Personal Data Protection

/AI/ This page is an AI-generated draft and needs legal review before publishing.

This page explains how personal data is handled in the Pentashot Brand Manager (the “Portal”) at brand.pentashot.com. The data controller is PENTASHOT EU s.r.o., Zámecká 2315/9, 702 00 Ostrava, Czech Republic (Company ID 29388937).

What data we process

To provide and improve the Portal we process a limited amount of personal data, in particular:

  • account details such as your name and e-mail address;
  • sign-in and authentication data;
  • your access role and permissions within the Portal;
  • technical data needed to operate and secure the Portal, such as log records;
  • usage data about how the Portal is used, collected through Google Tag Manager and Google Analytics.

Why we process it

We use this data to give you access to the Portal, manage permissions, keep the Portal secure and operate the service; the legal basis is the performance of our agreement with you and our legitimate interest in running and protecting the Portal. We also use analytics to understand and improve how the Portal is used, based on your consent or our legitimate interest.

Cookies and analytics

The Portal uses cookies that are strictly necessary for signing in, keeping your session active and remembering your language preference. It also uses Google Tag Manager to load Google Analytics, which sets analytics cookies that measure how the Portal is used. You can refuse or delete non-essential cookies through your browser settings.

Sharing your data

We do not sell your personal data. It may be shared only with providers who help us operate the Portal, and only to the extent needed. The main processors and recipients are Značkárna s.r.o. (development and operation of the Portal), MasterDC s.r.o. (server hosting) and Google (Google Tag Manager and Google Analytics). Some analytics data may be transferred to Google outside the EU under appropriate safeguards, such as the EU standard contractual clauses.

How long we keep it

We keep your account data for as long as your account is active. If your account is closed or remains unused, we delete the data within 12 months, unless a longer period is required by law. Technical log data is kept for a maximum of 12 months, and analytics data is kept for the retention period configured in Google Analytics.

Your rights

Under applicable data protection law you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, and to data portability. You also have the right to lodge a complaint with the competent supervisory authority, the Office for Personal Data Protection (Úřad pro ochranu osobních údajů).

Contact

To exercise your rights or ask about how your data is handled, contact us at contact@pentashot.com. /AI/