Privacy Policy

The data controller responsible for the processing of your personal data on this website (getdeepdata.com) is:

TTMSYSTEM, spol. s r. o.
Registered Office: J. Matušku 1994/16, 957 01 Bánovce nad Bebravou, Slovakia
Company Registration Number (IČO): 55308970
Tax Identification Number (DIČ): 2121945617
Email: support@getdeepdata.com

If you have any questions, concerns, or requests regarding your personal data or your rights under the General Data Protection Regulation (GDPR), please contact us at the email address listed above.

We process personal data that we obtain directly from you, from your interactions with our website, and from our third-party payment processors. This includes:

• Account Registration & Login Data: Your email address and account credentials (hashed passwords) when you register on our website.
• Usage & Technical Data: Your IP address, browser type, operating system, login timestamps, and system logs.
• Download & Activity Logs: Records of your access to our database, file download hashes, and download timestamps. This data is essential for managing your product license, delivering the purchased digital files, and verifying compliance with our Terms of Service (anti-piracy controls).
• Transaction & Billing Metadata: All billing and payments are securely processed by Creem.io (operated by Creem s.r.o., acting as our Merchant of Record and separate data controller). While Creem securely handles your credit card and raw payment information, they share transaction metadata with us (such as your name, billing email, country, and transaction reference) to allow us to provision your account, activate your purchased data packages, and fulfill our accounting obligations.

We only process your personal data in compliance with the General Data Protection Regulation (GDPR) (Article 6(1)). Our legal bases are:

• Performance of a Contract (Art. 6(1)(b) GDPR): Processing is necessary to create and manage your user account, deliver the historical data packages you purchase, and provide customer support.
• Compliance with a Legal Obligation (Art. 6(1)(c) GDPR): We are subject to statutory legal duties, specifically under Slovak bookkeeping, tax, and accounting legislation (e.g., Act No. 431/2002 Coll. on Accounting, as amended). This requires us to retain transactional history and invoice-relevant information.
• Legitimate Interests (Art. 6(1)(f) GDPR): Processing is necessary to protect our business, enforce our Terms of Service, prevent fraud, secure our technical infrastructure, and protect our proprietary database from unauthorized redistribution, piracy, or license violations. It is also used for the establishment, exercise, or defense of legal claims.

We store your personal data only as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory retention periods:

• User Account Data: Retained for the active lifetime of your account. If you request account deletion, we will purge your account profile, unless retention is required for legal or security reasons.
• Accounting & Invoicing Data: Transaction metadata and billing records must be retained for **10 years** following the end of the fiscal year in which the transaction took place, in strict compliance with Slovak accounting and tax laws. **This data cannot be deleted upon request prior to the expiration of this statutory period.**
• Technical & Licensing Logs: File download logs, IP address history, and security logs are retained for up to 2 years to prevent software piracy, detect system abuse, and defend against potential transaction disputes, after which they are deleted or anonymized.

Under the GDPR, you have the following statutory rights regarding your personal data:

• Right of Access (Art. 15 GDPR): You have the right to request a copy of the personal data we hold about you.
• Right to Rectification (Art. 16 GDPR): You have the right to request correction of any inaccurate or incomplete personal data.
• Right to Erasure / "To be Forgotten" (Art. 17 GDPR): You have the right to request the deletion of your personal data. Please Note: The right to erasure is NOT absolute under the GDPR. We are legally permitted and required to reject deletion requests for data that is:
  1. Necessary for compliance with our statutory tax and bookkeeping obligations under Slovak law (which requires a 10-year retention for invoice/transaction metadata).
  2. Necessary for the establishment, exercise, or defense of legal claims (e.g., verifying license terms, proving consent under Section 4 of our Terms of Service, or resolving payment disputes).
• Right to Restriction of Processing (Art. 18 GDPR): You have the right to request that we restrict processing in certain circumstances.
• Right to Data Portability (Art. 20 GDPR): You have the right to receive your data in a structured, commonly used, and machine-readable format.
• Right to Object (Art. 21 GDPR): You have the right to object to processing based on our legitimate interests.

To exercise any of these rights, please email us at support@getdeepdata.com. We will respond to your request within the statutory 30-day period.

If you believe that our processing of your personal data infringes on the GDPR or applicable data protection regulations, you have the right to lodge an official complaint with a data protection supervisory authority.

The competent authority for our company in Slovakia is:

Úrad na ochranu osobných údajov Slovenskej republiky (ÚOOÚ SR)
Address: Hraničná 12, 820 07 Bratislava 27, Slovak Republic
Website: https://dataprotection.gov.sk