Home » Privacy Policy

Privacy Policy

GDPR TERMS, PRIVACY POLICY, AND COOKIES POLICY

Effective Date: October 2025

Last Update: October 2025

1. INTRODUCTION

This GDPR Terms, Privacy Policy, and Cookies Policy (hereinafter referred to as the “Policy“) describes how Monblard analytics / Phasenetic labs, (ltd) s.r.o. (hereinafter referred to as “we,” “us,” or “our”) collects, uses, stores, and protects your personal data when you use our website (including www.monblard.com, www.monblard.com/analytics, and other sites we own and operate), online shop, software products, and related services (collectively referred to as the “Services“).

Our goal is to ensure transparency and compliance with all applicable personal data protection laws, particularly:

The General Data Protection Regulation (EU) 2016/679 (GDPR), and
The Act No. 18/2018 Coll. on Personal Data Protection and its amendments in the Slovak Republic.

We are committed to protecting your privacy and maintaining the highest standards of data protection, confidentiality, and integrity. If there are any terms you disagree with, please discontinue using our sites and our Services.

2. CONTROLLER / MANUFACTURER

The Controller / Manufacturer is:

Phasenetic Labs, ltd. (s.r.o.)
Address: Domkársky rad 695/8, Piešťany, 92101, Slovak Republic, EU (e-shop operation is also at Holubyho 4398/30, Piešťany 92101)
IČO: 52432491
DIČ: 2121057125
Responsible Person (Privacy Representative): Lukáš Zahurančík
Contact email: info(at)monblard.com

If you have any questions regarding the processing of your personal data, please contact us at the above email address.

3. WHAT PERSONAL DATA DO WE COLLECT

To process your order, create your account, communicate with you, and deliver our software and Services, we may collect the following personal data. We do not collect or store any additional data beyond what is listed here:

3.1 Data You Directly Provide to Us

Identification and contact data: First name, last name, title, billing and shipping address, country, phone number, email address.
Order and transaction data: Information about purchased products, order history, invoice data, account number, and email used for payment.
User account data: Login name, encrypted password, preferences, order history, support requests. We do not collect Credentials (such as passwords, password hints, and similar security information used for authentication etc.) nor Payment Data (such as your payment instrument number).
Contact form and communication data: Contents of emails, inquiries, and support messages.
Emails for digital materials and downloads: When you provide an email to download demo versions, free materials, or digital products.
Social media profile data: Name, profile picture, or public posts if you interact with our services through social media integrations.
Comments: When visitors leave comments on the site, we collect the data shown in the comments form, the visitor’s IP address, and browser user agent string to help spam detection. An anonymized string created from your email address (hash) may be provided to the Gravatar service.

3.2 Automatically Collected Information

Technical and behavioral data: IP address, browser type and version, operating system, device information, visited pages, time spent on site, referring URLs, and other analytics data (via cookies or analytical tools such as Google Analytics, Facebook Pixel). This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting purposes.
Marketing data: Newsletter subscription status, marketing preferences, email used for newsletter or demo downloads.
Media: If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS) included, as visitors can download and extract this data.

4. HOW WE COLLECT YOUR DATA

We collect your data in several ways:

Directly from you: When you create a user account, place an order, fill out a contact form, subscribe to our newsletter, download demo or software products, contact us via email or phone, or leave a comment. We collect it by fair and lawful means, with your knowledge and consent.
Automatically: Through cookies and analytical tracers for website functionality, analytics, and performance monitoring.
Through our payment gateways: When you place an order. The payment gateway shares your data listed in Article 3 to process your order securely.
From third parties or partners: Such as payment processors, marketing platforms, or analytical tools, or from publicly available data sources.

5. WHY WE COLLECT YOUR DATA AND LEGAL BASIS FOR PROCESSING (Art. 6(1) GDPR)

We collect and process your data for the following purposes, relying on the specified legal basis:

Purpose of Processing	Legal Basis (Art. 6(1) GDPR)
Processing orders and performance of contracts (delivery of goods, invoicing, order management, payment processing)	lit. b) – performance of a contract
Creation and management of customer accounts	lit. b) – performance of a contract
Accounting and fulfilment of legal obligations (tax and accounting, storage of invoices)	lit. c) – compliance with a legal obligation
Sending newsletters and marketing offers (only upon active consent)	lit. a) – consent of the data subject
Analysis of site traffic and user behaviour (improving services, website optimization)	lit. a) – consent (via cookie banner) / lit. f) – legitimate interest (for anonymised data)
Targeted advertising and remarketing (Google Ads, Meta Pixel/Facebook Pixel, Instagram)	lit. a) – consent (via cookie banner)
Communication (handling inquiries, technical support)	lit. f) – legitimate interest / lit. a) – consent (if explicitly provided)
Website security and fraud prevention	lit. f) – legitimate interest

Obligation to provide data: For purchases (name, address, email) – without them, we cannot fulfil the contract. Voluntary data: consent to marketing or cookies – always optional.

6. WHO PROCESSES YOUR DATA

6.1 Data Processor

Your data is processed only by authorized employees of Phasenetic Labs, ltd. (s.r.o.), responsible for technical support, invoicing, communication, and account management. Your data is not shared with any unauthorized third parties.

6.2 Recipients of Personal Data

We may share your personal data only when necessary for the purposes stated above, under proper Data Processing Agreements (Art. 28 GDPR). Recipients include:

IT and Hosting Providers: Ensuring platform functionality and data security.
Payment Gateways: Stripe, PayPal, GoPay, TrustPay (process payments independently).
Marketing and Analytical Tools: Google Ireland Ltd. (Analytics, Ads, Tag Manager), Meta Platforms Ireland Ltd. (Facebook, Instagram Pixel) – for targeted advertising, only with your consent.
Carriers and Postal Services: Slovenská pošta, DPD, GLS (for order delivery).
Email and Newsletter Services: Mailchimp, Brevo, SMTP server (for sending messages).
Public Authorities: If required by law or court order.
Mergers and Acquisitions: In case of a company merger, sale, or transfer of business ownership.

