Privacy Policy

(A) Unless otherwise defined in this Privacy Policy, terms used have the same meaning as in the Terms & Conditions.

(B) This Privacy Policy was last modified on 10th November 2021 and may be sporadically updated to reflect changes in legislation, so please review it now and then. You can always find the most recent version on our Site. If we make substantial changes, we will try to provide at least a 30-day notice prior to any changes taking effect. What constitutes a substantial change will be determined at our sole discretion. By continuing to access or use our Service after those revisions become effective, you agree to be bound by the revised terms. If you do not agree to the new terms, please stop using the Services.

(C) We process your data with due care, in accordance with all applicable laws and regulations, including the regulation (EU) 2016/679 of the European Parliament and of the Council, the General Data Protection Regulation (the “GDPR”).

(D) The Privacy Policy only covers data processing carried out by us. The Privacy Policy does not address, and we are not responsible for, the privacy practices of any other parties.

(E) We do not knowingly collect or ask for information from people under the age of 16. If you are such a person, please do not use our service or send us your information. We delete information that we learn is collected from a person under the age of 16 without verified parental consent.

1. Who processes your personal data
   
   1. Your personal data is being processed by our company VacuumLabs s.ro., with its registered seat at Bottova 2A, 811 09 Bratislava, Slovakia, Identification no.: 48 207 497 (the „Controller“, “we”, “us” or “our”).
   2. To learn more about personal data management or if you have any other questions, you’re welcome to contact us at hello@vacuumlabs.com.
      
2. What personal data is processed?
   
   We may collect the following types of information about you:
   1. Personal Data
      We may collect and process your names, email address and other data provided by you voluntarily when you use our Services.
   2. Technical Information
      We and/or our authorised external service providers (e.g., Google Analytics, Hotjar, Facebook, LinkedIn and Mailchimp) may automatically collect technical data when you visit or interact with our Site. Technical Data may include, in particular, the URL of the Site you visited before using our Service, the time and date of user visits, surfing habits, IP address, the browser name, the type of computer or device accessing our Service, time spent on the Site and other similar technical information. In a limited number of cases it is possible to use technical data and identify you by them as an individual, thus making them personal data according to applicable legal regulations, however, we never use technical data to identify you as an individual.
   3. Cookies
      1. What are cookies?
         1. To make this Site work properly, we sometimes place small data files called cookies and similar technologies on your device.
         2. A cookie is a small text file that the Site saves on your device when you visit it. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Permanent cookies last until you or your browser delete them or until they expire.
      2. How do we use cookies?
         1. We use our session-based and also permanent functional cookies which enable the Site to remember your actions and preferences (e.g., to remember that you are logged in) so you don’t have to keep re-entering them whenever you come back to the Site or browse from one page to another.
         2. We also use third parties’ analytical cookies for the improvement of our Site. We may collect anonymised Technical Data such as device data, browsing data and interactions with the Site, but do not associate it with you or the applications you make personally. You can withdraw your consent to analytical cookies at any time through your browser settings. We use cookies including:
            
            1. Google reCAPTCHA
            2. Google Analytics
            3. Hotjar
            4. Social pixels such as Facebook and LinkedIn
         3. Our Services and the communications generated from using our Services, such as promotional emails, may contain electronic images known as “web beacons”. Web beacons generally work in conjunction with cookies, and we may use them in the same way we use cookies.
      3. How to control cookies?
         1. We inform you about the use of cookies on your device when you visit our Site for the first time and, if applicable, we ask for your consent to use the cookies. The cookies will not be used for any purposes other than the ones stated above. Later, you may choose to accept or refuse cookies by selecting the appropriate settings on our Site/in your browser.
         2. As mentioned above, in some cases we also may use cookies provided by third-parties. These companies collect and use this information under their own privacy policies and are responsible for their practices concerning cookies.
3. What are the purposes and legal basis for processing your personal data?
   1. We process your personal data in order to:
      1. submit forms on our Site for the purpose of job vacancies or contacting usWhen you submit a form on the Site we collect and process your personal data that you provide in order to contact you, and fulfill your request depending on the purpose of the form.

