Who collects and process your personal data
on which personal data of our clients we collect and how we process such personal data [hereinafter
referred to as the “Rules”].
Your private data hereunder are collected and processed by Amasty s.r.o., a company established and
existing under the law of Slovakia, with its registered office at: Špitálska 53, Bratislava -
mestská časť Staré Mesto 811 01, Slovakia, Company Identification Number: 50 050 974, entered into
the Commercial register of District Court of Bratislava I, Section: Sro, Entry No.: 107496/B
[hereinafter referred to as the “AMASTY”].
AMASTY is a member of group of companies operating under the trademark Amasty®. Members of this
group of companies are also Amasty Development Limited [Malta], NetStra Solutions s.r.o. [Slovakia],
AmDev LLC [Belarus] and Design Enterprise Limited [United Kingdom] [hereinafter referred to as the
In order to provide for an effective protection of your personal data, these Rules may be subject to
future changes and amendments. You will always find the updated version of these Rules on our
AMASTY has the position of a controller of the personal data under the Regulation [EU] 2016/679 of
the European Parliament and of the Council on the protection of natural persons with regard to the
processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC
[General Data Protection Regulation] [hereinafter referred to as the “GDPR”].
Which personal data do we collect and process
We collect and process only such personal data, which are needed in order to meet our duties and
obligations under agreements concluded with you as our customer.
We collect and process the following personal data: your first and last name, your email address,
your residency address, IP address, domain name, website usage information. In case your support
inquiry requires investigation, we may ask you to provide the following details the authorization
details being stored in the system while your support inquiry is being processed and for seven days
following its closure, and permanently deleted after the seven days' period: Magento admin access
[Magento admin URL, username and password], HTTP authentication [username and password], Magento
files access [protocol, hostname, port, username, authorization type, password, Magento directory].
When you download and install products, for statistical purposes we may collect such data as the
current version of Magento and PHP, the usage of Split Database and Varnish, list of extensions
installed, the date the package was downloaded, and installation date (via Composer).
The purpose of your personal dara processing
We collect and process your personal data for following purposes:
to provide you with our services on the basis of an agreement on purchase of our products
improve our products and services provided to you, and
marketing in order to provide you with latest information on our products and services in
case you provide us with your consent to do so.
Legal title of personal data processing
The legal title based on which we process your personal data is:
Fulfillment of our legal obligations and duties under agreements concluded with you pursuant
to Article 6 Section 1 letter b. of the GDPR, and
Your consent as our customer [hereinafter referred to as the “Data Subject”] to the
processing of your personal data for marketing purposes pursuant to Article 6 Section 1
letter a. of the GDPR.
Term of personal data processing and place of storage
We process your personal data for a definite period of time.
Your personal data collected and processed by us in connection with provision of our services to you
or with sell of our products to you pursuant to an agreement concluded between you and us are
processed during the period, which is needed for proper fulfillment of our contractual duties and
obligations towards you.
Your personal data collected and processed by us for the marketing purposes are stored and processed
by us for the definite period of time of five years after you provide us with your respective
Once the term of personal data processing lapses, we delete your personal data from our database and
stop processing them.
We store and process your personal data either within the European Union member states or within the
United States of America. The storage and processing of your personal data within the United States
of America meets the strict conditions of personal data transfer from the member states of European
Union to United States of America under the EU-U.S. Privacy Shield treaty.
Third persons and your personal data
Third persons may have access to your personal data collected and processed by us. However, any such
access is needed in order to provide you with our services and / or our products properly and duly.
Your personal data may be made available to following companies which are members of the AMASTY
All companies which are members to AMASTY Group meet the strict rules of data protection under the
Amasty Development Limited, with its registered office at: 12, Zachary Street, Valletta, VLT
1133, Malta, Company Identification (registration) Number: C 83668,
NetStra Solutions s.r.o., with its registered office at: Špitálska 53, Bratislava 811 01,
Company Identification (registration) Number: 48 104 663,
Design Enterprise Limited, with its registered office at: Suite 100, The Studio, St Nicholas
Close, Elstree Borehamwood, Hertfordshire WD6 3EW, United Kingdom, Company Identification
(registration) Number: 4481350,
AmDev LLC [Belarus], with its registered office at: pr. Dzerzhinskogo 104A-1904, 220 116
Minsk, Belarus, Company Identification (registration) Number: 192814386.
Your personal data may be made available also to third natural persons and / or companies which are
not members of the AMASTY Group. Such third natural persons or companies have the position of
processor towards the AMASTY company under the Article 4 Section 8 of the GDPR.
Your rights under the GDPR
You have following rights under the GDPR:
Right to information on the processing of your personal data [you have the right to ask us
and require us to provide you with the information on how your personal data are processed
Right to adjustment your personal data [in case we process your personal data which are not
correct, you can ask us to correct them and process the right personal data],
Right to delete your personal data [i.e. right “to be forgotten”] [in case we process your
personal data inconsistently with the personal data processing rules under the GDPR, you
have the right to require us to stop processing your personal data and to delete them],
Right to limit the amount of the personal data to be processed by us [you have the right to
ask us to limit the amount of the personal data to be processed by us until we deal with
your previous request pursuant to Section 7 Subsection 7 letter a. and / or letter b.
Right to require to stop processing your personal data [in case you are the opinion that we
process your personal data without any legal title, you have the right to require us to stop
processing your personal data],
Right to transfer your personal data [you may ask us to provide you with your personal data
in structured form which can be automatically read [analyzed] by a machine [computer].
Furthermore, you have the right to ask us to transfer your personal data in such form to
another controller of your personal data.],
Right to be informed on the appropriate safeguards pursuant to Article 46 of the GDPR in
case your personal data have been transferred to a state, which is not a member state of the
Processing of your personal data for marketing purposes
We use the direct marketing in order to inform our clients and customers on our services and
products. We process your personal data for such marketing purposes only in case you have given your
previous consent to us.
You have the right to recall your consent to process your personal data by us for the marketing
purposes at any time. In case you do so, we are obliged to stop processing your personal data for
marketing purposes. You can recall your consent by means of an email sent to our email address or
written notice sent to the address of our registered office.
Cookies are text files placed on your computer’s browser to collect standard internet log
information and visitor behavior information. This information is used to track visitor use of the
website and to compile statistical reports on website activity. Cookies are also used to handle the
same visitor session while you browse between pages of the website. For further information visit
You can set your browser not to accept cookies and the above website tells you how to remove cookies
from your browser.
Would you have any questions regarding the processing of your personal data by us, do not hesitate
to contact us under the email address: firstname.lastname@example.org or by means of a written notice sent to
the address of our registered office: Špitálska 53, Bratislava - mestská časť Staré Mesto 811 01,
Be also informed, that since AMASTY is registered under the Slovak law, the personal data authority
overseeing AMASTY regarding the personal data processing is Slovak
Office for Protection of Personal
Data Protection. In case you have any doubts how we process
your personal data, you may contact the Slovak personal data authority anytime.
The last update of the document was on August 13th, 2020.