Privacy Policy

This Privacy Policy explains how we handle and protect any personal information you provide to us, including via our websites, our services, email, telephone and in person. It also covers any personal information we receive from third parties and provides you with an overview of your rights.

By using our websites and/or services, or signing up for marketing, you agree that we may use your personal information as outlined in this Privacy Policy.

Who we are

Websites bausw.com, bausw.cz, stavdenik.cz and related Services are owned and operated by BAU Software s.r.o, which is the controller of your personal data for the purposes of data protection law. You can contact us by email at info@bausw.com.

What kinds of information we collect

We collect the following information:

Information you’ve provided to us

When you create an account, we collect information necessary to provide you with our services such as:

  • Your name;
  • Your email address.

Information from your device

To improve our websites and services, we collect anonymised aggregates of information from and about the device you are using when interacting with our websites or services. This includes information about your operating system, hardware, software, browser type, screen resolution, time zone setting. The information collected is not linked to a specific person, name or other unique identifiers.

How we may use your information

We use personal information so that we can:

  • Process your order and provide you with our services;
  • Send you transactional emails (e.g. system notifications or alerts);
  • Communicate with you in relation to your account, service updates or other non-marketing communications;
  • Deliver customer services and support.

How we may share your information

Service Providers

We may share your information with our processors, companies that we use to provide services on our behalf. These processors can only use your information in accordance with our instructions and for no other purpose.

  • Amazon Web Services (https://aws.amazon.com).

    Provisioning and operations of server and infrastructure services (PaaS).

    Data handled: email addresses, transactional emails.

    Location of processing: EU/EEA (Ireland and Germany). Processing is covered by DPA including Standard Contractual Clauses.

  • Paddle.com Market Ltd. (https://paddle.com).

    Payment processor.

    Data handled: Customer information, name, address, email addresses.

    Location of processing: EU/EEA (Ireland and Germany). Processing is covered by DPA including Standard Contractual Clauses.

Details of transfers to third countries and safeguards

Any processor who has access to your personal information in the course of providing services on our behalf will be governed by contractual restrictions and/or technical limitations to make sure they protect your information and comply with applicable data protection legislation.

Where these processors are based outside of the European Economic Area (EEA) in a jurisdiction that has not been deemed adequate by the EU Commission, we shall enter into EU Commission approved model clauses with these organisations to ensure appropriate safeguards are in place.

Cookies and other identifiers

Cookies are small computer files placed on your computer, smartphone or tablet when you visit the website. Your browser sends these cookies back to the website every time you visit the site again, so it can recognise you.

We use cookies for authentication and security purposes on our Websites and related Services. These cookies are categorized as “necessary” under the GDPR.

IP addresses

The IP address (“Internet Protocol address”) of your computer or device is a unique numeric identifier and can be used to identify your device when accessing the Websites or Services.

We may log and store your IP address when you access our Websites and related Services. We may also use your IP address to estimate your general geolocation with a low-accuracy precision (country and/or city).

Data retention

We store your data only for the necessary period of time in relation to the purpose under which your data was collected. The retention period is determined on a case by case basis and depends on things such as the nature of the data provided and why it was collected.

Your rights under the General Data Protection Regulation

Every user may exercise the rights available (with some exceptions and restrictions) under data protection laws as follows:

Access

You have the right to request a copy of your personal data.

Portability

You have the right to request a copy of your personal data we have collected in a structured, commonly used and machine-readable format, or transmit this data directly to another controller.

Deletion

You have the right to delete your personal data. However, there may be circumstances where we are legally entitled to retain certain data.

Rectification

You have the right to change or rectify any information you believe is inaccurate or incomplete.

Restriction

You have the right to request the restriction or suppression of your personal data.

Objection

You have the right to object to the processing of your personal data.

Exercise your rights

To exercise your rights under the GDPR, please contact us, or our joint controllers, at the contact details provided below, indicating the type of right you would like to exercise and that you are making the request under the GDPR.

In order to process your request, we are required by law to collect certain information about you to verify your identity.

Your rights under the Californian Consumer Privacy Act

This section of the Privacy Policy applies solely to visitors, users, and others who are residents of the State of California, describes your California Consumer Privacy Act (“CCPA”) rights and explains how you can exercise your rights.

Under the CCPA you have the right to:

Be informed

You have the right be informed about the categories and the specific personal information that we may collect, the purposes for collecting that personal information, the categories of third parties to whom we may disclose that personal information and whether we disclose personal information for business purposes or for commercial purposes that would be considered a “sale” under the CCPA.

This information is provided in this Privacy Policy.

Access a copy

You have the right to request to access a copy of the personal information we have collected about you during the 12 months preceding the request. You have a right to receive a copy twice per year. If we provide the information electronically, it will be in a portable and, to the extent technically feasible, readily useable format that allows you to transmit the information to another entity without hindrance from us.

Delete your data

You have the right to request deletion of any personal information that we have collected from you unless retention of that information is permitted under applicable law.

Opt-out of the sale of your personal information

You have the right to opt-out of the sale of your personal information.

Exercise your rights

To exercise your rights under the CCPA, please contact us, or our joint controllers, at the contact details provided below, indicating the type of right you would like to exercise and that you are making the request under the CCPA.

In order to process your request, we are required by law to collect certain information about you to verify your identity.

Updates to this Privacy Policy

We reserve the right to make changes to this Privacy Policy. Where changes are made, we will post the revised Privacy Policy here with an updated effective date. Please check regularly for any changes to this Privacy Policy.

Contact

BAU Software s.r.o.
Address: Lidická 700/19, Veveří, 602 00 Brno, Czechia
Company reg. num.: 19414480
VAT num.: CZ19414480
Email: info@bausw.com

Updated: 9/3/2023