         Legal basis for such processing: the performance of a contract in accordance with Article 6 (1) (b) of GDPR.

      2. analyse how the Site is usedThis purpose includes the following processing activities using anonymised technical information to influence current and future features and to prevent and detect security flaws and user interface issues.

         The Controller processes technical information under the following legal basis: legitimate interest in accordance with Article 6(1)(f) of GDPR.

4. Who are recipients of your personal data?
   1. We only share your personal data within the organisation of the Controller and the group of companies into which the Controller belongs. For example, when you apply for a vacancy at one of our portfolio companies listed on the Site we transfer your application to their team for processing.
   2. We do not share your personal data with any recipients outside of the Controller and the group of companies into which the Controller belongs unless one of the following circumstances applies:
      1. it is required to perform the servicesTo the extent that our external service providers (Sub-Processors) need access to your personal data to help us perform our Services for you, we have taken the appropriate contractual and organisational measures to ensure that your personal data are processed in accordance with all applicable laws and regulations.

         A non-exclusive list of our Sub-Processors includes Google Analytics (Google LLC), HotJar and Elementor.

         The list of external service providers we use may change from time to time as we change or remove some of the providers listed above and/or put in place other providers to assist us in providing the Services.

      2. It is necessary for legal reasonsWe may share your personal data with recipients outside the Controller if we have a good-faith belief that access to and use of your personal data is reasonably necessary to: (i) meet any applicable law, regulation, and/or court order; (ii) detect, prevent, or otherwise address fraud, security or technical issues; and/or (iii) protect the interests, properties or safety of the Controller, our users or the public as far as in accordance with the law. When possible, we will inform you about such processing.
5. Do we transfer your data to countries outside the EU/EEA?
   1. The Controller may transfer your personal data to countries outside the European Union and the European Economic Area where we engage with external service providers. In such a case, we transfer your personal data only to a country that is considered to have an adequate level of protection in accordance with the EU Commission’s decision or there are appropriate safeguards in place to protect your personal data, such as standard contract clauses or binding internal company rules. Regardless of the country in which your personal data is processed, the Controller takes reasonable technical, legal and organisational measures to ensure that the level of protection is the same as in the European Union and the European Economic Area..
   2. If we are involved in a merger, acquisition or other reorganisation, your information may be transferred as part of that deal. We will notify you (for example, via a message to the email address associated with your account) of any such deal and outline your choices in that event.
6. What is the storage period?
   1. The Controller stores your personal data only if it is legally permitted and necessary for the purposes for which the data were collected.
7. What are your rights?
   1. Right of access – The Controller offers you access to your personal data we process. This means you can contact us and request from us a confirmation whether or not your personal data are being processed and if so, you have the right to request access to your data, which we will provide to you (stating, in particular, purposes, categories of personal data, categories of recipients of personal data, storage periods or criteria for determining storage periods).
   2. Right to rectification – You have the right to have inaccurate personal data we have stored about you rectified.
   3. Right to erasure – You may also ask us to erase your personal data from our systems. We will comply with such requests unless we have a legitimate ground to not delete your personal data.
   4. Right to restriction of processing – You may request us to restrict certain processing of your personal data. If you restrict certain processing of your personal data, this may lead to fewer possibilities to use our Services and Site.
   5. Right to data portability – You have the right to receive your personal data from us in a structured, commonly used and machine-readable format in order to transmit the personal data to another controller.
   6. How to use your rights – You may exercise your rights above, free of charge, in writing by sending a letter or email at hello@vacuumlabs.com. We may require confirmation of your identity depending on your request.
8. May you complain?
   1. In case you consider our processing activities of your personal data to be inconsistent with the applicable data protection laws, you may lodge a complaint with the local supervisory authority for data protection.
9. Is data secured?
   1. We take all reasonable, appropriate security measures to protect the Controller and our customers from unauthorised access to or unauthorised alteration, disclosure or destruction of personal data we hold. Measures include, where appropriate, encryption, firewalls, secure facilities and access rights systems. Should, despite the security measures, a security breach occur that is likely to have negative effects to your privacy, we will inform you about the breach as soon as reasonably possible. If you have any questions, feel free to contact us at hello@vacuumlabs.com.