Privacy policy

Who we are

Opulon Black is operated by SIED Digital Group s. r. o., Lermontovova 911/3, 811 05 Bratislava, Slovakia, company ID (IČO) 55295274, email info@opulon.org. For questions about personal data, write to info@opulon.org.

Our two roles

Controller: for business accounts (owners and their teams), for people who book a demo with us, and for visitors to this site. We decide how this data is used.

Processor: for the customers of businesses who book through a business's booking page or widget. The business is the controller of that data and we process it only on its instructions, under a data processing agreement. Please send questions about that data to the business directly. If a request reaches us, we pass it on to them.

Data we process as controller

Business accounts: name, email, team role, sign-in data (with Google sign-in also the name, email and Google account ID) and a log of actions in the admin. The legal basis is the contract (Article 6(1)(b) GDPR) and, for the action log and security, our legitimate interest in protecting accounts and data (Article 6(1)(f) GDPR).

Billing of businesses: company details, subscription and payments through Stripe. The legal basis is the contract and our accounting obligations (Article 6(1)(b) and (c) GDPR).

Demo bookings: name, email, phone if you give one, the time you chose and your note. We use them to prepare the demo and agree on next steps (Article 6(1)(b) GDPR, steps before entering a contract).

Visitors to this site: the site uses no cookies and no analytics. Cloudflare processes technical data such as your IP address and browser type to deliver the site and protect it from abuse (Article 6(1)(f) GDPR).

Data of businesses' customers

As processor we handle what customers enter when booking (name, email, phone), their bookings and payment status, notes the business keeps about them, and their marketing choices. Booking steps are counted anonymously, without identifying the visitor.

On the business's behalf we send confirmations, reminders and review requests by email and SMS. The business decides how long the data is kept. By default, a customer is anonymised after three years without a visit.

Cookies

This site sets no cookies. The admin and the booking management page use only strictly necessary sign-in cookies, which need no consent. When paying by card, Stripe may set its own cookies to prevent fraud.

Who helps us

Cloudflare, Inc.: hosting, running the application and protecting the site.

PlanetScale, Inc.: the database, in an EU region.

Amazon Web Services EMEA SARL: sending email through Amazon SES in an EU region (Stockholm).

EuroSMS a.s.: sending SMS.

Stripe Payments Europe, Limited: customer payments and subscription billing.

Google Ireland Limited: Google sign-in and Google Calendar sync, only when a user turns them on.

Functional Software, Inc. (Sentry): error reports, with email addresses and phone numbers removed.

Some of them may process data outside the EU and EEA. Such transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.

How long we keep data

Business account data for the length of the contract, and afterwards only as long as the law or the defence of legal claims requires. Accounting records for ten years under Slovak accounting law. Demo booking data for at most three years from the last contact.

Your rights

You have the right to access, correct and erase your data, to restrict its processing, to data portability and to object. Where processing relies on consent, you can withdraw it at any time. Just write to info@opulon.org.

You can also complain to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk).

Changes

If we change this policy, we publish the new version on this page with its effective date. We tell businesses about material changes by email.