1. Controller
The controller of your personal data is HACCP Consulting s.r.o., [registered address], Slovakia, company ID (IČO) [ ]. Contact: info@haccp.sk.
2. What we process and why
- Buyer: email address, invoice details (name or company, address, company and tax numbers), the order, and the payment result — to conclude and perform the contract and to issue invoices (performance of a contract; legal obligation for accounting).
- Participant: email address, the name, date of birth, town and country of birth for the certificate, the company on the certificate, course progress, and test results — to provide the course and issue and verify the certificate (performance of a contract).
- Certificate verification: anyone with the certificate code sees the name, course, issue date, and status — so that employers and inspectors can check a certificate (legitimate interest).
- Security: IP addresses of form submissions, for a limited time — to protect the forms against abuse (legitimate interest).
3. Who receives the data
Our processors: Stripe (card payments), Resend (emails), Neon (database, EU), Vercel (hosting), Bunny (video delivery), Cloudflare (form protection). We do not sell personal data.
4. How long we keep it
Unpaid orders up to 30 days after they end; accounting records as the law requires (in Slovakia 10 years); course progress for the access period; certificates and their verification data without time limit.
5. Your rights
You can ask for access, correction, deletion, restriction, data portability, and object to processing based on legitimate interest: info@haccp.sk. You may complain to the Office for Personal Data Protection of the Slovak Republic (www.dataprotection.gov.sk) or the authority of your country.