Privacy policy
Privacy Policy
Verra Science s.r.o., Company ID: 09231285, VAT ID: CZ09231285, with its registered office at Běhounská 5/18, Brno-město, 602 00 Brno, Czech Republic, registered in the Commercial Register maintained by the Regional Court in Brno under file number C 117956, email: veronika@verra.cz (hereinafter referred to as the "Controller"), informs visitors of its website and e-shop at https://getverra.com/ how it processes the personal data of buyers, visitors, and other individuals (hereinafter referred to as "Data Subjects").
The processing of personal data complies with Regulation (EU) 2016/679 (GDPR).
What Personal Data Will Be Processed?
-
Contact form: name, email, phone number, message subject and content
-
Online store purchase: name, surname, address, email, phone number, billing information
-
Creation and use of a user account: email and voluntarily provided data
-
Website activity data: captured via cookies (see below)
Providing this data is necessary for contract conclusion and performance.
Purpose and Legal Basis for Processing
-
Communication: to handle inquiries (legitimate interest – Art. 6(1)(f) GDPR)
-
Contract performance: to fulfill orders and issue invoices (Art. 6(1)(b) GDPR)
-
Legal compliance: especially accounting and tax duties (Art. 6(1)(c) GDPR)
-
Protection of rights: e.g., in disputes or payment defaults (Art. 6(1)(f) GDPR)
-
Service improvement, loyalty programs, market analysis (Art. 6(1)(f) GDPR)
-
User account creation: based on consent or contractual necessity
-
Cookies and analytics: only with consent (Art. 6(1)(a) GDPR)
-
Email marketing: allowed without consent for existing customers (Art. 6(1)(f)), with consent required for others (Art. 6(1)(a))
Recipients of Personal Data
-
ACTIVE 24, s.r.o. – website hosting
-
Aut O’Mattic A8C Ireland Ltd. / WooCommerce Ireland Ltd. – e-shop operation
-
External accountant (Czech Republic)
-
Global Payments Europe, s.r.o. – payment processing
-
Mailchimp (The Rocket Science Group) – bulk email service (data transfer secured by standard clauses)
-
Webinar service provider – for Verra Webinars (with appropriate safeguards if outside the EU)
-
STORMWARE s.r.o. – accounting software provider
Cookies
Cookies are small files stored on a user’s device to remember preferences and usage data. These may include login details, display settings, time spent on product pages, or device information.
-
Analytics: via Google Analytics (Google Ireland Ltd.)
-
Marketing: via Facebook tools (Facebook Ireland Ltd.)
Details: facebook.com/policies/cookies
Analytical and marketing cookies are only used with the Data Subject’s consent.
Data Retention Period
-
Data processed under consent is retained for the duration stated or until withdrawn
-
Inactive user accounts (over 12 months) are deleted
-
Cookies are stored as defined by their type and purpose
Rights of the Data Subject
Data Subjects have the following rights:
-
Access: confirm processing, purpose, recipients, duration, and obtain a copy
-
Rectification: correct inaccurate or incomplete data
-
Erasure: delete data when no longer needed or processed unlawfully
-
Restriction: limit processing during disputes
-
Objection: to direct marketing or processing based on legitimate interest
-
Portability: obtain and transfer data in a structured format
-
Lodge a complaint: to the Czech Office for Personal Data Protection (www.uoou.cz)
To exercise any of these rights, contact: veronika@verra.cz
Consent can be withdrawn at any time without affecting prior lawful processing.
Effective Date
This Privacy Policy is effective from February 17, 2022.
