exercise or defense of legal claims,
• invoices and accounting records for the period required by law, usually 10 years following the year to which they relate,
• records on the exercise of rights and consents for the time necessary to process the request and prove the fulfillment of obligations,
• technical records according to the security and retention rules of the respective provider.
• Data on marketing consent is kept until it is revoked; the record necessary to demonstrate the granting or withdrawal of consent may be kept for a reasonable period of time to protect the company's legal claims.

7. Your rights

Under the terms of the GDPR, you have the right to data access, rectification, erasure, restriction of processing, data portability, to object to processing based on legitimate interest and to withdraw consent if the processing is based on consent. You also have the right to file a complaint with a supervisory authority.

Send the request to office@tax-audit.sk. We may request reasonable identity verification. We will respond to the request without unnecessary delay, usually within one month.

The supervisory authority is the Office for the Protection of Personal Data of the Slovak Republic, Galvaniho 7/B, 821 04 Bratislava, dataprotection.gov.sk.

8. Cookies and technical elements

The site may use necessary technical cookies and similar elements necessary for the safe operation of the reservation interface. We use optional analytics or marketing elements only to the extent and in a manner that allows for valid consent, if required by law.

9. Changes to this information

If we change the purposes, providers or other material circumstances of the processing, we will publish the updated wording on this page and indicate the effective date.