1. General Provisions

1.1. These Privacy Policy (“Policy”) govern how XCELERATE s.r.o., with its registered office at Čajakova 2175/13, 010 01 Žilina, Slovakia, Company ID: 56332076, VAT ID: 2122274715, email: marekbagin@webioo.co (“Provider”), processes personal data of customers and visitors to the website www.webioo.co (“Users”).

1.2. The Provider processes personal data in accordance with the European Parliament and Council Regulation (EU) 2016/679 (“GDPR”) and relevant national data protection laws.

2. Personal Data We Process

2.1. The Provider may process the following categories of personal data:

Identification Data: Name, surname, company name, company ID (IČO), tax ID (DIČ).
Contact Data: Email, phone number, billing address.
Payment Data: Payment information (provided via the Stripe payment gateway, the Provider does not store payment card details).
Technical Data: IP address, cookies, browser and device data.
Communication Content: Emails, messages sent via the contact form.

3. Purposes of Processing Personal Data

3.1. The Provider processes personal data for the following purposes:

Providing the Webioo Service: Registration, website management, billing, and technical support.
Compliance with Legal Obligations: Accounting, tax obligations, and legal duties.
Communication with the Customer: Responding to queries, troubleshooting, and sending service-related information.
Marketing and Commercial Communication (only with User consent): Sending newsletters, promotional emails, and offers.

4. Legal Basis for Processing

4.1. Personal data is processed based on:

Contract performance (GDPR Article 6(1)(b)) – e.g., providing the Webioo Service.
Legal obligation (GDPR Article 6(1)(c)) – accounting, tax obligations.
Legitimate interest (GDPR Article 6(1)(f)) – customer communication, fraud prevention.
Consent (GDPR Article 6(1)(a)) – sending marketing messages.

5. Data Retention Period

5.1. Personal data is retained for the following periods:

During the contractual relationship + 3 years after termination.
Accounting and tax documents: 10 years.
Marketing data: Until consent is withdrawn.

6. Disclosure of Data to Third Parties

6.1. Personal data may be disclosed to:

Payment service provider (Stripe).
Accounting firm.
IT service providers and hosting providers.
Public authorities (if required by law).

6.2. Personal data is not disclosed to third countries outside the EU without adequate protection.

7. Cookies and Tracking

7.1. We use cookies for analytical, functional, and marketing purposes.

7.2. Users can modify cookie settings in their browser.

8. Users’ Rights

8.1. Users have the following rights:

Right of access to data.
Right to rectify inaccurate data.
Right to erasure (“right to be forgotten”).
Right to restriction of processing.
Right to data portability.
Right to object to processing.
Right to lodge a complaint with the Personal Data Protection Office of the Slovak Republic.

9. Contact and Exercising Rights

9.1. Contact: marekbagin@webioo.co.

9.2. Users may file a complaint with the Personal Data Protection Office of the Slovak Republic.

10. Changes to the Policy

10.1. The Provider reserves the right to modify this Policy.

10.2. This Policy is effective as of May 1, 2025.