Consent to the processing of personal data

We, Behavio Labs s.r.o., having its registered office at Poupětova 1339/3, 170 00 Prague 7 – Holešovice, Company ID: 04253931, entered in the Commercial Register maintainedby the Municipal Court in Prague under file No. C 243963 (“Behavio Labs” or “we“), hereby inform you about how we process your personal data obtained in connection with your visit to our website.

We declare that as a data controller, we process these personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation or “GDPR“).

Types of personal data we will process

• Email address, in case of subscribing to the newsletter
• First name, last name, and email address, when filling out the meeting request form.

Purpose of collecting and processing your personal data

We will process your personal data for the purposes and to the extent necessary for sending newsletters and scheduling meetings with our sales representative, based on the consent provided by you.

Duration of processing your personal data

Personal data are processed for the time necessary to fulfil the processing purpose. In the case of the newsletter, until the consent is withdrawn. In the case of a scheduled meeting, until the meeting date. You can withdraw your consent at any time in both cases by sending an email from the email address for which you provided consent or by clicking the unsubscribe link in the newsletter.

Processing of personal data

Your personal data are processed both automated and manually. Records are kept of all activities related to data processing. The processing of your personal data does not involve automated decision-making without human assessment that would have legal effects or significantly affect data subjects.

Personal data transmission

Your personal data may be accessed by our employees, legal representatives, or suppliers only to the extent necessary for processing purposes. We may further provide personal data to the following processors:

• Hubspot
• Google Workspace
• Mailchimp (the Rocket Science Group, LLC)

Most of these processors have limited access to personal data. No processor is authorized to use personal data for their own marketing or any other purposes.

Some processors are located outside the European Union, for example, in the USA. We have concluded agreements with all processors, and they have committed to regularly delete the transferred personal data and not use it for their own purposes. There is no other transfer of personal data from us to countries outside the EU.

How we protect your data

We have implemented all technical and organizational measures to secure the protection of personal data as stipulated in the GDPR or other binding legal regulations. These measures aim to prevent unauthorized or accidental access to personal data, their alteration, destruction, or loss, unauthorized transfers, other unauthorized processing, or misuse. Such obligation survives the ending of the personal data processing.

Personal data are under constant supervision, whether electronic or physical. Modern security and control mechanisms are in place to ensure maximum data protection. We have user access management, a rights and roles management system to prevent unauthorized access to data.

Any persons having access to clients’ personal data in performing their job responsibilities or contractual obligations are bound by a statutory or contractual obligation of non-disclosure.

Upon request, we are obliged to provide your personal data also to state authorities (such as the Czech Police or any state authorities for the purposes of inspections insofar as such disclosure is necessary, etc.).

Rights related to the protection of personal data

In connection with the processing of your personal data, provided the legal prerequisites are met, you have the following rights, which we fully respect:

1. Transparency: Whenever you enter any personal data, we will explain the purpose for which such personal data are used, and who is the processor and controller with regard to such personal data.
2. Right of access to personal data: Let us know, and we will send you a summary of all your personal data we work with.
3. Right to rectification: If you find any inaccuracies in your personal data with us, you can inform us, and we will make the correction.
4. Right to erasure (“right to be forgotten”): When we end processing your personal data for the initial purpose, such personal data are erased by us. Similarly, we erase your personal data when you withdraw your consent to the processing. The right to erasure is not absolute, and if we have an objective obligation to further store data (e.g., accounting), we delete the personal data not required for it.
5. Right to the restriction of processing: You may also restrict the processing of your personal data; just let us know.
6. Right to privacy protection: If you find out or believe that the processing by us of your personal data is inconsistent with the protection of your personal and private life or at variance with law, particularly if your personal data are inaccurate with regard to the purpose of processing of the same, you may lodge a request for clarification or rectification of the situation, primarily by way of blocking, rectification, completion or destruction of such personal data.

You may contact us in connection with the processing of your personal data at support@behaviolabs.com.