Doklado App Privacy Policy

This Policy is effective as of 1.1.2026

We care about protecting your privacy. Please read these terms for processing personal data (hereinafter referred to as the “Privacy Policy”) carefully.

This Privacy Policy applies only to the processing of personal data of natural persons (e.g., individuals entering into contracts with us as entrepreneurs or acting on behalf of legal entities entering into contracts with us). Data relating to legal entities or linked to legal entities do not qualify as personal data and are not subject to the GDPR Regulation.

This Privacy Policy describes in detail how we collect, use, and store your personal data in connection with the activities performed when using the Doklado App. If you have any questions, inquiries, or requests regarding privacy, please contact us at info@doklado.sk.

Whenever the terms “Controller,” “we,” “us,” or similar expressions are used in this Privacy Policy, they refer to Doklado, s.r.o., Company ID: 53781856, with registered office at Alexandra Rudnaya 2489/40, 010 01 Žilina, registered in the Commercial Register of the District Court Žilina, Section: Sro, File No. 77283/L.

For the purposes of this Privacy Policy, the following terms have the following meanings:

Personal Data: Any information relating to an identified or identifiable living natural person that we process for any purpose described in this Privacy Policy. For the avoidance of doubt, data related to a legal entity entered in the App does not constitute personal data.

Controller: The entity that determines the purpose of processing personal data; in this Privacy Policy, this is us.

Processor: Any person or entity (natural or legal) that processes personal data on behalf of the Controller.

GDPR Regulation: Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and the free movement of such data.

App: The Doklado application used to provide the Service, available on mobile devices and web browsers.

Personal Data Protection Act: Act No. 18/2018 Coll. on the Protection of Personal Data and on Amendments and Supplements to Certain Acts.

Other capitalized terms used in this document have the same meaning as in the General Terms and Conditions of the Doklado Service.

We process your personal data in accordance with the GDPR Regulation and the Personal Data Protection Act.

What Personal Data Do We Collect About You?

Full Name
When creating a User Account or placing an Order, we may ask for your full name, which is used to identify you as an entrepreneur using the Doklado App or as a person representing an entrepreneur using the App.
If your business name consists of your personal name, it also falls under this definition of personal data.

Profile Picture (photo)
You may upload a photo when creating or setting up your User Account.
Use of this feature is optional.V rámci vytvorenia alebo nastavenia Užívateľského účtu môžete nahrať svoju fotografiu.Využitie tejto funkcie je dobrovoľné.

Company ID
If you are a sole proprietor, we may process your Company ID (IČO) issued by the Slovak Statistical Office, which serves as your unique identifier.
For legal entities, the IČO is not considered personal data, as it is not linked to a specific natural person.

Email Address
When you create a User Account or place an Order, we process the email address you provide during registration or order placement.

Phone Number
We may request your phone number when creating a User Account or placing an Order, for the purpose of contacting you regarding the use of the App.

Registered Address / Place of Business
If you are a sole proprietor using the App or Service, we may process your registered address or place of business.For legal entities, the same data may be processed, but as it cannot be linked to a natural person, it is not considered personal data.

Expense Data
If you are a sole proprietor creating eDocuments through the App, expense information from these eDocuments may be processed for statistical purposes and to determine which marketing offers may be relevant to you.
For legal entities, the same data may be processed, but it is not considered personal data as it cannot be linked to a natural person.

Supplier Data
If you are a sole proprietor creating eDocuments, information about the issuer of the document may be processed for statistical purposes and to determine which marketing offers may be relevant to you.
For legal entities, the same data may be processed, but it is not considered personal data.

General Device Information
We process information such as your IP address, access time, and details about the hardware and software you use when accessing the App. This data is mainly processed to manage communication between your device and our servers.

Personal Data Provided When Contacting Us
If you contact us via email or other means, we process the personal data necessary to communicate with you and respond to your inquiry.

How We Process Your Personal Data

1. Creating a User Account and Providing Access to the App
We process your personal data, specifically your name, surname, general device information, email address, and phone number, for the purpose of taking steps prior to entering into a contract (initiated by accepting the Terms and Conditions during account registration), as well as for the performance of the contract itself.

