Privacy policy

1. Who the controller is

The controller of personal data is Affilkit s.r.o., Company ID: 55 929 991, Tax ID: 2122136731, VAT ID: SK2122136731, registered office Raková 596, 023 51 Raková, Slovak Republic, operating viralpro.sk under the ViralPro brand.

For data protection matters contact us at info@viralpro.sk or by post at the registered office. We have not appointed a data protection officer under Article 37 GDPR, as we are not required to.

We process data in accordance with Regulation (EU) 2016/679 (GDPR) and Act No. 18/2018 Coll. on personal data protection.

2. What we process and why

2.1 Enquiries via the contact form or email

Data: name and surname, email, phone, company name, website or e-shop address, message content.
Purpose: answering the enquiry and communication before a possible contract.
Legal basis: steps prior to entering into a contract at your request (Art. 6(1)(b) GDPR); for general enquiries, our legitimate interest in replying (Art. 6(1)(f)).
Retention: 3 years from the last communication if no contract arises.

2.2 Orders and delivery of the service

Data: identification and billing details including business name, registered office, company ID, tax ID and VAT ID, contact details, order and payment data, and materials provided for the purpose of producing the output.
Purpose: concluding and performing the contract, issuing invoices, communication during the collaboration.
Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Retention: for the duration of the collaboration and thereafter for the limitation periods.

2.3 Accounting and tax documents

Data: billing details and information shown on the document.
Purpose: compliance with accounting and tax legislation.
Legal basis: legal obligation (Art. 6(1)(c) GDPR).
Retention: 10 years from the end of the accounting period concerned.

2.4 Website operation and cookies

Data: IP address, browser type and language, device type, pages visited, time of visit, referral source.
Purpose: ensuring the site works and is secure, measuring traffic.
Legal basis: for necessary cookies, our legitimate interest in operation and security (Art. 6(1)(f) GDPR); for analytics and marketing cookies, your consent (Art. 6(1)(a) GDPR).
Retention: depending on the cookie, up to 24 months. Details in the Cookie Policy.

2.5 References and case studies

Data: company name, name and role of the contact person, photograph, statement, information about results achieved.
Purpose: promoting our services.
Legal basis: your consent only (Art. 6(1)(a) GDPR). Without it we publish nothing.
Retention: until consent is withdrawn.

3. Who we share data with

We do not sell or rent personal data. We share it only with processors acting on our behalf and bound by a processing agreement:

• Vercel Inc. — website hosting. Processing takes place in the EU; the company also operates outside the EEA and transfers are covered by standard contractual clauses.
• Stripe Payments Europe, Ltd. — payment processing and invoicing. As a separate controller it is responsible for payment card data.
• Websupport, s.r.o. — domain and email management.
• Resend — delivery of emails sent from the contact form.
• An accounting firm — processing of accounting documents.
• Analytics providers — only if you have consented to analytics cookies.

We may also disclose data to public authorities where required by law.

4. Transfers outside the European Union

We process data primarily within the European Economic Area. Where a transfer to a third country takes place, it is covered by a European Commission adequacy decision or by standard contractual clauses approved by the Commission.

5. Automated decision-making

We do not use your data for automated decision-making or profiling that would have legal effects or similarly significantly affect you.

6. Your rights

In relation to your personal data you have the right:

• of access — to find out whether and what data we process about you, and to obtain a copy
• to rectification — to have inaccurate data corrected or incomplete data completed
• to erasure — to have data deleted where it is no longer needed, where you have withdrawn consent, or where processing is unlawful
• to restriction of processing — to have processing temporarily suspended
• to data portability — to receive the data in a structured, commonly used format
• to object — to processing based on legitimate interest, and at any time to direct marketing
• to withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal
• to lodge a complaint — with the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava

Send requests to info@viralpro.sk. We will handle them within one month; in justified cases we may extend this by two months and will let you know. Where there is doubt about your identity we may ask for additional verification.

7. Is providing data mandatory?

Providing data is voluntary. However, without the data necessary to conclude and perform a contract or to issue an invoice, we cannot deliver the service.

8. Security

We have adopted appropriate technical and organisational measures — encrypted transmission (HTTPS), access limited to authorised persons, regular system updates, and contractual confidentiality obligations on processors.

9. Changes to this policy

We may update this policy. The current version is always available on this page together with its effective date. In the event of a material change we will inform you by email or by a notice on the website.