All partners are bound by GDPR-compliant data processing agreements.

7. HOW LONG WE STORE YOUR DATA

Type of Data	Retention Period
Orders and Invoices	5 years (required by accounting and tax laws).
Customer Accounts	As long as your account remains active, plus 2 years after closure.
Newsletter Subscriptions	Until you withdraw your consent.
Communication Data	Up to 2 years from the last interaction unless required longer for legal purposes.
Comments	The comment and its metadata are retained indefinitely so we can recognize and approve follow-up comments automatically.

In general, no purpose in this policy will require us to keep your personal information for longer than 2 years, unless a longer period is required for legal requirements (e.g., tax/accounting). When we have no ongoing legitimate business need to process your personal information, we will delete or anonymize it.

8. YOUR RIGHTS UNDER GDPR

If you are resident in the European Economic Area (EEA), you have the following rights:

Access (Art. 15): Know what data we hold. After logging into your account, you can download a ZIP archive containing all personal data stored about you.
Rectification (Art. 16): Correct inaccurate data.
Erasure (Art. 17): Delete your data (“right to be forgotten”). This does not include any data we are obliged to keep for administrative, legal, or security purposes.
Restriction (Art. 18): Limit data processing.
Data Portability (Art. 20): Receive and transfer your data.
Objection (Art. 21): Object to data use, especially for marketing.
Withdraw Consent (Art. 7(3)): Anytime, without affecting prior lawful processing. You may unsubscribe from marketing by clicking “unsubscribe” in the footer of our emails.

Procedure for Exercising Rights:

Data Deletion: You can delete your data directly from your account using the one-click deletion tool, or contact our support at info(at)monblard.com.
Response Time: All requests are answered within one (1) month, extendable by two (2) months for complex cases.
Verification: We may request proof of identity to verify requests; such proof will be deleted once verification is complete.
Complaint: You have the right to complain to your local data protection supervisory authority, which is the Office for Personal Data Protection of the Slovak Republic.

9. COOKIES POLICY AND TRACKING TECHNOLOGIES

Our website uses cookies and similar technologies (like web beacons and pixels) to improve user experience, analyze traffic, personalize content, and access or store information.

9.1 Types of Cookies Used

Necessary Cookies: Essential for website operation (shopping cart, login). This includes temporary cookies to determine if your browser accepts cookies (discarded when you close your browser), login cookies (last for two days), and screen options cookies (last for a year).
Analytical Cookies: Monitor site performance via Google Analytics and Tag Manager.
Marketing Cookies: For remarketing and ad personalization (Google Ads, Meta Pixel, Instagram).
Functional Cookies: Remember preferences like language and form entries.
Comments: If you leave a comment, you may opt-in to saving your name, email address, and website in cookies (last for one year).
Embedded content: Articles may include embedded content (e.g., videos, images, articles, etc.) from other websites, which may collect data about you, use cookies, and monitor your interaction.

9.2 Consent Management

Cookie consent is managed via CookieYes or another Cookies plugin/system, which ensures compliance with the GDPR and ePrivacy Directive. You can modify or withdraw consent at any time through the cookie icon or your browser settings. Blocking certain cookies may affect website functionality.

10. SECURITY OF YOUR DATA AND DATA BREACH

Your data is stored on secure servers protected by modern firewalls, antivirus software, SSL/TLS encryption, and limited access permissions. We apply strict technical and organisational measures to prevent unauthorized access, alteration, loss, or disclosure. Regular backups and vulnerability audits are performed.

Data Breach: In the event of a data breach that may pose a risk to your rights, we will notify the Office for Personal Data Protection of the Slovak Republic within 72 hours and affected users without undue delay if we believe you are likely to be at risk or serious harm.

Your Responsibility: Please keep your password confidential. You are responsible for maintaining the secrecy of your login credentials. Transmission of personal information to and from our Services is at your own risk; you should only access the services within a secure environment.

11. TRANSFER OF DATA OUTSIDE THE EU

Your data is primarily processed within the European Union (EU) and European Economic Area (EEA).

However, data may be transferred outside the EU (e.g., to the USA) when using:

Google Analytics / Google Ads
Meta Platforms (Facebook, Instagram)
Mailchimp / Newsletter tools

These transfers use Standard Contractual Clauses (SCCs) and additional safeguards such as data minimization and anonymization. Copies of such mechanisms are available upon request at info(at)monblard.com.

12. AUTOMATED DECISION-MAKING AND PROFILING

We do not engage in automated decision-making producing legal effects. Limited profiling (e.g., aggregated audience analytics, demographic segmentation) may occur for marketing optimization, never without consent.

13. CONTROLS FOR DO-NOT-TRACK FEATURES

Most web browsers and some mobile operating systems and mobile applications include a Do-Not-Track (“DNT”) feature. As no uniform technology standard for recognizing and implementing DNT signals has been finalized, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.

14. CHANGES TO THIS POLICY

We may revise this Policy at any time. Updated versions will be published on our website and take effect 180 days after publication, unless otherwise stated. Continued use of our Services after that period constitutes your acceptance of the revised Policy.

15. CONTACT INFORMATION

Phasenetic Labs, ltd. (s.r.o.)

Domkársky rad 695/8

Piešťany, 92101

Slovak Republic, EU

Email: info(at)monblard.com

Supervisory Authority: Inšpektorát SOI pre Trnavský kraj, Trhová 2, 917 01 Trnava 1.