This document (hereinafter also referred to as 'Information') contains information about the processing of personal data by HypeDigitaly s.r.o within the product of the HypeDigitaly chat platform in accordance with Article 12 et seq. of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (hereinafter 'GDPR') and Act No. 110/2019 Coll., on the processing of personal data.

Further information about the processing of personal data by HypeDigitaly s.r.o is provided in Annex No. 4, which forms part of the contract.

Introductory provisions‍

1. Identification and contact details

HypeDigitaly s.r.o Identification Number: 17665655, Registered Office: Tovární 178, 41761, Bystřany, legal entity established under the laws of the Czech Republic, registered in the Commercial Register kept by the Regional Court in Ústí nad Labem, Section C, File 49600 (also 'HypeDigitaly s.r.o').

Telephone contact: +420 774 996 248, Email contact: info@HypeDigitaly.ai

Represented by: Pavel Čermák, Miroslava Čermáková

2: Data Protection Officer

We have not appointed a data protection officer as we are not a mandatory entity under Article 37 of the GDPR.

3. Supervisory Authority

The supervisory authority is an independent public authority responsible for the protection of personal data in a given state. The supervisory authority at the registered office of HypeDigitaly s.r.o is the Office for Personal Data Protection with its registered office at Pplk. Sochora 27, 170 00 Prague 7, email: posta@uoou.cz, tel.: +420 234 665 125.

4. Position of HypeDigitaly s.r.o

Within the HypeDigitaly chat platform product, HypeDigitaly s.r.o acts as both the controller of personal data and as the processor of personal data. As the controller of personal data, HypeDigitaly s.r.o acts in relation to the personal data of customers - Article 2 of this information.

In relation to the personal data that the customer stores on the servers of HypeDigitaly s.r.o, HypeDigitaly s.r.o acts as a processor, as it provides the customer with only data space for the purpose of data storage. The controller of this personal data is the customer themselves - Article 3 of this information.

HypeDigitaly s.r.o as the controller of personal data‍

Within the HypeDigitaly product, HypeDigitaly s.r.o acts as the controller of personal data in relation to the personal data of customers and website visitors.

1. Personal Data of Customers, if they are Natural Persons, or Representatives of Customers

Purpose of processing and categories of personal data

For the purpose of fulfilling the contract (in particular, concluding the contract, communicating with the customer) or for taking steps prior to entering into a contract (pre-contractual negotiations), we process in particular: name, surname (in the case of a natural person conducting business), place of business address, billing address, ID/ VAT number, name and surname of the contact person, position, email, telephone.

For the purpose of fulfilling legal obligations (in particular, maintaining accounts, issuing and keeping tax documents), we process in particular: name, surname (in the case of a natural person conducting business), place of business address, ID/ VAT number. Due to legitimate interest, we process: email (sending commercial communications).

If we intend to process any personal data other than that stated in this article, or for other purposes, we may do so only based on valid consent to the processing of personal data. The consent to the processing of personal data is given by the data subject on a separate document.

Processing period for personal data

Personal data processed to fulfill obligations arising from special legal regulations are processed for the period prescribed by these legal regulations. If it is necessary to use personal data to protect our legitimate interests, we process these personal data for the necessary period to assert these rights. If personal data is processed based on consent, we process the data only for the period for which the consent is given.

2. Personal Data of Visitors to Our Websites

Purpose of processing and categories of personal data

Due to legitimate interest, we process: IP address, or other online identifiers (the purpose of processing is security, website traffic analysis). More information about dealing with cookies is provided in the 'Cookie Settings' section within the footer of this website.

3. Special Category of Personal Data

We do not process any personal data that can be classified as a special category (so-called sensitive data) within the meaning of Article 9 of the GDPR. At the same time, we do not process personal data concerning judgments in criminal matters and offenses within the meaning of Article 10 of the GDPR.

HypeDigitaly s.r.o as the processor of personal data

HypeDigitaly s.r.o provides customers with data space for the purpose of data storage within the CHATBOT and VOICEBOT services, whether on the servers of HypeDigitaly s.r.o or third parties with whom HypeDigitaly s.r.o has a contractual relationship. The data of customers may also include personal data of other natural persons (data subjects). In relation to this personal data, HypeDigitaly s.r.o acts as the processor of personal data. The controller of this personal data is the customer themselves.

‍Notice to end users: If a customer processes personal data of natural persons using the CHATBOT and VOICEBOT services, data subjects must address inquiries regarding the protection of personal data directly to the customer, as they are in the position of the controller of personal data. We cannot be held responsible for the principles of personal data protection or security procedures used by the customer, which may differ from this Information.

‍Purpose of processing and data management: We do not perform any operations with customer data, including personal data, except for its storage on our servers; in particular, we do not interfere with, alter, make available, or transfer them to third parties (except for making them available to state authorities in accordance with the law), unless the contracting parties agree otherwise. The only purpose of managing this personal data is its storage and the possibility of making it available to the customer.

‍Types of processed personal data: It cannot be precisely determined; most often it involves IP addresses, name, surname, ID/VAT number, place of business address, email, telephone.

Recipients of personal data, transfer of personal data to third countries‍

1. Other controllers of personal data

We do not transfer any personal data to any other controllers of personal data.

We transfer personal data processed to fulfill obligations arising from special legal regulations to state administration authorities or other relevant authorities only in cases where the law requires us to do so.

2. Processors of personal data