Privacy Policy and Data Protection Rules

Who collects and process your personal data

This privacy policy and data protection rules provide our clients [natural persons] with information on which personal data of our clients we collect and how we process such personal data [hereinafter referred to as the “Rules”].
Your private data hereunder are collected and processed by Amasty s.r.o., a company established and existing under the law of Slovakia, with its registered office at: Špitálska 53, Bratislava - mestská časť Staré Mesto 811 01, Slovakia, Company Identification Number: 50 050 974, entered into the Commercial register of District Court of Bratislava I, Section: Sro, Entry No.: 107496/B [hereinafter referred to as the “AMASTY”].
AMASTY is a member of group of companies operating under the trademark Amasty®. Members of this group of companies are also Amasty Development Limited [Malta], NetStra Solutions s.r.o. [Slovakia], AmDev LLC [Belarus] and Design Enterprise Limited [United Kingdom] [hereinafter referred to as the “AMASTY Group”].
In order to provide for an effective protection of your personal data, these Rules may be subject to future changes and amendments. You will always find the updated version of these Rules on our website www.amasty.com.
AMASTY has the position of a controller of the personal data under the Regulation [EU] 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC [General Data Protection Regulation] [hereinafter referred to as the “GDPR”].

Which personal data do we collect and process

We collect and process only such personal data, which are needed in order to meet our duties and obligations under agreements concluded with you as our customer.
We collect and process the following personal and non-personal data: your first and last name, your email address, your residency address, IP address, domain name, website usage information. In case your support inquiry requires investigation, we may ask you to provide the following details: Magento admin access [Magento admin URL, username and password], HTTP authentication [username and password], Magento files access [protocol, hostname, port, username, authorization type, password, Magento directory] and additional details that are required to investigate and address your support inquiry as stipulated in Amasty Support License Agreement, the authorization details being stored in the system while your support inquiry is being processed and for seven days following its closure, and permanently deleted after the seven days’ period.

When you download and install products, for statistical purposes we may collect such data as the date the package was downloaded, and installation date (via Composer). When you submit authorization details, for statistical purposes we may collect such data as the current Magento version and edition, the list of extensions installed.

The purpose of your personal dara processing

We collect and process your personal data for the following purposes:
1. to provide you with support and customer care services, when you're submitting support inquiries via our helpdesk system, chat or other means of communication as per our Support License Agreement , and
2. to provide you with our services on the basis of an agreement on purchase of our products and services, improve our products and services provided to you, and
3. improve our products and services provided to you, and
4. marketing in order to provide you with latest information on our products and services in case you provide us with your consent to do so.

Legal title of personal data processing

The legal title based on which we process your personal data is:
1. Fulfillment of our legal obligations and duties under agreements concluded with you pursuant to Article 6 Section 1 letter b. of the GDPR, and
2. Your consent as our customer [hereinafter referred to as the “Data Subject”] to the processing of your personal data for marketing purposes pursuant to Article 6 Section 1 letter a. of the GDPR.

Term of personal data processing and place of storage

We process your personal data for a definite period of time.
Your personal data collected and processed by us in connection with provision of our services to you or with sell of our products to you pursuant to an agreement concluded between you and us are processed during the period, which is needed for proper fulfillment of our contractual duties and obligations towards you.
Your personal data collected and processed by us for the marketing purposes are stored and processed by us for the definite period of time of five years after you provide us with your respective consent.
Once the term of personal data processing lapses, we delete your personal data from our database and stop processing them.
We store and process your personal data either within the European Union member states or within the United States of America. The storage and processing of your personal data within the United States of America meets the strict conditions of personal data transfer from the member states of European Union to United States of America under the EU-U.S. Privacy Shield treaty.

Third persons and your personal data

Third persons may have access to your personal data collected and processed by us. However, any such access is needed in order to provide you with our services and / or our products properly and duly.
Your personal data may be made available to following companies which are members of the AMASTY Group:
1. Amasty Development Limited, with its registered office at: 12, Zachary Street, Valletta, VLT 1133, Malta, Company Identification (registration) Number: C 83668,
2. NetStra Solutions s.r.o., with its registered office at: Špitálska 53, Bratislava 811 01, Company Identification (registration) Number: 48 104 663,
3. Design Enterprise Limited, with its registered office at: Suite 100, The Studio, St Nicholas Close, Elstree Borehamwood, Hertfordshire WD6 3EW, United Kingdom, Company Identification (registration) Number: 4481350,
4. AmDev LLC [Belarus], with its registered office at: pr. Dzerzhinskogo 104A-1904, 220 116 Minsk, Belarus, Company Identification (registration) Number: 192814386.
All companies which are members to AMASTY Group meet the strict rules of data protection under the GDPR.
Your personal data may be made available also to third natural persons and / or companies which are not members of the AMASTY Group. Such third natural persons or companies have the position of processor towards the AMASTY company under the Article 4 Section 8 of the GDPR.

Your rights under the GDPR

You have following rights under the GDPR:
1. Right to information on the processing of your personal data [you have the right to ask us and require us to provide you with the information on how your personal data are processed by us],
2. Right to adjustment your personal data [in case we process your personal data which are not correct, you can ask us to correct them and process the right personal data],
3. Right to delete your personal data [i.e. right “to be forgotten”] [in case we process your personal data inconsistently with the personal data processing rules under the GDPR, you have the right to require us to stop processing your personal data and to delete them],
4. Right to limit the amount of the personal data to be processed by us [you have the right to ask us to limit the amount of the personal data to be processed by us until we deal with your previous request pursuant to Section 7 Subsection 7 letter a. and / or letter b. hereof],
5. Right to require to stop processing your personal data [in case you are the opinion that we process your personal data without any legal title, you have the right to require us to stop processing your personal data],
6. Right to transfer your personal data [you may ask us to provide you with your personal data in structured form which can be automatically read [analyzed] by a machine [computer]. Furthermore, you have the right to ask us to transfer your personal data in such form to another controller of your personal data.],
7. Right to be informed on the appropriate safeguards pursuant to Article 46 of the GDPR in case your personal data have been transferred to a state, which is not a member state of the European Union.

Processing of your personal data for marketing purposes

We use the direct marketing in order to inform our clients and customers on our services and products. We process your personal data for such marketing purposes only in case you have given your previous consent to us.
You have the right to recall your consent to process your personal data by us for the marketing purposes at any time. In case you do so, we are obliged to stop processing your personal data for marketing purposes. You can recall your consent by means of an email sent to our email address or written notice sent to the address of our registered office.

Cookies are text files placed on your computer’s browser to collect standard internet log information and visitor behavior information. This information is used to track visitor use of the website and to compile statistical reports on website activity. Cookies are also used to handle the same visitor session while you browse between pages of the website. For further information visit https://www.aboutcookies.org.
You can set your browser not to accept cookies and the above website tells you how to remove cookies from your browser.

Would you have any questions regarding the processing of your personal data by us, do not hesitate to contact us under the email address: support@amasty.com or by means of a written notice sent to the address of our registered office: Špitálska 53, Bratislava - mestská časť Staré Mesto 811 01, Slovakia.
Be also informed, that since AMASTY is registered under the Slovak law, the personal data authority overseeing AMASTY regarding the personal data processing is Slovak Office for Protection of Personal Data Protection. In case you have any doubts how we process your personal data, you may contact the Slovak personal data authority anytime.

The last update of the document was on January 13, 2021.

Privacy Policy and Data Protection Rules

Company Info

Legal

Loyalty Programs

Corporate

About Us