Privacy Policy

1. General provisions

This Privacy Policy explains how CleanOn (hereinafter referred to as “we”, “us”, “the Company”) collects, uses, stores and protects the personal data of website users. https://cleanon.sk, clients who place online orders, create a personal account, purchase a cleaning subscription, select a date and time in the calendar, make a payment, and contact customer support. Such a policy must comply with the requirements of GDPR and applicable Slovak legislation.

2. What personal data can we collect

What personal data can we collect?

Data that you provide to us yourself

• Full name;
• phone number;
• email addresses;
• Service delivery address;
• login details;
• Order information: type of service, room parameters, additional services, selected subscription, order comments;
• Selected cleaning date and time;
• Support requests, complaints, messages, feedback and reviews.

Дані пов’язані з оплатою

We can receive information about the chosen payment method, payment status, transaction amount, order number, receipts, or other payment confirmations. Full bank card payment details are usually not processed by us directly but by the relevant payment provider. The website plans to accept payments via credit card, Apple Pay, and PayPal.

Data collected automatically

When you use our website, we may automatically receive:

• IP address;
• Device type;
• Browser type;
• Language settings;
• Technical access logs;
• cookies and similar technologies.

Users' rights regarding such processing and general data protection principles derive from the GDPR.

3. What purposes do we process personal data for

We only process personal data to the extent necessary for a specific purpose.

Processing of appeals and requests

We use your contact details to respond to your request, provide advice, prepare a quote, or assist with placing an order.

Legal basis: taking steps prior to entering into a contract or the performance of a contract. Such legal bases are directly provided for by the GDPR.

Order Processing and Fulfilment

We process your data for accepting, confirming, planning, and fulfilling your order, organising cleaner visits, communication regarding dates and times, and clarifying the address and service specifications.

Legal basis: fulfilment of the contract.

Creation and maintenance of a personal account

We can process data related to the purchase of cleaning packages, tracking remaining visits, booking future cleans, changing dates, and managing subscriptions.

Legal basis: fulfilment of the contract.

Receipt and recording of payments

We process data necessary for online payments, payment confirmation, invoice generation, internal financial accounting, and, where applicable, refunds.

Legal basis: performance of the contract and fulfilment of legal obligations in the area of accounting and tax accounting. GDPR permits processing necessary for the performance of a contract and for compliance with legal obligations.

Sending service messages

We may send you service messages related to your order: confirmations, reminders, status changes, payment details, subscription updates, or booking information.

Legal basis: fulfilment of the contract.

Marketing newsletters

If you have agreed to this separately, we can send you promotions, special offers, discounts, service reminders, or other marketing information.

Legal basis: your consent. Consent can be withdrawn at any time without affecting the lawfulness of processing carried out prior to withdrawal. GDPR expressly provides for the possibility of withdrawing consent.

Website security and abuse prevention

We may use technical data, access logs and other information to protect the site, detect technical faults, prevent fraud, unauthorised access and abuse.

Legal basis: our legitimate interest in ensuring the security of the site and service. Such a legal basis is permitted by GDPR.

Customer support, complaints, and claims

We can process data to consider appeals, complaints, claims, and service quality requests.

Legal basis: performance of a contract, performance of legal obligations, or our legitimate interest in good customer service. The legal framework for such grounds is provided by the GDPR.

4. Are you obliged to provide us with data

The provision of certain personal data is necessary for processing and fulfilling an order, creating an account, purchasing a subscription, booking a time slot, and making a payment. If you do not provide the mandatory data, we may be unable to fulfil your order or grant you access to the relevant service features. Your project inherently includes online ordering, customer accounts, subscriptions, a calendar, and online payments, so these functions will not work without a certain amount of data.

5. Who can we transfer personal data to

We can transfer personal data only to recipients to whom it is objectively necessary for the operation of the service, including:

• for hosting providers and technical contractors of the website;
• for developers, administrators and service contractors who maintain a WordPress website;
• payment providers;
• to accounting, legal, or tax advisors;
• email marketing services or CRMs, if they are used;
  calendar and booking services;
• to internal notification services for managers, if such functionality is enabled;
• to government bodies or other persons if required by law.

6. Data transfers outside the EEA

We aim to use providers that ensure an adequate level of data protection. If personal data is transferred outside the European Economic Area within the scope of the service, such transfer shall only take place if there is a legal mechanism provided for by the GDPR, for example, based on an adequacy decision or standard contractual clauses. Such mechanisms are expressly provided for by European data protection legislation.

7. How long do we keep personal data

We retain personal data for no longer than is necessary for the purposes for which it is processed, or for as long as required by law.

• data requests via form or email - within the time required for a response and further communication;
• account data — while the account is active, and after deletion — for the period necessary for backup, protection of rights or fulfillment of legal obligations;
• order and subscription data — during the term of the contractual relationship and additionally for the period necessary to protect legal claims;
• payment and accounting documents — for the period established by accounting and tax legislation;
• data for marketing mailings – until withdrawal of consent or until the expiry of the period defined for the relevant campaign;
• Technical journals - for a limited period necessary for safety and diagnostics.

8. Your rights

Under GDPR, you have the right to:

• Get information about how your data is processed;
• to access your personal data;
• request correction of inaccurate or incomplete data;
• to request the erasure of data in cases provided for by law;
  request restriction of processing;
• object to processing in certain cases;
• Obtain data in a portable format, if applicable;
• withdraw consent at any time if processing is based on consent;
• make a complaint to the supervisory authority.

9. Cookies and similar technologies

Our website may use cookies and similar technologies for:

• correct website operation;
• saving the selected language and settings;
• analysts;
• improving the user experience;
• marketing or remarketing purposes, if such tools are used and if you have given consent when required.

10. Personal Data Protection

We take appropriate technical and organisational measures to protect personal data from loss, destruction, unauthorised access, alteration or disclosure. Such measures may include access control, backup, role limitations, account protection, and contractual guarantees with contractors. The GDPR requires that the controller ensures an appropriate level of security, taking into account the risks of processing.

11. Complaint to the supervisory authority

If you believe your personal data is being processed illegally or in violation of your rights, you have the right to lodge a complaint with the Office for Personal Data Protection of the Slovak Republic. This is explicitly provided for by both the Slovak data protection authority and the GDPR.

12. Amendments to this Policy

We may update this Privacy Policy from time to time. The current version will always be posted on this page with the date of the update indicated. If the changes are significant, we may notify you additionally via the website, email, or in your personal account.