Even if the contract is concluded with a legal entity you represent, we require your personal data to verify your authority to act on behalf of the User during contract conclusion and to confirm your authority to act for the User. In this case, your personal data as a representative of a legal entity is also processed based on our legitimate interest in verifying your authority to act on behalf of the User (legal basis: Article 6(1)(f) GDPR).

The legal basis for processing your personal data in this context is: Prior measures before entering into a contract to which you are a party, and Performance of the contract to which you, as the data subject, are a party (legal basis: Article 6(1)(b) GDPR). Personal data provided in connection with the creation of a User Account and use of the App is processed for the duration of your User Account and for 3 years after its deletion.

2. Conclusion of Service Agreements
We process your personal data, including full name, Company ID (IČO), registered address, email, phone number, expense data, and supplier information, for the purpose of taking steps prior to entering into the Service Agreement and the contract arising from acceptance of the Terms of Service when creating a User Account, as well as for the purpose of concluding and performing these agreements.

Even if the contract is concluded with a legal entity you represent, we require your personal data to verify your authority to act on behalf of the User during contract conclusion and to confirm your authority to act for the User. In this case, your personal data as a representative of a legal entity is also processed based on our legitimate interest in verifying your authority to act on behalf of the User (legal basis: Article 6(1)(f) GDPR).

The legal basis for processing your personal data in this context is: Prior measures before entering into a contract to which you are a party, and Performance of the contract to which you, as the data subject, are a party (legal basis: Article 6(1)(b) GDPR).
Personal data provided in connection with the delivery of Services under the Agreement is processed for the duration of the Agreement and for 3 years following the termination of the most recent Agreement concluded with you.

3. Provision, Improvement, and Optimization of the App and Services
We use general information about your device to provide, improve, and optimize the operation of the App and Services, enhance user experience, ensure technical support, perform analytical and statistical evaluations of App usage, and prevent misuse of the App and Services.

The legal basis for processing personal data in this context is our legitimate interest in ensuring the proper operation of the App and Services, optimizing App functionalities, and improving the quality of the provided Services (legal basis: Article 6(1)(f) GDPR).
Personal data collected for this purpose is processed for 3 years from your last use of the App.

4. Marketing Purposes
If you, as a natural person, have consented to the processing of your personal data for marketing purposes, we may process your personal data, including name and surname, company ID (IČO), registered address, phone number, email, general device information, expense data, and supplier information, to send you marketing offers from our company and our business partners that may be of interest to you based on your use of the App or Services.

When consent is granted, the legal basis for processing your personal data for marketing purposes is your consent (legal basis: Article 6(1)(a) GDPR). Your personal data will be processed for the duration of your consent, until its withdrawal, or for 3 years from the date of consent.

If you have not given consent but have purchased a Service from us, your personal data in the same categories (name and surname, IČO, registered address, phone number, email, general device information, expense data, and supplier information) may still be processed to contact you with offers from our company and our business partners that may be relevant based on your use of the App or Services.

In this case, the legal basis for processing your personal data is our legitimate interest and the legitimate interest of our business partners in conducting direct marketing, aimed at offering you information and products that may be relevant and interesting to you (legal basis: Article 6(1)(f) GDPR). Your personal data will be processed for 3 years from the end of your last contract with us, and you have the right to object to this processing at any time.

5. Responding to Questions, Requests, and Inquiries
We process the personal data you provide when communicating with us to handle your questions, requests, or inquiries, or to perform other actions related to your communication.

The legal basis for processing your personal data in this context is our legitimate interest in responding to your questions, requests, or inquiries (legal basis: Article 6(1)(f) GDPR).

Your personal data will be processed for the period necessary to respond to your question, request, or inquiry, or to carry out related actions, but for no longer than 1 year.

6. Handling Requests Related to the Exercise of Data Subject Rights under GDPR (Personal Data Protection Act)
We process the personal data you provide in your request related to exercising your rights under the GDPR or the Personal Data Protection Act for the purpose of reviewing, assessing, executing, handling, and informing you about the outcome of your request regarding the exercise of any of the rights under Articles 16 to 22 of the GDPR.

