Privacy Policy

Controller Identification Details

We are NotionIQ s. r. o., a company established and operating under the laws of the Slovak Republic. Our company is registered in the Commercial Register maintained by the District Court Nitra, in Section Sro, Insert No. 65434/N. We are identified by the company registration number 56 813 376.

As the data controller (“Controller”), we determine the purposes and means of processing your personal data. If you have any questions or concerns, contact us at stellarhazard@gmail.com.

When your personal data is processed by the Controller, you are a data subject. Your personal data will be processed securely and in accordance with our security policy.

Your Rights as a Data Subject

• Right of Access – obtain a copy of your personal data and information about its use.
• Right to Rectification – request correction, update, or completion of inaccurate or outdated data.
• Right to Erasure – request deletion of your personal data.
• Right to Withdraw Consent – when processing is based on consent, you may withdraw it at any time (without affecting lawfulness prior to withdrawal).
• Right to Restrict Processing – in certain cases, request that we limit use of your data.
• Right to Data Portability – in certain cases, request transfer of your data to another controller.
• Right to Object – object to processing based on our legitimate interests.
• Right not to be subject to automated decision-making, including profiling.
• Right to lodge a complaint – with the supervisory authority in Slovakia: the Office for Personal Data Protection of the Slovak Republic.

If providing personal data is a legal or contractual requirement, you are obliged to provide it. Failure to provide data necessary to conclude a contract may prevent establishing a contractual relationship.

You may submit objections, complaints, or requests in writing to 878 Veľký Lapáš, 951 04 or via email: stellarhazard@gmail.com.

The Controller does not use your personal data for automated individual decision-making, including profiling. We do not transfer personal data to third countries or international organizations.

Detailed Information on Personal Data Processing

1) Contact Form

Purpose: Facilitating communication via the website’s contact form; handling requests.

Legal basis: Legitimate interest pursuant to Article 6(1)(f) GDPR (ensuring effective communication via the website).

Data subjects: Individuals seeking information.

Personal data: Name, email, and data provided in the message.

Recipients: Authorized persons under a contractual relationship with the Controller; entities to whom the Controller is legally obligated to disclose personal data.

Retention: 10 days after the end of the month in which the inquiry was received.

2) Comments

Purpose: Publication of user comments and ensuring communication with users via the discussion section; maintaining an interactive space and integrity of public discussion.

Legal basis: Legitimate interest pursuant to Article 6(1)(f) GDPR (enabling discussion, preventing abuse/spam/illegal content, maintaining functionality).

Data subjects: Website visitors participating in the discussion.

Personal data: Name, email, and data provided in the comment.

Recipients: Authorized persons under a contractual relationship with the Controller; entities to whom the Controller is legally obligated to disclose personal data.

Retention: For as long as the website hosting the comment is operational, or until the commenter requests deletion.

3) Exercising Data Subject Rights – Personal Data Protection

Purpose: Recording exercised data subject rights and personal data protection breaches under Act No. 18/2018 Coll.; recording of exercised rights under Chapter III and notifications under Articles 33 and 34 of Regulation (EU) 2016/679 (GDPR).

Legal basis: Legitimate interest pursuant to Article 6(1)(f) GDPR (maintaining a record of exercised rights and breach notifications).

Data subjects: Individuals who submitted rights requests; individuals affected by a personal data protection breach.

Personal data: Data relating to the exercised right and data provided by the notifier when reporting a breach.

Recipients: Authorized persons under a contractual relationship with the Controller; entities to whom the Controller is legally obligated to disclose personal data.

Retention: Up to 6 months after the end of the 5-year period from the date the right was exercised or the breach occurred.

Contact

To exercise any of your rights or ask questions about this policy, contact us at stellarhazard@gmail.com.