Privacy Policy

This privacy document contains information in accordance with Articles 13 and 14 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter referred to as “GDPR”) and Act No. 18/2018 Coll. on the protection of personal data.

**1. Operator**

The data controller is:

AGORA SOLAR a.s.

Headquarters: AGORA Solar a.s., Južná Trieda 48/D, 04001 Košice

VAT NUMBER: 2121428727

E-mail: asistent@agora-solar.com

Phone: +421 905 849 231

**2. Contact details of the responsible person (if designated)**

The person responsible has not been identified. If you have any questions about the processing of your personal data, you can contact the controller at the above-mentioned contacts.

**3. Scope, purpose and legal basis of the personal data processed**

The controller processes the personal data of the data subjects to the following extent, for the purpose and on the following legal grounds:

a.) Sending a request via web form or e-mail

• Scope: name, surname, e-mail, phone number, message content
• Purpose: to deal with a request or enquiry
• Legal basis: Article 6 1(b) GDPR – performance of pre-contractual measures

b.) Conclusion and performance of the contract

• Scope: identification data, billing data, contact data
• Purpose: conclusion and performance of contractual obligations
• Legal basis: Article 6(1)(b) GDPR

c.) Compliance with legal obligations

• Scope: data resulting from specific regulations (e.g. tax and accounting)
• Purpose: compliance with relevant legislation
• Legal basis: Article 6(1)(c) GDPR

d.) Direct marketing (sending of commercial communications)

• Scope: name, email, phone number
• Purpose: to inform about news and offers
• Legal basis: Article 6 1(a) GDPR (consent)

e.) Legitimate interest

• Scope: technical data, logs, cookies (more below)
• Purpose: system security, statistics, operational needs
• Legal basis: Article 6 1(f) GDPR

**4. Recipients of personal data**

We may disclose your personal data to the following categories of recipients:

• IT service and hosting providers,
• external accounting advisors,
• law firms and other professional advice,
• public authorities (e.g. tax authorities), if required by law.

**5. Transfer to third countries or international organisations**

We do not transfer your personal data to third countries outside the EEA.

**6. Retention period of personal data**

We retain your personal data for as long as necessary to fulfil the purpose for which it was collected:

• data from contact forms: 1 year,
• contractual data: 10 years after the end of the contractual relationship,
• data on the basis of consent: until revocation,
• technical logs and cookies: by type, 2 years.

**7. Rights of the data subject** As a data subject, you have the right to:

• to access personal data,
• to correct inaccurate or incomplete data,
• for erasure (“right to be forgotten”),
• to restrict processing,
• for data portability,
• object to processing based on legitimate interest,
• lodge a complaint with the supervisory authority: the Office for Personal Data Protection of the Slovak Republic ( www.dataprotection.gov.sk).

**8. Use of cookies**

Our website uses cookies. On your first visit to the website, you will see a cookie bar where you have the option to accept or reject certain types of cookies. We divide cookies into:

• Necessary cookies: ensure the functioning of the website (no consent is required),
• Statistical cookies: used to analyse traffic (consent only),
• Marketing cookies: personalised advertising (consent only).

You can change your cookie settings at any time through your browser settings or through the consent manager.

**9. Automated decision making and profiling**

We do not carry out automated decision-making or profiling that would have legal effects on the data subject.

**10. Final provisions**

The controller reserves the right to update this information in accordance with applicable legislation and changes in the process of processing personal data.

This document is valid and effective from 10.4.2025.