Privacy Policy
Last updated: 10.03.2026
1. Data Controller
The data controller is Webskill s. r. o., ID No.: 56521138, with registered office at Haburská 211/16, 821 01 Bratislava, email: info@realitytimeline.sk (hereinafter "Controller"). The Controller processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable legislation.
2. Purposes and Legal Bases of Processing
We process personal data for the following purposes: (a) Providing the Service - legal basis: performance of a contract (Art. 6(1)(b) GDPR); (b) Communication with users - legal basis: performance of a contract and legitimate interest; (c) Billing and accounting - legal basis: compliance with a legal obligation (Art. 6(1)(c) GDPR); (d) Service improvement and analytics - legal basis: legitimate interest (Art. 6(1)(f) GDPR); (e) Marketing (optional) - legal basis: consent (Art. 6(1)(a) GDPR).
3. Categories of Processed Data
We process the following categories of data: Identification data (first name, last name); Contact data (email, phone); Login data (email, hashed password); Organizational data (company name, ID number, subdomain); Transaction data (property information, prices, deal progress); Documents (contracts and other documents uploaded by users); Technical data (IP address, browser type, cookie and analytics data).
4. Recipients of Personal Data
Personal data may be shared with the following third parties (processors): Supabase Inc. (USA) - database and file storage, with appropriate safeguards under Art. 46 GDPR; Resend Inc. (USA) - email delivery; Stripe Inc. (USA) - payment processing; Vercel Inc. (USA) - application hosting and web analytics; Google LLC (USA) - reCAPTCHA spam protection. All processors process data based on a Data Processing Agreement (DPA) and provide adequate protection guarantees.
5. Retention Period
We retain personal data for the duration of the contractual relationship and after its termination: Account data - 30 days after account cancellation; Invoices and accounting documents - 10 years (legal requirement); Documents uploaded by users - until deleted by user or 30 days after account cancellation; Analytics data - 26 months; Activity logs - 12 months.
6. Data Subject Rights
As a data subject, you have the right to: access your personal data; rectification of inaccurate data; erasure of data ("right to be forgotten"); restriction of processing; data portability; object to processing; withdraw consent (if processing is based on consent). You can exercise these rights by emailing info@realitytimeline.sk. We will respond to your request within 30 days.
7. Data Security
We implement appropriate technical and organizational measures to protect personal data: encrypted communication (HTTPS/TLS); secure password storage (bcrypt hash); data isolation between organizations (Row Level Security); regular backups; restricted access to data for authorized persons only.
8. Contact and Complaints
For questions regarding personal data protection, contact us at info@realitytimeline.sk. If you are not satisfied with our resolution, you have the right to file a complaint with the relevant supervisory authority.