The legal basis for processing your personal data in this context is our legal obligation (legal basis: Article 6(1)(c) GDPR).

Your personal data in this context will be processed and stored for 10 years from the date the request is received.

Who We Share Your Personal Data With

We may share your personal data with third parties in the following cases:

• When required by applicable law, particularly at the request of law enforcement authorities, courts, other public authorities, or other authorized entities.

• When necessary to fulfil our obligations and safeguard our legitimate interests, for example with our lawyers, advisors, auditors, IT service providers, and similar partners.

Your personal data may also be shared with third parties through cookies used by our business partners and service providers during the operation of the Doklado application. Some of this data sharing requires your consent or the existence of a legitimate interest. More information about this data processing is available in our Cookie Policy or via the consent banner when visiting the Application.

For parties acting as Processors, we conclude contracts in accordance with GDPR. These Processors handle personal data solely on our instructions and on behalf of Doklado. All our Processors process personal data in compliance with this Privacy Policy.

Transfer of Personal Data Outside the EU

We do not transfer your personal data outside the European Economic Area (EEA). If such a transfer were to occur in the future, we will ensure that it is carried out under conditions and standards compliant with the GDPR and the Slovak Data Protection Act.

Your Rights Regarding Personal Data

As a data subject whose personal data we process, you have the following rights:

Right to Withdraw Consent
If we process your personal data based on your consent, you have the right to withdraw that consent at any time. You can withdraw your consent electronically at podpora@doklado.sk. Withdrawal of consent does not affect the lawfulness of the processing carried out based on your consent prior to its withdrawal.

Right of Access
You have the right to receive a copy of the personal data we hold about you, as well as information on how we use your data. In most cases, your personal data will be provided in written form unless you request another format. If you requested this information electronically, we will provide it electronically where technically possible.

Right to Rectification
We take reasonable steps to ensure that the information we hold about you is accurate, complete, and up to date. If you believe that any data we hold is inaccurate, incomplete, or outdated, please contact us to have it corrected, updated, or supplemented.

Right to Erasure (“Right to be Forgotten”)
You have the right to request the deletion of your personal data, for example, if the data we hold is no longer necessary for the purposes for which it was collected. However, this right must be considered in light of all relevant circumstances, including legal and regulatory obligations, which may prevent us from fulfilling your request.

Right to Restriction of Processing
Under certain circumstances, you have the right to request that we stop processing your personal data. This applies, for example, if you believe that the data we hold about you is inaccurate or if you believe that we no longer need to process your personal data.

Right to Data Portability
Under certain circumstances, you have the right to request that your personal data, which you have provided to us, be transferred to another third party of your choice. This right applies only to personal data obtained from you based on your consent or in connection with a contract to which you are a party.

Right to Object
You have the right to object to the processing of your personal data based on our legitimate interests. If we do not have a compelling legitimate reason to continue processing and you object, we will stop processing your personal data.

Right to Lodge a Complaint with a Supervisory Authority
If you believe that your personal data has been processed unfairly or unlawfully, you may file a complaint with the supervisory authority, the Office for Personal Data Protection of the Slovak Republic, Hraničná 12, 820 07 Bratislava 27; Tel.: +421 2 3231 3214; Email: statny.dozor@pdp.gov.sk; https://dataprotection.gov.skIf submitting a complaint electronically, it must comply with the requirements set out in Section 19(1) of Act No. 71/1967 Coll., on Administrative Procedure (Administrative Code).

Security

All personal data we collect and process is protected by appropriate technical measures and security safeguards to prevent unauthorized access or misuse. We continuously improve and implement new administrative, technical, and organizational measures to ensure adequate protection of personal data.

However, it is important to remember that the transmission of data over the public Internet or any electronic data storage cannot be guaranteed to be 100% secure.

Changes to the Privacy Policy

We reserve the right to modify or update this Privacy Policy at any time.

If we make any changes, we will post the updated Privacy Policy in the Application and, if necessary, notify you of the changes via email.

The revised Privacy Policy will become effective from the date we specify as the effective date.

Contact Us

If you have any questions, inquiries, or requests regarding this Privacy Policy, wish to withdraw consent, or exercise your rights, please contact us by email at info@doklado.sk.