Privacy Policy

Definitions

For clarity and consistency, the following terms are used throughout this Privacy Policy:

• Privacy Policy / Policy: this document, issued to fulfill our information obligations under Articles 13 and 14 of the GDPR.
  
  
• Data: personal data, meaning any information relating to an identified or identifiable natural person. The obligation to provide information is met by making this Privacy Policy continuously available.
  
  
• You: the individual whose Data is processed in accordance with this Policy.
  
  
• We / Controller / Us / Company: Aretasedio Edge s.r.o. ICO 17091357, with its registered office at Kaprova 42/14, Staré Město, 11000 Praha, Czech Republic. You can reach us by post at the above address or via e-mail: info@aretasedio.com.
  
  
• GDPR: Regulation (EU) 2016/679 of the European Parliament and Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data, repealing Directive 95/46/EC.
  
  
• Customer: an entity with which the Controller has entered into or is negotiating a contract for the provision of services.
  
  
• Representative: a person acting on behalf of a Customer or another entity with whom the Controller communicates or cooperates.
  

‍

Scope of Data Collection 

This Policy applies to the Data we collect and process from: 

• individuals contacting us, especially via e-mail;
• users of our website https://aretasedio.com, including information gathered through cookies.

‍

Purposes, Legal Basis, and Retention

‍

We only store Data for as long as necessary to fulfill its processing purpose. Once that purpose no longer applies, Data will be erased or anonymized, unless retention is required or permitted by law.

Data We Do Not Process

We do not knowingly collect or store Data of minors under 18. If you believe your child has provided us with Data without parental consent, please contact us immediately so we may remove it. 

‍

We do not process special categories of Data (sensitive data) such as race, religion, political opinions, trade union membership, biometric/genetic data, health information, sexual orientation, or criminal convictions. If you believe such information has been shared with us, notify us so we can promptly delete it.

‍

Data Recipients 

Your Data may be shared with: 

• external service providers (e.g., contractors, accountants, legal advisors, hosting providers, CRM systems, IT tools) assisting us in fulfilling obligations;
  
  
• public authorities, including law enforcement, when required under applicable laws.

All third-party processors are bound by agreements ensuring full compliance with Article 28 GDPR.

‍

Your Rights

In accordance with GDPR, you are entitled to:

• Withdraw consent at any time (if processing is based on consent).
  
  
• Object to processing carried out under legal grounds other than consent.
  
  
• Be informed about categories of Data collected.
  
  
• Opt out from use of your Data for business purposes.
  
  
• Erasure (“right to be forgotten”).
  
  
• Access to the Data we process about you.
  
  
• Non-discrimination: we provide equal services regardless of the exercise of your rights.
  
  
• Rectification of inaccurate or incomplete Data.
  
  
• Restriction of processing under specified conditions.
  
  
• Data portability in a structured, commonly used, machine-readable format (where technically feasible).
  
  
• Lodge a complaint with a competent supervisory authority if you believe your rights have been violated.

We will address your request promptly and inform you of actions taken.

‍

International Transfers

Your Data may be transferred outside the European Economic Area (EEA). When this occurs, we implement safeguards to ensure your Data is protected to the same standard as within the EU, including:

• working only with partners compliant with EU standards;
  
  
• limiting access to authorized persons bound by confidentiality obligations;
  
  
• applying security measures, including breach response protocols and supervisory authority notifications where required.

Some of our third-party partners are located outside the EEA. In these cases, appropriate contractual clauses and safeguards are applied. Further information about adequacy decisions is available here: https://commission.europa.eu/law/law-topic/data-protection/data-transfers-outside-eu/adequacy-protection-personal-data-non-eu-countries_en 

For details about specific transfer mechanisms, please contact us. 

‍

Retention of Personal Data 

We keep your Data only as long as necessary for the purposes for which it was collected, taking into account:

• the objectives of processing;
  
  
• the type of Data involved;
  
  
• the lawful basis for processing;
  
  
• statutory obligations;
  
  
• business needs (e.g., dispute resolution, enforcement of agreements).

We regularly review stored Data against these criteria to determine whether it should be retained or securely deleted.

‍

Automated Decision-Making

The Company does not engage in automated decision-making, including profiling.

‍

Updates to This Policy 

This Privacy Policy is effective from the date of publication on our website. Future updates may be introduced to reflect regulatory or operational changes.

• The effective date of each version will be shown at the top of the document.
  
  
• In certain cases, we may provide additional notice (e.g., via e-mail or website notification) before changes take effect.

Last updated: September 08, 2025