Privacy Policy · GDPR
What CertaNox processes, why, and what rights you have.
This Privacy Policy is presented in English by default and describes CertaNox processing under the GDPR and Slovak Act No. 18/2018 Coll. on Personal Data Protection, as amended.
Controller
OLLÁRI & PARTNER s.r.o., Poľná 1599/61, 930 05 Gabčíkovo 1, Slovenská republika. Company ID (IČO): 57 354 391. Tax ID (DIČ): 2122677920.
Obchodný register Okresného súdu Trnava, oddiel Sro, vložka č. 61404/T. Privacy contact: info@certanox.net. Telephone: .
This notice applies to the CertaNox public website, customer account, licensing, purchases, secure delivery, support and related digital-service operations.
Categories of personal data
| Category | Typical data | Why it is used |
|---|---|---|
| Account & contact | Name/user identifier, email, account metadata, support communications | Account operation, authentication, support and notices |
| Purchase & billing | Edition, price/currency, Stripe customer/session/transaction references, billing status | Contract formation, licence issuance, accounting, refunds/disputes and fraud prevention |
| Licence & device | Licence identifier, edition, term, entitlement state, device/HWID-derived binding data, activation state | Provide the contracted licence, enforce device limits and protect the service |
| Security & delivery | Security events, delivery authorisations, integrity/attestation results, timestamps, IP/network metadata where generated by normal service operation | Security, abuse prevention, incident investigation and protected delivery |
| Support | Opaque support references, diagnostic metadata supplied by the customer, contact messages | Resolve support requests and maintain service quality/security |
Purposes and legal bases
Depending on the operation, processing may be necessary to perform or take steps toward a contract (GDPR Article 6(1)(b)), comply with legal obligations such as accounting/tax and consumer-law requirements (Article 6(1)(c)), or pursue legitimate interests such as platform security, abuse prevention, fraud prevention, service diagnostics and defence of legal claims (Article 6(1)(f)). Where CertaNox relies on consent for a specific optional purpose, the relevant interface will request it and consent may be withdrawn for the future.
Where data is required to enter into or perform a contract, not providing it may prevent account creation, purchase completion, licence issuance, secure delivery or support fulfilment.
Cookies, sessionStorage and browser storage
The public site is designed without advertising analytics trackers. Strictly necessary cookies or browser storage may be used for secure sessions, Secure Delivery, return from Stripe Checkout, short-lived purchase/account association and account operation. For example, sessionStorage may temporarily hold checkout-return or page-state information within a browser tab.
If optional analytics or marketing technologies are introduced later, they must be separately assessed and, where required, activated only after the applicable notice/consent mechanism.
Recipients and processors
Data may be disclosed where necessary to hosting and infrastructure providers, Stripe for payment processing, communications/support providers, professional advisers, and public authorities where legally required. Third-party services that a user independently opens (for example Discord) process data under their own terms.
Where a processor or recipient involves a transfer outside the EEA, CertaNox applies the transfer mechanism and safeguards required by the GDPR for the relevant provider and transfer circumstances.
Retention
Personal data is not kept longer than necessary for the relevant purpose. Retention depends on factors such as the account/licence relationship, support/security needs, limitation periods, mandatory accounting/tax records, transaction evidence and the establishment, exercise or defence of legal claims. When the purpose ends, information is deleted or anonymised unless continued retention is legally required or justified by a legal claim.
Security and automated rules
CertaNox uses technical and organisational measures appropriate to the risk. Licensing, authentication, integrity and security rules may automatically determine whether access is permitted, refused or requires additional verification. These mechanisms are used to perform the service and protect the platform. If a particular process qualifies as automated decision-making within GDPR Article 22, the rights required by that Article apply.
Your data-protection rights
Depending on the circumstances, you may have rights of access, rectification, erasure, restriction, portability, objection, and withdrawal of consent without affecting processing already lawfully carried out before withdrawal. Requests may be sent to info@certanox.net. CertaNox may take proportionate steps to verify identity before fulfilling a request.
Authenticated customers can also use the Privacy & Data Center in the CertaNox Account area to access or export data, correct account information, manage optional consent, and submit privacy requests.
You also have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic (Úrad na ochranu osobných údajov Slovenskej republiky), Galvaniho 7/B, 821 04 Bratislava, Slovak Republic.
Contact, complaints and withdrawal requests
Messages sent through the public contact form are processed to handle the request and related legal/security needs. Do not submit passwords, MFA secrets, private keys or one-time authorization codes. The online consumer-withdrawal function is available in the Terms of Service.
Changes to this notice
This notice may be updated when processing operations, providers or legal requirements change. The current version remains available on this page together with its review date.