Privacy Policy (GDPR)

KARAT Software a.s., with its registered office at Dvořákova 2881/77, Přerov, Company ID No. 25352687, hereby informs you, our partners, about the processing of your personal data. This document aims to ensure transparency and fulfill our legal obligations under Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, the General Data Protection Regulation (hereinafter “GDPR” or the “Regulation”).

Who are we in relation to your personal data?

We primarily act as the data controller of the personal data we process. In some cases, we may act as a data processor, in which case we enter into a data processing agreement with you as the controller. When we access your data occasionally in the course of providing support services, we are not considered a data processor under the Regulation.

What personal data do we process and why?

In the course of our business activities, we may process personal data obtained either directly from you or from public sources.

We may process in particular the following:

• Name and surname, job title, address, email, phone number, account number, Company ID (IČ) and VAT number (DIČ), IP addresses, and records of communication related to the offering and sale of our products and services, or in the course of providing these products and services — for the purpose of fulfilling our contract with you and informing you about product and service updates, which is our legitimate interest. You may unsubscribe from these updates at any time.
• Information about your behavior on our website, collected through cookies. Cookies are obtained through your internet browser when you visit our website. They are generally used to enhance your user experience — either during your current visit (“session cookies”) or across multiple visits (“persistent cookies”). By using our website, you consent to our use of cookies as described above. If you wish to disable cookies or prevent the storage of persistent cookies, you can adjust your browser settings accordingly.

If we ever intend to share your personal data with our partners or use it to inform you about unrelated offers, we will always request your explicit consent first.

Who has access to your data?

Your data may be accessed by our data processors, who handle accounting, tax, and payroll administration on our behalf. We always have a valid data processing agreement with these service providers in accordance with the GDPR.

We do not transfer your personal data to any third country or international organization.

How long do we keep your data?

We retain your personal data for as long as necessary to fulfill the purpose for which it was collected — typically for the duration of the contract. After that, we retain data only as required by applicable laws (e.g., accounting, VAT legislation) or for the protection of our legitimate interests in the event of complaints or disputes, i.e., for the duration of the relevant statutory limitation periods.

What are your rights?

Under the GDPR, you have the following rights:

• To withdraw your consent at any time (where processing is based on consent), using the contact details provided below.
• To access your personal data to see what we process.
• To request correction of inaccurate or outdated data.
• To request erasure of personal data where justified and feasible.
• To request restriction of processing under Article 18 of the GDPR.
• To receive your personal data in a structured, commonly used, and machine-readable format if processed automatically based on a contract or consent.
• To object to processing, especially where processing is based on legitimate interest.
• To not be subject to decisions based solely on automated processing, including profiling, with legal or significant effects on you.
• To lodge a complaint with the supervisory authority — in the Czech Republic, this is the Office for Personal Data Protection (www.uoou.cz).

Deleting your account and personal data

If you wish to permanently delete your account and all personal data collected during your use of our application, please follow the instructions below.

What does account deletion mean?

• Permanent removal of your account from our systems.
• Deletion of all personal data associated with the account.
• This action is irreversible and the account cannot be restored.

How to request account deletion?

Send an email to info@aliteo.com with the subject: Account Deletion Request

Include the following:

• The email address you used to register.
• (Optional) A reason for requesting deletion.

Your request will be processed as soon as possible, no later than 30 days from receipt.

Personal data security

Protecting your personal data is our top priority. All employees and contractors are bound by confidentiality obligations and trained in information security and data protection. We enforce strict access control — both physical and logical. We regularly perform risk analyses related to data protection and apply appropriate security measures based on those findings.

How to Contact Us

If you have any questions, comments, or requests, please contact us at info@aliteo.com or send a written letter to our registered office address.