Privacy policy

1. Basic provisions

The data controller under Article 4(7) of Regulation (EU) 2016/679 (GDPR) is TREXON s. r. o., with its registered office at Trieda SNP 1673/65, 974 01 Banská Bystrica, Slovakia, Company ID (IČO): 57 510 181, Tax ID: 2122785698, VAT ID: SK2122785698, registered in the Commercial Register of the District Court Banská Bystrica, Section: Sro, Insert No. 55257/S, contact: kontakt@mylinkss.org.

2. What data we process

• registration data: email address and password (stored encrypted)
• profile content: your address (slug), text, links and photos that you add to your Profile
• billing details: your name or company name, address, company/VAT ID — only if you activate a paid plan
• emails collected via the “Email capture” block: if you use this block on your Profile, we process your visitors' emails on your behalf as a processor — you act as the controller towards them
• technical data: IP address, device and browser type, cookies (see the Cookies document)
• profile traffic statistics: number of views and clicks, without linking them to a visitor's identity

3. Purpose and legal basis of processing

• providing the Service and running your account — performance of a contract (Art. 6(1)(b) GDPR)
• processing payment and issuing proof of payment for a paid plan — performance of a contract and a statutory accounting obligation (Art. 6(1)(b), (c))
• customer support and protecting the Service from misuse — the Operator's legitimate interest (Art. 6(1)(f))
• sending the Operator an email notification about a new payment — legitimate interest

4. Retention period

We keep your account and Profile data until you close your account or request deletion. Billing records are kept for the statutory period (typically 10 years). Emails collected via your Profile are deleted together with the profile/account. Cookies are kept according to category — see the Cookies document.

5. Recipients and processors

We use the following processors to run the Service: Supabase (database, login and photo storage) and Resend (sending the payment-notification email). These processors handle data only to the extent needed for that function and may not use it for other purposes.

6. International data transfers

Some of the processors listed above may process data on servers outside the European Economic Area (e.g. in the USA). In that case, the transfer is secured by standard contractual clauses approved by the European Commission or another appropriate GDPR safeguard.

7. Your rights

You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, and to object to processing based on legitimate interest. Send your request to kontakt@mylinkss.org; we will respond within 30 days. You also have the right to lodge a complaint with the Slovak Data Protection Authority (dataprotection.gov.sk).

8. Data security

Data in transit is encrypted (HTTPS), passwords are stored in encrypted form, and only authorized personnel have access to the data.

9. Cookies and final provisions

Details of the cookies we use can be found in the Cookies document. We may update this policy from time to time; we will notify you of material changes by email.