Privacy Policy

Who we are

Ques is a software company incorporated in Slovak Republic. We provide our clients with development, design and IT consulting and support services, that are tailored their needs. While you visit our website your information is collected by us and we act as data controller under the GDPR.

What information do we collect and why?

Pre-contractual relationships

If you are interested in cooperation with us, you may contact us via contact form available on our website. In such case you are required to provide us with following information: full name, email and other data that you might share with us. We process this data in order to handle your request regarding our future cooperation or other matter. The legal ground for processing such personal data is Article 6 (1) b) GDPR contract performance.

Hiring

We process the personal data of job applicants / contractors retained in CV that apply for job with us. In such case we process personal data retained in CV or cover letter, we may keep personal data of unsuccessful candidates in our internal database up to one year. The legal ground for processing this personal data is consent under the Article 6 (1) a) GDPR, for keeping your CV (if you allow us to do so) and Article 6 (1) b) GDPR precontractual steps for our hiring process. Consent for processing may be withdrawn any time by contacting us at legal@ques.sk.

Contractual relationships

Ques process personal data of its current customers and partners in order to provide them with requested or agreed services. The data processed for such purpose include, but are not limited to: full name, email, phone number, company name, etc. The legal ground for processing such personal data is Article 6 (1) b) GDPR contract performance.

Contact forms

If you get in touch with us through any contact form that is available on our website, we may process your personal data in order to handle your request. Such personal data includes your full name, email and any other information you provide us with in your message. The legal ground for processing such personal data in order to handle your inquiry is Article 6 (1) b) GDPR precontractual steps.

Information we automatically collect about you

Usage data are collected automatically while you use our website and this information may be considered as personal data in some countries, including countries within EEA area. Usage data may include such information as your device's IP address, browser type, browser version, the pages of our website that you visit, time and date of your visit, unique identifiers and other diagnostic data. The legal for processing of such data is Article 6 (1) f) legitimate interest.

Legal obligations

In some instances, we may be obliged to process your personal data in order to ensure compliance with the applicable law. This may include defending legal claims, compelling with requests of tax or other authorities etc. The legal for processing of such data is Article 6 (1) c) compliance with legal obligations.

Who do we share your personal information with?

We do not share your personal data with other recipients except for following situations:

• with our third-party service providers, such as hosting, email provider, suppliers, etc.,
• with our business partners,
• with relevant governmental agencies, law enforcement bodies and other third-party in order to ensure compliance with applicable legal obligations,
• to any other party based on your prior given consent.

Your personal data is stored on servers within the EEA and currently Ques do not transfer your personal data outside this territory. However, it may happen that we will need to transfer your personal data. If such event takes place, Ques will ensure that the data transfer is realized in compliance with applicable data protection laws.

Data Retention

Ques shall keep your personal data for as long as necessary for the purpose for which it was processed. For how long will Ques hold your data will depend on the legal ground on which are personal data processed. If processing is based on legitimate interest, we will process your personal data only for as long until the legitimate interest is given and will be erased after such interest ceases. For the data kept on the ground of legal obligation, the data retention period is prescribed by applicable law and data will be deleted once the legally prescribed time period lapses. For data processed based on performance of a contract the data is processed for the duration of the contractual relationship and for an applicable limitation period. If processing is based on your consent, we will process your personal data only for the duration of your consent. However, please bear in mind that the same data might be processed also on another legal basis. In such case the withdrawal of consent might not mean a full erasure of your data.

Cookies and other technologies on our website

Cookies are small, encrypted text files that are stored on your device (computer, phone, tablet) when you visit a website. These files help websites function properly and remember your preferences. They also allow us to better understand how our site is being used and how we can improve it.

We use the following types of cookies:

• Essential (necessary) cookies: which are essential for the provision of access to our websites and for the provision of services explicitly requested by you, they enable core functionalities of the website such as marking your data inputs, network management and accessibility; (if these cookies are disabled, our website may not work properly);

Your Consent and Control

When you first visit our website, a cookie banner will inform you about our use of cookies and allow you to manage your preferences. You can modify or withdraw your consent at any time via the Privacy Settings link at the bottom of the website.

Essential cookies are processed on the basis of our legitimate interest (Article 6(1)(f) GDPR), as they are required for secure access and functionality.

All non-essential cookies (analytical, advertising, social media) are processed only with your consent.

Disabling Cookies

You can manage or delete cookies in your browser settings. Please note that disabling essential cookies may impact the functionality of the website. Below are links to cookie management instructions for common browsers:

• Microsoft Edge
• Firefox
• Chrome
• Safari

For mobile devices, you can manage ad tracking through your device settings or visit: https://www.networkadvertising.org/mobile-choice/

You may also opt out from interest-based advertising via third-party tools such as: Digital Advertising Alliance, Network Advertising Initiative, European Interactive Digital Advertising Alliance.

