Legal

Privacy Policy

COPLAS Technologies, s.r.o. — effective 22 September 2026

This document explains what personal data we process, why, on what legal basis, and what rights you have in relation to it. We follow Regulation (EU) 2016/679 (GDPR) and Slovak Act No. 18/2018 Coll. on personal data protection.

This is a translation provided for convenience. In case of any discrepancy, the Slovak version prevails.

1. Who we are

For any matter concerning personal data, contact us at office@coplas.sk. We have not appointed a Data Protection Officer (DPO), as the law does not require us to.

2. The capacity in which we process data

We distinguish two situations, because different obligations apply to each:

• As a controller we process data whose purpose we decide ourselves — website visitors, enquiries, business partners, job applicants.
• As a processor we process data our clients entrust to us when we build and operate their systems. We do not decide about that data; the client does. We process it solely on the client's instructions and under a data processing agreement pursuant to Article 28 GDPR. If your data sits in a system we delivered to one of our clients, please exercise your rights directly with that client.

3. What data we process and why

Special categories of data (e.g. health data) are processed exclusively in our capacity as a processor for a client, under an Article 28 GDPR agreement and on that client's instructions. We do not process such data in our own name, and we do not use it to train our own models without a separate legal basis agreed with the client.

4. Social networks and automated publishing

We run company profiles on social networks, primarily LinkedIn. To publish our own posts we use an in-house internal tool that accesses the official API of the given network.

In this context, the following applies:

• The tool publishes only content we have created and approved ourselves. Every post is approved by a human before publication.
• From LinkedIn we obtain data about our own signed-in account only — the name, the profile identifier, and the identifiers of posts we created. We store this data locally in our own infrastructure.
• We do not obtain, store or process the profile data of other users of the network, their contact lists, or the content of their posts. We do not scrape and we do not collect data in bulk.
• We do not pass the data we obtain on to third parties, and we do not use it for ad targeting or profiling.
• We keep access tokens only for as long as they are valid, and delete them without undue delay when an account is disconnected.

If you communicate with us through a social network, the operator of that network is an independent controller with respect to data on its own platform and follows its own rules — for example the LinkedIn privacy policy.

5. Who we share data with

We do not sell personal data. We disclose it only to the extent necessary, to:

• hosting and cloud infrastructure providers,
• our accounting and tax office,
• social network operators, if you communicate with us through them,
• public authorities, where the law requires it.

We have Article 28 GDPR agreements in place with all our processors.

6. Transfers outside the European Economic Area

We process data primarily within the EU/EEA. Where one of our service providers processes data outside the EEA, this takes place on the basis of a European Commission adequacy decision or standard contractual clauses under Article 46 GDPR.

7. Cookies

Our website uses strictly necessary cookies that provide its basic functionality. These do not require your consent. Should we deploy analytics or marketing cookies, we will obtain your consent in advance and update this document. You can refuse or delete cookies at any time in your browser settings.

8. Your rights

In relation to your personal data, you have the right:

• of access to the data and to a copy of it (Art. 15),
• to rectification of inaccurate data (Art. 16),
• to erasure where the data is no longer needed (Art. 17),
• to restriction of processing (Art. 18),
• to data portability (Art. 20),
• to object to processing based on legitimate interest (Art. 21),
• to withdraw consent at any time where processing is based on it; withdrawal does not affect the lawfulness of processing carried out before it.

To exercise your rights, email us at office@coplas.sk. We will respond within one month at the latest. If you believe we process your data unlawfully, you may lodge a complaint with the supervisory authority:

9. Changes to this policy

We may update this policy if the way we process data changes, or if the law changes. The current version is always available at this address, together with its effective date.

Prečítať v slovenčine →