Data controller

ValaCom s.r.o.
Pod Mlýnem 400
664 24 Drásov
Czech Republic
Company ID: 24545121

Email: info@iuscloud.cz

Our role in processing

ValaCom s.r.o. is the controller of data for which it determines the purposes and means of processing: in particular website enquiries, user and customer accounts, billing, technical support and operation of its own service.

For personal data that a customer stores in the application as part of its activities, ValaCom s.r.o. generally acts as a processor. The customer concerned determines the purposes and legal basis of that processing as controller.

Public website and enquiries

The contact form processes your name, firm name, email address, optional telephone number, message and any information about the source of your enquiry. Technical request data may be generated to operate the website securely.

We use the data to respond to enquiries and demo requests. The legal basis is taking steps before entering into a contract under Article 6(1)(b) GDPR if you would be a party to that contract; otherwise, our legitimate interest in responding to enquiries under point (f). Secure website operation is based on our legitimate interest under point (f).

Registration, accounts and sign-in

Setting up and managing user accounts involves identity and contact details, in particular name and email address, association with a customer account, and data needed for sign-in and two-factor authentication (2FA). The public sign-in page uses an email address to find the relevant firm and redirects the user to its sign-in page.

The purpose is to give authorised users access and protect their accounts. The legal basis is performance of a contract under Article 6(1)(b) GDPR where the user is a party; for a customer’s users and for account protection, it is our legitimate interest under point (f). User access cannot be provided without the data needed to create an account and verify access.

Customer accounts and service billing

To manage customer relationships and bill for the service, we process details of the customer and its contact persons, the agreed service, payments and billing details. Where these details relate to individuals, they include personal data.

Providing and billing for the service is based on performance of a contract under Article 6(1)(b) GDPR for an individual customer; for a customer’s contact persons, on our legitimate interest in managing the contractual relationship under point (f). We retain accounting and tax records to comply with legal obligations under point (c). The necessary billing details are required to bill for the service.

Technical support

When handling support requests, we process contact details, the communication and information needed to resolve the reported issue. The purpose is to respond and support the service. The legal basis is performance of a contract under Article 6(1)(b) GDPR if you are a party to it; otherwise, our legitimate interest in supporting customers under point (f).

Technical and security records

Operational, sign-in and audit records may be generated to operate, diagnose and protect the website and application, such as the time of an event, account identifier, action taken and technical request data. Processing needed to protect our own service is based on our legitimate interest in its secure and reliable operation under Article 6(1)(f) GDPR.

Recipients of data

Data may be made available, to the extent necessary, to providers of technical operations, data storage and email communications, and to persons providing accounting or support, if they take part in those activities. We may also provide data to public authorities where required by law. The involvement and roles of particular suppliers need to be assessed against the service’s actual operations.

Retention periods

We retain data according to its purpose: enquiries for the time needed to respond and to pursue any subsequent cooperation; account and contractual data while providing the service and resolving related claims; accounting and tax data for the period required by law; and technical records for the time needed for operation, security and incident resolution. For content entered by a customer, retention is determined by that customer and the applicable contractual terms.

Transfers outside the EU/EEA

Any transfer of personal data outside the EU or European Economic Area is subject to Chapter V of the GDPR. Information on whether such transfers occur in the operation of IUSCloud, the countries concerned and the safeguards used must reflect the services actually involved and their contractual terms.

Data security

Authentication, including the option of two-factor authentication, roles and permissions for data access, and an audit history of changes serve to protect data. Specific technical and organisational measures depend on the actual service deployment.

Your rights

Depending on the circumstances, you may request access to, rectification or erasure of your data, restriction of processing and data portability. You may object to processing based on legitimate interests. You can exercise these rights using the contact below; their scope is governed by the GDPR.

For data entered into the application by a customer, send your request to that customer as controller; we will assist it in handling the request to the extent required by the GDPR.

Complaint to a supervisory authority

You have the right to lodge a complaint with the Czech Data Protection Authority. Information on filing a complaint is available on its website: uoou.gov.cz.