Version: 1.0, Effective date: April 10, 2022
Who we are?
Ques is a software company incorporated in the Slovak Republic. We provide our clients with development, design and IT consulting and support services that are tailored to the needs of our clients. While you visit our website your information is collected by us and we act as data controller under the GDPR.
What information do we collect and why?
Contact forms. If you are interested in cooperation with us, you may contact us via contact form available on our website. In such case you are required to provide us with the following information: full name, email and other information in relation to your problem you are contacting us with, or any other data you might provide us with. We process this data in order to handle your request regarding our future cooperation or other matters. The legal ground for processing such personal data is Article 6 (1) b) GDPR contract performance or pre-contractual relationships.
Hiring. When you contact us via our careers page or reach out to us directly we process your personal data in order to process your application. We process the personal data of job applicants / contractors retained in CV that apply for job with us. In such case we process personal data retained in CV or cover letter. The legal ground for processing this personal data is pre-contractual relationships under the Article 6 (1) b) GDPR.
Contractual relationships. Ques processes personal data of its current customers and partners in order to provide them with requested or agreed services. The data processed for such purpose include, but are not limited to: full name, email, phone number, company name, etc. The legal ground for processing such personal data is Article 6 (1) b) GDPR contract performance.
Information we automatically collect about you. Usage data are collected automatically while you use our website and this information may be considered as personal data in some countries, including countries within the EEA area. Usage data may include such information as your device’s IP address, browser type, browser version, the pages of our website that you visit, time and date of your visit, unique identifiers and other diagnostic data. The legal for processing of such data is Article 6 (1) f) legitimate interest.
Legal obligations. In some instances, we may be obliged to process your personal data in order to ensure compliance with the applicable law. This may include defending legal claims, compelling with requests of tax or other authorities etc. The legal for processing of such data is Article 6 (1) c) compliance with legal obligations.
Who do we share your personal information with?
We do not share your personal data with other recipients except for the following situations:
- with our third-party service providers, such as hosting, email provider, suppliers, etc.,
- with our business partners,
- with relevant governmental agencies, law enforcement bodies and other third-party in order to ensure compliance with applicable legal obligations,
- to any other party based on your prior given consent.
Your personal data is stored on servers within the EEA and currently Ques do not transfer your personal data outside this territory. However, it may happen that we will need to transfer your personal data. If such an event takes place, Ques will ensure that the data transfer is realized in compliance with applicable data protection laws and appropriate transfer mechanism such as Standart Contractual Clauses for international transfers is used.
Ques shall keep your personal data for as long as necessary for the purpose for which it was processed. For how long Ques will hold your data will depend on the legal ground on which are personal data processed.
If processing is based on legitimate interest, we will process your personal data only for as long until the legitimate interest is given and will be erased after such interest ceases. For the data kept on the ground of legal obligation, the data retention period is prescribed by applicable law and data will be deleted once the legally prescribed time period lapses. For data processed based on performance of a contract the data is processed for the duration of the contractual relationship and for an applicable limitation period. If processing is based on your consent, we will process your personal data only for the duration of your consent. However, please bear in mind that the same data might be processed also on another legal basis. In such case the withdrawal of consent might not mean a full erasure of your data.
Cookies and other technologies on our website
Cookies are small text files of information that a web server generates and sends to a web browser. Web browsers store the cookies they receive for a predetermined period of time, or for the length of a user’s session on a website. They attach the relevant cookies to any future requests the user makes of the web server. Cookies help inform websites about the user, enabling the websites to personalise the user experience.
We currently use the following types of cookies:
Necessary cookies: Necessary cookies enable core functionality such as security, network management, and accessibility.
Analytical cookies: We use analytical cookies, like google analytics. These cookies help us understand how users navigate and interact with a website.
If you do not want cookies to be collected, you can restrict, block or delete them at any time by adjusting your browser configuration. Although each browser has different parameters, the cookie configuration is usually found in the „Preferences“ or „Settings“ menu. If you disable cookies, the functionality of our website may be limited (in the case of essential cookies, you may not be able to access our website).
