Privacy & Personal Data Protection

1. Who is the data controller

The controller of your personal data is prístupne s.r.o., Park obrancov mieru 1, 040 01 Košice, Slovak Republic, Company ID (IČO): 56 502 834.

For any question about the processing of your personal data, or to exercise your rights, contact us at info@pristupne.sk or +421 915 962 377.

2. What personal data we process

Depending on how you use the service, we process the following categories of personal data:

• When you submit an accessibility report: your name, e-mail address, phone number (optional), and the content of the report — the address (URL) and title of the page concerned, your description of the problem, and technical information such as browser and operating system.
• When you create a user account: e-mail address, username, organisation (optional), phone number (optional), preferred language, and your password (stored only in hashed form).
• Automatically: cookies and local-storage entries needed to operate the service (see section 5) and basic technical data required to deliver content securely.

3. Purposes and legal bases

We process personal data only for specified purposes, each with a legal basis under Article 6(1) GDPR:

• Handling and resolving accessibility reports — your consent (Art. 6(1)(a)), given when you submit the report, and our legitimate interest in improving web accessibility (Art. 6(1)(f)).
• Creating and managing your account and providing the dashboard — performance of a contract or steps taken at your request prior to a contract (Art. 6(1)(b)).
• Sending service e-mails (registration confirmation, account approval, password reset, and notifications about new reports) — performance of a contract and our legitimate interest (Art. 6(1)(b), (f)).
• Analytics — only on the basis of your consent (Art. 6(1)(a)), which you can withdraw at any time.

4. Notification e-mails

When a new accessibility report is submitted, we send a notification e-mail to our administrators and to users who have been granted access to the website concerned. These e-mails contain the report details, including the reporter's name and e-mail address, so that the report can be handled.

When a report is marked resolved or closed and the reporter left an e-mail address, we send the reporter one e-mail about it, with an optional message from the website team. Internal comments are never sent.

5. Cookies and local storage

We use the following categories:

• Essential (always active, no consent required): your cookie-consent preference, your login token (kept in your browser's local storage while you are signed in), and your language preference. The service cannot function without these.
• Analytics (only with your consent): we use Google Analytics to understand, in aggregate, how the website is used. You can accept or reject these at any time via the cookie settings.

6. Recipients and processors

We do not sell your personal data. We share it only with service providers (processors) acting on our instructions:

• Hetzner Online GmbH — hosting of the application and database, on servers located in Germany (EU).
• Resend — delivery of transactional e-mails (registration, password reset, notifications).
• Atlassian (Jira) — where the operator of a given website has enabled Jira export, report data may be transferred to that operator's Jira instance for issue tracking.
• Google (Google Analytics) — only if you have accepted analytics cookies.

7. International transfers

Your personal data is primarily stored within the European Union (Germany). Where a processor transfers data outside the European Economic Area (for example Resend or Google), such transfers are protected by appropriate safeguards under the GDPR, in particular the European Commission's Standard Contractual Clauses or an adequacy decision.

8. How long we keep your data

• Accessibility reports: kept for 3 years from submission, after which they are deleted or anonymised.
• User accounts: kept until you ask us to delete your account; we then delete the account and associated personal data, unless we are required to keep certain data to comply with a legal obligation.

9. Your rights

Under the GDPR you have the right to:

• access your personal data and obtain a copy of it;
• have inaccurate data corrected (rectification);
• have your data erased (the 'right to be forgotten');
• restrict or object to processing;
• data portability;
• withdraw your consent at any time, without affecting processing carried out before withdrawal.

10. Exercising your rights and complaints

To exercise any of these rights, contact us at info@pristupne.sk. We will respond within the time limits set by law.

You also have the right to lodge a complaint with a supervisory authority — in Slovakia the Office for Personal Data Protection of the Slovak Republic, and in the Czech Republic the Office for Personal Data Protection (ÚOOÚ).

11. Security

We protect your data with appropriate technical and organisational measures: encrypted transmission (HTTPS), passwords stored only as salted hashes, encryption of third-party credentials at rest, EU-based hosting, and access controls that limit who can view reports.

12. Children

The service is not directed at children under 16. We do not knowingly collect personal data of children.

13. Changes to this notice

We may update this Privacy Notice from time to time. The current version always applies, and the date at the top shows when it was last updated.