Privacy Policy

Salona s.r.o., ID no. 21988242, with its registered seat at Nové sady 988/2, Staré Brno, 60200 Brno ("we") is the operator of Testopia, an app that allows you to learn efficiently, create refined tests and share your tests with others ("App").

We recommend that you read this information carefully. If you have any questions, you can contact us at any time using the contact details below. As we are company located in European Union, the processing of personal data is governed by Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC ("GDPR").

A. Personal Data Processed

When you use our App, personal data may be processed. As we want to be as transparent as possible, we divided personal data that we process about you as personal data controller into these categories:

• Identification information, specifically your name and surname.
• Contact information, specifically your e-mail address.
• Your content, such as information, documents and photos that you upload to the App to create the test.

B. Purposes of the Processing of Personal Data

We process your personal data as a data controller for the processing purposes, legal bases and periods set out below.

B.1. Provision of App functionalities

We primarily process personal data to provide you with our App and to treat you as a user, when you decide to create a profile in App. Personal data is processed to authenticate you as the user, enable the App functionalities and features, ensure support or ensure functionality of our App in general. As part of this, we may also send you messages about the functionalities of the App, new releases, approvals, etc.

For this purpose, we process these categories of personal data:

• Identification information, Contact information, Your content.

The legal basis for this processing is the performance of the contract between you and us (contract created by registration and acceptance of the Terms of Use) and the need to take steps at your request before entering the contract.

The data are processed for the duration of the mutual relationship and for the period necessary for the performance of the obligations under such contract. If you want to delete your account in App, you may write us on e-mail: testopiaapp@gmail.com and we will delete your account manually.

B.2. Internal records and protection of our rights

We may process your data for the purposes of keeping internal records within our company, protecting our rights and legal claims, and to ensure that only you use our App in accordance with their purpose.

We would like to inform you that third party tools described below in Article C. of this Privacy Policy may be used to process Your content. However, we do not store Your content in any way, it is always used for the purpose of creating the test you have requested and is then immediately deleted.

For this purpose, we process these categories of personal data:

• Identification information, Contact information.

The legal basis for this processing is our legitimate interest in keeping internal records, statistics, and the protection of our rights. The data is processed until a maximum of 5 years after the termination of the concluded contract (or longer in the event of a dispute), or for a maximum of 3 years after the collection of personal data if no contract has been concluded.

B.3. Support and promotion of our products and services

We may also send you e-mails connected with marketing communication (e.g. promotion of our other products, projects etc.).

For this purpose, we process these categories of personal data:

• Contact information.

The legal basis for this processing is your consent. The data is processed until you revoke such consent in any e-mail that we send you or via contacting us via e-mail: testopiaapp@gmail.com. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

C. Sharing of Personal Data

At the same time, we may share personal information with third parties who help us provide our App to you. These parties act as our data processors and process personal data for us, within the scope of our processing purposes set out above. Those data processors may be:

• Google LLC, which provides us with AI tools to create tests and provide our services. The company is registered under Data Privacy Framework.
• Company which provides us with cloud storage services.

We hereby confirm that any third party with whom our App shares personal data, such as analytics tools, will provide equal protection of personal data as stated in this Privacy policy.

Where we share your personal data with controllers and processors in third countries (outside the EEA), we only do so where there is a decision by the European Commission that a particular country outside the EEA provides an adequate level of data protection, including where controllers or processors have adopted additional data protection measures such as Binding Corporate Rules (BCRs) or Standard Contractual Clauses (SCCs).

D. Your Rights in Processing and the Possibility of Exercising Them

Just as we have rights and obligations when processing your personal data, you have certain rights when processing your personal data as set out in the following paragraphs. You have the right to:

• request access to your personal data;
• withdraw your consent;
• request rectification of your personal data;
• request erasure of your personal data;
• request restriction of the processing of your personal data;
• request portability of your personal data;
• object to the processing of your personal data; or
• lodge a complaint with the relevant supervisory authority.

In all matters related to the processing of your personal data, whether it is a question, the exercise of rights, sending a complaint to our hands, etc., you can contact us at testopiaapp@gmail.com.

Your request will be processed without undue delay, at most within 1 month. In exceptional cases, in particular due to the complexity of your request, we are entitled to extend this period by a further 2 months. We will, of course, always inform you of any such extension and the reason for it.

You also have the right to lodge a complaint with the supervisory authority as described below.

D.1. Right of access

You have the right to obtain confirmation from us as to whether or not we are processing your personal data.

If we process your personal data, you also have the right to request access to information about the purpose and scope of the processing, the recipients of the data, the duration of the processing, the right to rectification, erasure, restriction of processing and to object to the processing, the right to lodge a complaint with a supervisory authority and the sources of the personal data (this information is already provided in this document).

You can also ask us for a copy of the personal data we process. We provide the first copy free of charge; further copies may be subject to a fee. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.

D.2. Right to withdraw consent

You have the right to withdraw your consent to the processing of personal data at any time. However, the withdrawal of consent does not affect the lawfulness of the processing prior to such consent, nor does it lead to the termination of the processing of personal data that has already been anonymized.

D.3. Right to repair

You have the right to request us to correct inaccurate personal data concerning you. Depending on the purpose of the processing, you may also have the right to have incomplete personal data completed, including by providing an additional declaration.

D.4. Right to erasure (right to be forgotten)

You have the right to request the deletion of your personal data in cases where:

• we no longer need your personal data for the purposes for which it was collected or processed;
• you withdraw the consent on the basis of which the personal data was processed and there is no further reason for processing it;
• you object to processing and there are no other overriding reasons for processing, or you object to processing for direct marketing purposes;
• personal data is processed in violation of the law.

However, you cannot exercise this right where the processing is necessary for compliance with our legal obligations or tasks entrusted to us in the public interest or for the establishment, exercise, or defense of legal claims.

D.5. Right to restriction of processing

You have the right to request restriction of the processing of your personal data in cases where:

• you contest the accuracy of your personal data; in this case, you may request a restriction of processing until the accuracy of the personal data has been verified;
• the processing is contrary to the law and instead of erasure, you request a restriction of the processing of personal data;
• we no longer need your personal data for the purposes for which it was collected or processed, but you require it for the establishment, exercise, or defense of legal claims;
• you have objected to the processing of your personal data; in this case, you may request a restriction of processing until it is verified that our legitimate interests prevail.

D.6. Right to portability

You have the right to obtain a copy of your personal data that we process by automated means on the basis of your consent or for the performance of a contract. We will transmit this data in a commonly used and machine-readable format to you or to a controller designated by you, if technically feasible. The scope of the data provided may be limited so as not to interfere with the rights and freedoms of others.

D.7. Right to object

You have the right to object to the processing of your personal data that we process on the basis of our legitimate interest. We will stop processing your data if there are no other overriding reasons for processing or if the processing is not necessary for the establishment, exercise, or defense of legal claims or if you object to processing for direct marketing purposes.

E. Right to File a Complaint

In addition to the possibility of exercising your rights with our company, you can also file a complaint with the relevant supervisory authority, which is the Office for Personal Data Protection located at Pplk. Sochora 27, 17000 Prague 7.

F. Changes to This Information

This Privacy Policy is effective as of March 15, 2025. We are entitled to change this processing information from time to time, so please check it regularly. We will post any changes to this document in App.