If you wish to prevent the installation of new cookies or if you wish to delete existing cookies, you can find instructions at the links below. The exact procedure however depends on the browser you are using.
How do we keep your information secure?
Ques is committed to protecting the personal data of our customers, individuals that visit our website, individuals who contact us via contact forms on our website, and applicants for a job in accordance with the GDPR and other relevant data protection laws.
Therefore, we have implemented technical and organizational measures in an effort to safeguard the personal information in our custody and control. The aim is to eliminate unauthorized or unlawful data processing and any personal data breach that may occur. Despite all efforts to meet the legislative requirements, it is not possible to ensure security of your data if it is transferred in an unsecured way. No electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so you should take care in deciding what information you send us in this way.
We will protect your personal data, including but not limited to, in following ways:
- encrypting data,
- using multiple levels of internal system logs,
- strong password policy,
- penetration testing,
- secured token protection and
- restricting access to your data.
Right of access. You have the right to obtain confirmation from us regarding the information whenever we process your personal data. If we process your personal data, we will provide you with the following information (i) name and contact details of our organisation, (ii) purposes of processing, (iii) the lawful basis for the processing, (iv) the legitimate interests for the processing (if applicable), (v) the categories of personal data obtained, (vi) the recipients, or categories of recipients of personal data, (vii) the details of data transfers (if applicable), (viii) information about your rights, (ix) the sources of your personal data, (x) the details of the existence of automated decision-making, including profiling.
Right to rectification. You have the right to request that anything inaccurate in your personal data is corrected.
Right to erasure (“to be forgotten”). You have the right to erasure, also known as the right to be forgotten. You are entitled to erasure of personal data that we have collected and processed about you without undue delay. Please take a note, that we might be obliged or even allowed to keep some of your personal data despite your deletion request.
Right to data portability. You are entitled to receive the personal data that you have provided to us in a structured, commonly used and machine-readable format and, if desired, transmit that data to another controller.
Right to object. You have the right to object to processing of your personal data where Ques processes your data on its legitimate interest or for the purposes of direct marketing. The exercise of this right may be limited, as Ques might be obliged to keep some of your personal data for the purpose of compliance with legal obligations, for establishment, exercise or defence of legal claims etc.
Right not to be subject to automated decision making. Ques does not make decisions based solely on automated processing that would have significant effects for you. However, GDPR provides you with the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or significantly affects you. This do not apply to situations when (i) decision is necessary that is to say, there must be no other way to achieve the same goal to enter or perform a contract with you, (ii)
you have given your explicit consent.
Right to file a complaint. If you think that your data have been processed unlawfully, please contact us at: email@example.com so we can resolve the problem. Under the GDPR you have the right to file a complaint with our supervisory authority. Please find the link here: https://dataprotection.gov.sk/uoou/ for Office for Personal Data Protection of Slovak Republic, or for your relevant supervisory authority here: https://edpb.europa.eu/about-edpb/about-edpb/members_en.
If you wish to exercise any of your rights, please contact us at firstname.lastname@example.org.
California Consumer Privacy Act of 2018 (“CCPA”) Notice
Consumers residing in California have some additional rights in respect to their personal information under the California Consumer Privacy Act or (“CCPA”). If you are a California resident, this section applies to you and supplements the above policy.
The CCPA provides California consumers with a number of privacy protections including the following rights:
Right of access. You are entitled to be informed about what personal data Ques processes about you, for what purposes and who are the recipients of your personal data.
Right to request deletion. You are entitled to the erasure of certain personal data that we have collected and processed about you. Please be aware that this right is not absolute and Ques might be allowed or even obliged to keep some of this personal data despite your deletion request.
Right to receive equal services. You have a right to not be discriminated against even if you exercise any of your CCPA rights.
Children privacy notice
Our website is not dedicated to children, if you are underage please refrain from using this website. We do not knowingly collect any information from children at our website.
If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us. If we become aware that we have collected personal data from anyone underage without verification of parental consent, we take steps to remove such data.
If you have any questions, comments or concerns regarding privacy at Ques, please contact us at email@example.com or using the contact details provided below:
Bratislava 811 09