Dataflow kit and General Data Protection Regulation (“GDPR”)

The European Union (“EU”) General Data Protection Regulation (“GDPR”) replaces the 1995 EU Data Protection Directive. The GDPR strengthens the rights that individuals have regarding personal data relating to them and seeks to unify data protection laws across Europe, regardless of where that data is processed. Besides strengthening and standardizing user data privacy across the EU nations, the GDPR requires new or additional obligations from all organizations that handle the personal data of EU citizens, regardless of where the organizations themselves are located.

Slotix s.r.o., with its registered seat at Špitálska 53, 811 01 Bratislava, Slovak Republic (also referred to as “Slotix”, “Dataflow kit”, “we”, “us” or “our”), is deeply committed to providing its users with the maximum security and privacy, and is committed to comply with the GDPR. On this page, we will explain our methods to achieve GDPR compliance, both for ourselves and for our customers.

Please note that this document is not a legal contract - the legal relation between Slotix and its users is governed by the Terms of Use and Privacy Policy

Dataflow kit as the data controller

Dataflow kit acts as the data controller for the personal data we collect about you, the user of our Website, Platform or Services.

  1. We process data that is necessary for us to perform our contract with you (GDPR Article 6(1)(b)).
  2. We process data to meet our obligations under the law (GDPR Article 6(1)(c)) — this primarily involves financial data and information that we need to meet our accountability obligations under the GDPR.
  3. We process your personal data for our legitimate interests in line with GDPR Article 6(1)(f).
    • Improving our Website, Platform and Services to help you reach new levels of productivity.
    • Making sure that your data and Dataflow kit’s systems are safe and secure.
    • Responsible marketing of our product and its features.

As the controller for your personal data, Dataflow kit is committed to respect all your rights under the GDPR. If you have any questions or feedback, please reach out to our Data Protection Officer by email at dfk@slotix.sk.

Dataflow kit as the data processor

The data that you collect, store and process using Dataflow kit might contain personal data of your data subjects, and you are considered the data controller for this personal data.

Using the Dataflow kit Platform to process the personal data of your customers means that you have engaged Dataflow kit as a data processor to carry out certain processing activities on your behalf. According to Article 28 of the GDPR, the relationship between the controller and the processor needs to be made in writing (electronic form is acceptable under subsection (9) of the same Article). This is where our Terms of Use and Privacy Policy come in. These two documents also serve as your data processing contract, setting out the instructions that you are giving to Dataflow kit with regard to processing the personal data you control and establishing the rights and responsibilities of both parties. Dataflow kit will only process your data based on your instructions as the data controller.

Dataflow kit is based in the EU, therefore all our customers including customers in the EU have a contractual relationship with our EU legal entity, based in the Slovak Republic.

What is Dataflow kit doing for GDPR compliance

As a company based in Europe, Dataflow kit is very much up to speed with the implications that the EU General Data Protection Regulation has for businesses. We appreciate the privacy needs of our users as well as their customers and, as such, have implemented — and will continue to improve — technical and organizational measures in line with the GDPR to safeguard the personal data processed by Dataflow kit.

Readiness to comply with subject access requests

Data subjects’ ownership of their personal data is at the heart of the GDPR. We have created a readiness to respond to data subject requests to delete, modify, or transfer their data. This means that our Customer Support specialists along with the Engineers that assist them in their work are well-prepared to help you in any matters involving your personal data, in addition to providing the excellent customer support experience that you are accustomed to.

Documentation

Terms of Use and Privacy Policy are constantly being revised to increase transparency and to make sure the documents meet GDPR requirements. As these are the basis for our relationship for you, it is very important for us to comprehensively and openly explain our commitments and your rights in these documents. Additionally, we are constantly mapping all our data processing activities to be able to comply with the GDPR accountability requirements.