How do we keep your information secure?

Ques is committed to protecting the personal data of our customers, individuals that visit our website, individuals who contact us via contact forms on our website applicants for a job in accordance with the GDPR and other relevant data protection laws.

Therefore, we have implemented technical and organizational measures in an effort to safeguard the personal information in our custody and control. The aim is to eliminate unauthorized or unlawful data processing and any personal data breach that may occur. Despite all efforts to meet the legislative requirements, it is not possible to ensure security of your data if it is transferred in unsecured way. No electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.

We will protect your personal data, including but not limited to, in following ways:

• encrypting data,
• using multiple levels of internal system logs,
• strong password policy,
• penetration testing,
• secured token protection and
• restricting access to your data.

Your rights

Right of access

You have right to obtain confirmation from us regarding the information whenever we process your personal data. If you would like to get such information please feel free to contact us at: legal@ques.sk. If we process your personal data, we will provide you with the following information (i) name and contact details of our organisation, (ii) purposes of processing, (iii) the lawful basis for the processing, (iv) the legitimate interests for the processing (if applicable), (v) the categories of personal data obtained, (vi) the recipients, or categories of recipients of personal data, (vii) the details of data transfers (if applicable), (viii) information about your rights, (ix) the sources of your personal data, (x) the details of the existence of automated decision-making, including profiling.

Right to rectification

You have right to request that anything inaccurate in your personal data is corrected. Please help us ensure that your data is up to date by contacting us here: legal@ques.sk.

Right to erasure ("to be forgotten")

You have right to erasure, also known as right to be forgotten. You are entitled to erasure of personal data that we have collected and processed about you without undue delay. Please take a note, that we might be obliged or even allowed to keep some of your personal data despite your deletion request. If you would like to have your personal data deleted, please contact us at: legal@ques.sk.

Right to data portability

You are entitled to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller. If you would like to obtain your personal data in such form, please contact us at: legal@ques.sk.

Right to object

You have right to object to processing of your personal data where Ques processes your data on its legitimate interest or for the purposes of direct marketing. The exercise of this right may be limited, as Ques might be obliged to keep some of your personal data for the purpose of compliance with legal obligations, for establishment, exercise or defence of legal claims etc. If you would like to exercise this right please contact us at: legal@ques.sk.

Right not to be subject to automated decision making

Ques does not make decisions based solely on automated processing that would have significant effects for you. However, GDPR provides you with the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you. This do not apply to situations when (i) decision is necessary that is to say, there must be no other way to achieve the same goal to enter or perform a contract with you, (ii) you have given your explicit consent.

Right to file a complaint

If you think that your data have been processed unlawfully, please contact us at: legal@ques.sk so we can resolve the problem. Under the GDPR you have right to file a complaint with competent supervisory authority. Please find the link here: https://dataprotection.gov.sk/uoou/ for Office for Personal Data Protection of Slovak Republic, or for your relevant supervisory authority here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.

California Consumer Privacy Act of 2018 ("CCPA") Notice

Consumers residing in California have some additional rights in respect to their personal information under the California Consumer Privacy Act or ("CCPA"). If you are a California resident, this section applies to you and supplements the above policy.

The CCPA provides California consumers with a number of privacy protections including the following rights:

Right to notice

You have the right to be informed about how your personal information will be used. We have gone into detail about how we process your personal information in chapter What information we collect and why? of this Privacy Policy.

Right of access

You are entitled to be informed about what personal data Ques processes about you, for what purposes and who are the recipients of your personal data.

Right to request deletion

You are entitled to the erasure of certain personal data that we have collected and processed about you. Please be aware that this right is not absolute and Ques might be allowed or even obliged to keep some of this personal data despite your deletion request.

Right to receive equal services

You have a right to not be discriminated against even if you exercise any of your CCPA rights.

Children privacy notice

Our website is not intended for persons under the age of eighteen (18). If you are under the age of eighteen, please do not provide your personal information to Ques. We do not knowingly collect any personal information from children under the age of eighteen on our website. Users under the age of eighteen (18) (or the age of majority in the applicable jurisdiction) should not use Ques's website, without authorization from a parent or legal guardian.

Changes to Privacy Policy

Ques may from time to time change and update this Privacy Policy. You shall be informed of any chances by publishing the updated version of our Privacy Policy on Ques website. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

Contact details

If you have any questions, comments or concerns regarding privacy at Ques, please contact us at legal@ques.sk or using the contact details provided below: